<A target="_blank" href="http://www.theregister.co.uk/2009/05/18/iis6_file_pilfering_bug/">Microsoft's Internet Information Services version 6</A> has a bug that could allow a simple attack to succeed in reaching password protected files and folders without using the password.