This update eliminates two security vulnerabilities in Microsoft Internet Information Server 4.0 (IIS 4.0) and Microsoft Internet Information Services 5.0 (IIS 5.0) running with Windows 2000. The vulnerabilities could be used to slow an affected Web server's response or to obtain the source code of certain types of files under very restricted conditions.

For additional information about this issue, read Microsoft Security Bulletin MS00-031. (This site may be in English.)