« Changing the URL in a Specific Manner May Expose Contents of a File »
http://support.microsoft.com/support/kb/articles/q267/5/60.asp
« IIS Stops Servicing HTR Requests »
http://support.microsoft.com/support/kb/articles/q260/8/38.asp
« Microsoft Security Bulletin (MS00-044) »
http://www.microsoft.com/technet/security/bulletin/ms00-044.asp
« Malformed HTR Request Returns Source Code for ASP Scripting Files »
http://support.microsoft.com/support/kb/articles/q260/0/69.asp