The "Look Ma, No Dots" bug allows users to get around the higher security levels in Internet Explorer for Internet sites - as opposed to intranet sites - by a simple calculation based on the site's IP address.
However, the user would have to modify IE4's default intranet Security Zone settings to be affected by the bug. Also, many corporate users Internet and intranets are served by proxy servers, which would block the hole, according to Bob Minor of CyberMill, an Internet consultancy in St. Louis.
"We take security issues very seriously and are dealing with the issue," said a Microsoft UK spokesman.