A well-known hole in Microsoft's Web server software lets vandals easily access parts of Web sites belonging to big names such as The New York Times, Intel and Compaq Computer, one cybergang member said Friday. Calling himself "The-Rev," the vandal said his duo known as Sm0ked Crew targets Web sites that haven't been adequately secured. "Sm0ked Crew's aim is to show how even top domains' security can be breached by (easy) exploits," The-Rev wrote in an e-mail exchange with CNET's News.com. "We target the biggest and best sites on the Internet." The hole, known as the IIS Unicode exploit, takes advantage of a vulnerability in some versions of Microsoft's Internet Information Server.
|