Microsoft is investigating reports that have circulated on various Web sites of a vulnerability an attacker could use to <A HREF="http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1011904,00.html">bypass authentication</A> on a Web site running ASP.Net applications on Windows 2000 or Windows XP.