Sparrow
Crystal Sky
Premium
join:2002-12-03
Sachakhand
1 edit | reply to JmanB
Re: Microsoft Security Bulletins for 12/9/2003
One Critical Update Available Now.
»v4.windowsupdate.microsoft.com/e···ault.asp |
|
GuruGuy
join:2002-12-16
Atlanta, GA | reply to JmanB
It's been available (AGAIN) for several hours....
--
GuruGuy |
|
Sparrow
Crystal Sky
Premium
join:2002-12-03
Sachakhand
| said by GuruGuy  :
It's been available (AGAIN) for several hours....
...late bloomer, I am!  |
|
skj
Welcome to the far side of reality
Premium,Mod
join:2002-04-04
Atlanta, GA
Host:
Charter HSI/CATV
Earthlink DSL
Embarq
ISP b2b etc
Cisco
2 edits | reply to JmanB
Something with today's date:
From: »www.microsoft.com/technet/treevi···-051.asp
Microsoft Security Bulletin MS03-051
Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360)
Issued: November 11, 2003
Updated: December 10, 2003
Version: 1.4
V1.4 December 10, 2003: Updated the FAQ section to reflect a new Windows Update offering on Windows XP. |
|
sashwa
Pixie Cat Crunchin' n Foldin'
Premium,Mod
join:2001-01-29
Alcatraz
clubs: 
 ·Comcast
·Alameda Power & Te..
Host:
Broadband Modem (H..
MSN
DSL Extreme
Windstream
Southeast Asian Br..
| Thanks, skj, for finding that. It must have come out late today. I had given up looking. I haven't gotten the Security Bulletin yet.
sash 
--
Visit the San Francisco Bay Area Forum |
|
JmanB
Premium,VIP
join:2003-08-27
Redmond, WA
 ·Vonage
| reply to JmanB
I'll make a seperate post on this but since the MS03-051 (KB810217) issue is being dicussed in this thread, I'll go ahead and post it here as well:
On Wednesday 10 December 2003, Windows Update and Software Update Services (SUS) prompted some Windows XP users who were not at risk to install the security update MS03-051. This was due to a change in the Windows Update detection mechanism. This is being updated to ensure that Windows Update and SUS only prompts those Windows XP users who need it to install the security update MS03-051.
Customers who installed the security update MS03-051 do not need to take any action; the update is fully tested and supported on Windows XP. However, those customers who determine that they do not need the Windows XP update for MS03-051 and want to remove it can do so as discussed in the "Security Update Information" section of the Security Bulletin.
More information is available in the FAQ section of the Security Bulletin.
»www.microsoft.com/technet/securi···-051.asp
If you have any questions regarding this alert after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary.
--
Jerry Bryant - Microsoft IT Communities. This posting is provided "AS IS" with no warranties, and confers no rights. |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
2 edits | reply to JmanB
>On Wednesday 10 December 2003, Windows Update and Software Update Services (SUS) prompted some Windows XP users who were not at risk to install the security update MS03-051. This was due to a change in the Windows Update detection mechanism. This is being updated to ensure that Windows Update and SUS only prompts those Windows XP users who need it to install the security update MS03-051.
I have XP Pro SP1 and I was NOT offered this patch in November. I am now offered it. From your statement above, I gather that the current offer of the patch is erroneous because if I needed it I would have been offered it in November. Fine.
However, the updated MS03-051 states that:
>If you have the fp4awel.dll file on your system, you have FrontPage Server Extensions 2000 installed.
I have this file so I conclude I DO need the patch. Correct?
However, the bulletin also states that:
>Windows XP does not have FrontPage Server Extensions installed by default
I did not install FrontPage Server Extensions. But I have the file indicating the extensions are installed.
This is all about as clear as mud. Do I or don't I need this patch???
One more thing:
> However, those customers who determine that they do not need the Windows XP update for MS03-051 and want to remove it can do so as discussed in the "Security Update Information" section of the Security Bulletin.
Windows Update informs me that "once you have installed this item, it cannot be removed". So which is correct? Windows Update that says it cannot be removed or the Security Bulletin that says it can be removed?????
Third edit...Ahhhh...I think I finally understand. I checked in add/remove programs and I do NOT have the extensions installed. (I looked in the right place under details in IIS and the box for the extensions is not checked). So, why is the fp4awel.dll file being used as the way to determine if the extensions are installed? I have the file, but the extensions are NOT installed so I don't need the patch. Simple as that. Why does MS03-051 make it so confusing?
I guess I'll know if I figured this out correctly if Windows Update stops offering me the patch.
--
"Everything can be taken from a man or woman
but one thing: the last of the human freedoms
- to choose one's attitude in any given set of
circumstances, to choose one's destiny."
Victor Frankl - Man's Search for Meaning
|
|
GuruGuy
join:2002-12-16
Atlanta, GA | reply to JmanB
The knowledge base article still have a November date on it and does NOT reflect the updated December date......the technet article DOES have the updated date stamp on it....someone needs to update the KB.
--
GuruGuy |
|
