Microsoft confirms source code leak

Microsoft has confirmed that portions of its source code for Windows 2000 and Windows NT 4.0 had been leaked over the internet.

In a statement on its website, Microsoft said it takes the posting of this source of its dominant computer operating system very seriously.

"It's illegal for third parties to post Microsoft source code, and we take such activity very seriously.

"At this point it does not appear that this is the result of any breach of Microsoft's corporate network or internal security."

"We are currently investigating these postings and are working with the appropriate law-enforcement authorities," Microsoft said.

At this time there is no known impact on customers. Microsoft has said it will continue to monitor the situation.

The software giant added it has made Windows source code broadly available to universities, governments, developers, partners, as part of a number of programs including its shared source program for the past three years.

Jamie Gillespie, security expert at Queensland-based security monitoring organisation AusCERT, said it was still too early to anticipate the implications of this source code leak.

"Whenever code is release like this, more people going to be able to look at code. There is a slim chance that a person would discover a vulnerability. And there is a slim possibility that this person could expolit the vulnerability to create malicious code," Gillespie said.

A Microsoft spokesperson was not available for comment at time of print.

For previous iTnews coverage on this topic visit: http://www.itnews.com.au/storycontent.asp?ID=9&Art_ID=18321