iDEFENSE Security Advisory 05.22.03 - iisPROTECT is a utility designed to provide password protection to web directories similar to the htaccess method utilized by Apache. When protected files are referenced through different URL-encoded representations, this authentication can be completely bypassed.
f460e1b02669bdb9fe3b25b9e246fb9c7a395b68df3500dac06e8767db51041b