Microsoft repairs server security flaw

Microsoft says it has fixed a security flaw in its internet server software that allowed a hacker to gain control of a company's web server in a matter of minutes.

The flaw affected users of Windows NT's Internet Information Server 4.0 and Windows 2000's Internet Information Server 5.0, the company said.

The vulnerability originated from a flaw that makes the software run an extra security check each time a user requests a URL, or an internet address.

If a hacker knew what to look for, that person could use that second check as a window to break into the system.

PA