Microsoft confirms planting a secret password in its software

May 14, 2001

Last Thursday, Microsoft acknowledged its programmers planted a secret code in its software that could be used to gain illegal access to many Internet sites worldwide. Two security experts detected the code, which was created during the dispute between Netscape and Microsoft over their versions of Internet-browser software.

While the software tycoon admits that the function was "absolutely against our policy," it plans to warn customers as soon as possible with an e-mail bulletin and advisory published on its corporate Web site. Microsoft is also asking customers to delete the file called "dvwssr.dll", which contains the offending password. It is installed on Microsoft's Internet-server software with FrontPage 98 extensions.

It's believed this software is used by many Web sites. By using the affected software, a hacker may be able to gain an access to key Web site management files and then might obtain some private information such as customer credit card numbers.