RE: Windows 2k SP2 breaks security fix should reapply

From: Chase Stone (cstoneat_private)
Date: Mon Jun 18 2001 - 10:43:25 PDT

Next message: KF: "SCO Tarantella Remote file read via ttawebtop.cgi"

Previous message: Peter Helms: "DCShop vulnerability"
In reply to: Colby Rice: "Windows 2k SP2 breaks security fix should reapply"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

SP2 does not break MS01-026 because that hotfix is not included in SP2 (see
http://www.microsoft.com/technet/security/w2ksp2.asp).  If you look at the
filename it is Q293826_W2K_SP3_x86_en.EXE which means it is going to be an
SP3 (aka post SP2) fix.  Any SP3 fix should be installed AFTER SP2 is
installed.


Chase Stone
IIS Security Consultant
Xato Network Security
www.xato.net



> -----Original Message-----
> From: Colby Rice [mailto:criceat_private]
> Sent: Wednesday, June 13, 2001 3:57 PM
> To: Bugtraq (E-mail)
> Subject: Windows 2k SP2 breaks security fix should reapply
>
>
> SP2 allows the decoding bug to work
> SP2 breaks the following patch and it should be reinstalled.
>
> http://www.microsoft.com/technet/security/bulletin/MS01-026.asp
>

Next message: KF: "SCO Tarantella Remote file read via ttawebtop.cgi"
Previous message: Peter Helms: "DCShop vulnerability"
In reply to: Colby Rice: "Windows 2k SP2 breaks security fix should reapply"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jun 18 2001 - 17:39:21 PDT