http://dailynews.yahoo.com/h/zd/20010501/tc/ms_races_to_fill_in_serious_security_hole_1.html

Found this article as well:
http://www.msnbc.com/news/567192.asp?cp1=1

All the serious holes in this server is one of the reasons I'd never even consider IIS or Win2K as a server platform. Amazing that with all it's money and all the automated testing resources that Mickey$oft has, they continue to ship products with serious security holes in them.

-t

Even more news...
http://dailynews.yahoo.com/h/zd/20010503/tc/hacker_exploits_microsoft_server_flaw_1.html

CERT Advisory CA-2001-10 Buffer Overflow Vulnerability in Microsoft IIS 5.0
Original release date: May 02, 2001

http://www.microsoft.com/technet/security/bulletin/MS01-023.asp

has the entire problem