Microsoft Internet Server

["Irwin Lazar" <lazar @ netevolve . com>]

Greetings all.
In a recent Network Security class the instructor mentioned that 
there is a known hole in the Microsoft Internet Information Server 
that can be exploited.  He also mentioned that a patch is available 
from Microsoft.  I searched their web site today but couldn't find 
anything.

Does anyone know if this patch is part of their service packs or if 
it has to be seperately installed, and if so, does anyone know where 
to obtain it?

Thanks in advance.
Irwin