Microsoft releases IIS, Windows XP and Windows 2000 security patches

In yet another combo pack, Microsoft released three security bulletins. The bulletins which are labeled from moderate to critical, deal with Internet Information Service (IIS), Windows 2000 and Windows XP.

Bulletin: MS02-062
Title: Cumulative Patch for Internet Information Service
Risk: Moderate
Advisory:
Description:This patch is a cumulative patch that includes the functionality of all security patches released for IIS 4.0 since Windows NT 4.0 Service Pack 6a, and all security patches released to date for IIS 5.0 and 5.1.

Bulletin: MS02-063
Title: Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks
Risk: Critical
Advisory:
Description:A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP connections.

Bulletin: MS02-064
Title: Windows 2000 Default Permissions Could Allow Trojan Horse Program
Risk: Moderate
Advisory:
Description:On Windows 2000, the default permissions provide the Everyone group with Full access (Everyone:F) on the system root folder (typically, C:).