[22025] in bugtraq

home help back first fref pref prev next nref lref last post

Re: URGENT MICROSOFT SECURITY ANNOUNCEMENT

daemon@ATHENA.MIT.EDU (Eric)
Mon Jul 30 23:10:13 2001

Message-Id: <5.1.0.14.0.20010730135522.029768a8@mail.tellurian.net>
Date: Mon, 30 Jul 2001 14:05:09 -0700
To: Andrew Greenburg <agreenbu@in-span.net>, <bugtraq@securityfocus.com>
From: Eric <ews@tellurian.net>
In-Reply-To: <4.3.2.7.2.20010730153149.00b6e570@jefferson.in-span.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

Patch has not been updated or re-released.  The NT4 patch should have a 
file size of around 242,616.  Try expanding the hotfix with the /x 
switch.  If it doesn't expand, you have a corrupted download - could be 
something in a caching proxy server between you and the download server.

The specific file in the patch is idq.dll - dated 5-25-2001 - with a file 
version of 5.00.1781.3

The NT4 post SP6a Security Rollup Package also contains the fix - the 
idq.dll has been version incremented - but it is the same file - no 
additional changes (version number incremented to aid in the installation 
process to ensure that it gets on the box.)  The version number of the file 
in the SRP is 5.00.1782.4

More info on SRP:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/security/news/nt4srp.asp

--eric

At 03:35 PM 7/30/2001 -0500, Andrew Greenburg wrote:
>At 11:13 PM 7/30/2001 +0300, Dan Uscatu wrote:
>>is anyone able to run that patch on winnt4 ? mine just says "error executing
>>program" or "this is not a valid win32 application"... and yes i have tried
>>several times to download it, including plain "save as...", reget, getright
>>etc.
>>
>>duscatu@phenomedia.ro
>
>It worked fine for me, but they may have put a different revision in place 
>since I downloaded it.
>This patch is included in the Microsoft post-SP6a security rollup; You 
>might try installing it instead:
>http://support.microsoft.com/support/kb/articles/q299/4/44.asp?ID=299444
>--
>  Andrew M. Greenburg                   |   agreenbu  @  indianaone  .  net
>  Web Site Administrator                |   (317)234-1001     (317)234-1328
>  Indiana Web Academy                   |   Phone             Fax



home help back first fref pref prev next nref lref last post