[12623] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Windows NT update carries bug

daemon@ATHENA.MIT.EDU (Tony Plastino)
Wed Nov 17 13:53:59 1999

Mime-Version: 1.0
Content-Type: text/plain
Message-Id:  <80A472FD2779D211A31000104B27D0E8098921@freerange.com>
Date:         Tue, 16 Nov 1999 09:40:38 -0800
Reply-To: Tony Plastino <TonyP@FREERANGE.COM>
From: Tony Plastino <TonyP@FREERANGE.COM>
X-To:         "ken.williams@EY.COM" <ken.williams@EY.COM>,
              BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM

Here are some more details...

from Lotus

http://www.support.lotus.com/sims2.nsf/c7835bf039c01dc285256688006fae9b/6975
6a1ae2a307308525682400799d32?OpenDocument

From M$, but you have to read the small print

http://www.microsoft.com/ntserver/nts/downloads/recommended/SP6/allSP6.asp

Tony Plastino - Internet Security Engineer
tony.plastino@luminant.com

> -----Original Message-----
> From:	Williams, Ken [SMTP:ken.williams@EY.COM]
> Sent:	Monday, November 15, 1999 1:18 PM
> To:	BUGTRAQ@SECURITYFOCUS.COM
> Subject:	Windows NT update carries bug
>
> This NEWS.COM (http://www.news.com/) story has been sent to you from
> ken.williams@ey.com
>
> Message from sender:
> have not seen this mentioned anyplace else yet.
>
> -- ken williams
> -------------------------------------------------------
> Windows NT update carries bug
> By Joe Wilcox
> November 15, 1999, 12:25 p.m. PT
> http://home.cnet.com/category/0-1003-200-1439342.html
>
> A software update for Microsoft's Windows NT operating system  introduced
> a bug that could potentially cripple Lotus Notes unless companies
> compromise network security.
>
>   The bug in Windows NT Service Pack 6 prevents users from accessing Lotus
> Notes without administrator rights--the highest and broadest level of
> access typically reserved for  network managers. Companies generally
> restrict user access to prevent  security breaches or catastrophic
> accidental changes to PCs or servers.
>
>   The bug puts companies that have applied the service pack in a bind,
> possibly  forcing them to grant users temporary administrator privileges
> in order to  use Lotus Notes.
>
>   Microsoft periodically releases service packs as a way of adding
> features to  Windows NT 4 or fixing bugs.
>
>   The Redmond, Washington-based software maker is advising customers using
> Lotus Notes not to apply Service Pack 6 until a fix is released later this
> week.
>
> -------------------------------------------------------

home help back first fref pref prev next nref lref last post