[16713] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Microsoft Security Bulletin (MS00-063)

daemon@ATHENA.MIT.EDU (Boyce, Nick)
Mon Sep 11 17:11:59 2000

Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Message-Id:  <C1B2296C5D3ED11182DB00805F9A097E01505F4D@GBHBM001>
Date:         Mon, 11 Sep 2000 18:28:25 +0100
Reply-To: "Boyce, Nick" <nick.boyce@EDS.COM>
From: "Boyce, Nick" <nick.boyce@EDS.COM>
To: BUGTRAQ@SECURITYFOCUS.COM

On 9th.Sept.2000, Justin Lintz asked :

> Since your on the topic of not being able to download patches, I still
have
> not been able to download the IIS Hotfix checking tool, all i get is 404
> errors.  Anyone experiencing the same?

Yes, we are.  I actually emailed this to Bugtraq (unapproved, so didn't
appear) and to Microsoft themselves (<secure@microsoft.com>), on Monday
4th.Sept.2000 :

>> we've just released a new tool that
>> will help administrators ensure that their servers are up to date on
>> all IIS 5.0 security patches.  The tool, called HFCheck, is available
>> for download at http://www.microsoft.com/technet/security/tools.asp.
>
> A) Unfortunately, I see the web page, but on clicking the download link :-

>     HTTP Error 404
>     404 Not Found
[...]
> B) Can we have a version of this tool for IIS 4.0 please ?

and later that day Microsoft replied to me :

> Thanks for your email.  We are aware of the broken link and
> have asked our web team to correct the page.  Due to the
> US holiday - this may not occur until sometime on Tuesday.
>
> Once we have received feedback from this version (IIS4), we
> will look to incorporate the feedback into this tool (or similar)
> for IIS4 and other applications.

(PS: I took "feedback from this version (IIS4)" to mean "... (IIS5)" in that
last paragraph)

Nick
EDS Healthcare, Bristol, UK

home help back first fref pref prev next nref lref last post