ZDNet: A chronology of the eEye decisionJun 19, 1999, 10:44 (5 Talkback[s])
(Other stories by Brett Glass)
"The blow-by-blow behind why eEye posted a way to break into NT servers."
"The eEye Security Team was in a quandary. It had been more than one week since they'd discovered a gaping security hole in Microsoft's Internet Information Server -- one which left nearly every NT-based Web server on the Internet open to a complete takeover by a malicious hacker.
"They'd sent detailed information about the bug to Microsoft Corp. (Nasdaq:MSFT), as well as to some clients with whom they had non-disclosure agreements. Microsoft had still not released a patch for the elementary programming mistake, and had suddenly stopped responding to e-mail messages asking about the problem."