This patch is a cumulative patch that includes the functionality of all security patches released for IIS 4.0 since Windows NT 4.0 Service Pack 6a, & all security patches released to date for IIS 5.0 & 5.1. A complete listing of the patches superseded by this patch is provided below, in the section titled "Additional information about this patch". Before applying the patch, system administrators should take note of the caveats discussed in the same section.
Microsoft Internet Information Server 4.0
Microsoft Internet Information Services 5.0 & 5.1