By: Staff Reports
Backdoor To Web-site Management Files Found
Microsoft officials confirmed to The Wall Street Journal today that a secret password
was found in the company’s Internet-server software with Frontpage 98 extensions.
The file, called ‘dvwssr.dll,’ could allow hackers to access Web-site management files
on sites using the MS server software and then, navigate their way into credit card
numbers or other secure areas of the site. Microsoft said that customers should delete
the file to prevent a break-in.
Accompanying the backdoor password code was a jab at Microsoft rival Netscape,
‘Netscape engineers are weenies,’ most likely a byproduct of the intense rivalry of the
two companies before America Online Inc. acquired Netscape.
Steve Lipner, manager of Microsoft’s security response center, told the Journal that the
backdoor password is ‘absolutely against our policy’ and a firing offense.
(c) Copyright 2000, Editor & Publisher