CryptoAPI bug makes 99% of Windows servers vulnerable