Security firm: MS flaw over-hyped
ZDNet | at | by Mike
A recently-revealed security flaw in Microsoft's Internet Information Server may have been over-hyped, according to testing figures from a UK-based Internet research firm. Netcraft's figures also showed that the large Web-hosting businesses that gained prominence in the 1990s are continuing to lose out to smaller, customer-supported firms. According to figures from Netcraft, not many IIS servers are likely to be open to an attack that exploits a flaw in Microsoft's Data Access Components (MDAC), despite the flaw receiving a "critical" rating by Microsoft last week. Netcraft, which tests hundreds of servers conducted by the company's security business over the last two years have shown few sites with the affected MDAC component turned on.