Win2000
A vulnerability was reported in Microsoft's Internet Information Server (IIS) web server. A remote user may be able to present an invalid certificate that will be interpreted by the server as a valid certificate, allowing them to impersonate other authorized users.

This issue has been addressed in Service Pack 3