FrontPage Flaw Shows Security Still Challenges Microsoft

© 2002 Gartner, Inc. and/or its Affiliates. All Rights Reserved. Reproduction and distribution of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner's research may discuss legal issues related to the information technology business, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The opinions expressed herein are subject to change without notice.


	Analyst Comments On 25 September 2002, Microsoft acknowledged that hackers could exploit a flaw in FrontPage Server Extensions 2000 to cause a denial-of-service attack or possibly run arbitrary code on the server. The latest vulnerability is nothing new — FrontPage Server Extensions have long been a security risk — but it does indicate that security remains a serious problem at Microsoft. Gartner forecasts that, due to legacy code and resistance to cultural change, Microsoft will not deliver necessary security improvements before 2004 (see "Microsoft Takes Steps Toward Business-Strength Security").