MS05-025 for NT4 with IE6 SP1

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Security problems using XP SP2 I've got a service running as Local System account that calls CreateProcessWithLogonW to run a script as a certain administrator account. Like so: STARTUPINFOW si; PROCESS_INFORMATION pi; ZeroMemory( &si, sizeof(si) ); si.cb = sizeof(si); ZeroMemory( &pi, sizeof(pi) ); CreateProcessWithLogonW( L"admin", // username NULL, // domain L"admin", // password 0, // logon flags NULL, // No application name (use command line) &command[0], // command line 0, // No creation flags. NULL, // Use parent's environment block. NULL, // Use parent's starting directory. &si, // Pointer to STARTUPINFO structure. &pi ) // Pointer to PROCESS_INFORMATION structure. ) This worked fine until Service Pack 2 was installed, now the call fails with 'Access is denied'. However, if i change the service to run as the same 'admin' account used in the Create.. call there is no problem. I'd rather not have to do this. Anyone else had similar problems and know of a better (proper) solution?? Thanks in advance Paul Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72821
  - 2
    - How to make my portable drive accessible to my account only on two Windows XP SP2? Hello How to make my portable drive accessible to my account only at my work and home Windows XP SP2 computers? My work Windows XP SP2 computer is in a domain. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72807
  - 3
    - CA autoenroll i am responsible of a network which is described as follows: 4 sites, (1,2,3,4) site (1) is center of replicatin to sites (2,3,4), while it have a high speed wan to site (2), the wan connection to sites (3,4) is some how slow with high latency. which forced me to use smtp site links as replication failed using IP site links, which lead me to install an enterprise CA, i did it before and everything was working ok, this time i face an autoenrollment access denied error which i fear will result in a problem in smtp replication. do i have a work around for this error? & what might be causing it? i know it might seem an Active directory question but it is replication is working ok between site (1,2) and also i got CA issuing cert's for basic EFS, the Root DC, & a Win XP computer, but i don't know why it isnot issuing for the other DC's? help is grealty appeciated as i have two sites (3,4) not replicating to root DC, thanks -- Eng. M William -- Eng. M William Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72802
  - 4
    - Wallpaper Changed And Disabled Hi. This is my first time writing in here because I have never had anything this severe happen to me before. To begin I do have and always have had running Microsoft AntiSpyware and AVG AntiVirus. So it suprised me how this problem occured. Here's how it begins. I leave my computer on over night with active internet connection downloading the Battlefield 2 demo :) I wake up next morning to check the game out only to find my wallpaper has been changed to "System Stopped" and some annoying antispyware program that keeps popping up called "SpySherriff" that I never downloaded before in my life. The really mest up part is that when I try to change my wallpaper back to normal going under Display Properties and Desktop everything is all grayed out and I can't change or click anything. I ran virus checks and spyware checks with my programs. But found nothing! If you guys have any help to offer please please please let me know. Thanks. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72797
  - 5
    - How can you send 'malware' over port 443 to mywebserver ? Often I hear people saying that one of the benefits of an application layer firewall (let's say ISA 2004) is that SSL traffic can be unencrypted, scanned and then re-encrypted and sent to the respective webserver. My question is this: What's the mechanism that could allow somebody to send, let's say a virus or a malware over port 443 that could hurt my OWA server, for example ? Since people is retrieving data from such web server (that is now protected by ISA), I don't understand well the process that you could use to submit data over this SSL tunnel and hit the webserver that way. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72793
  - 6
    - Check if specific updates are installed Hello, Does some know some specific tool that can I check if 2 critical updates are installed on my workstations? How can I get this information from my OS? For example: I have to check if the patch MS05-0XX are installed in all my workstations (about 200 computers), I have the hostname of these computers. The idea is create some .bat file that can get each hostname and it do the checkup, it will generate a file that I can be able to import in MS Excel to generate the report. The OS installed on my computers are WIN2K and WINXP. Obs.: I don't have the SMS; MBSA check all patchs, I just want to check if 1 or 2 are installed. Thanks in advanced, -- Filipe Lussana Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72792
  - 7
    - On-demand video won't work for me From: Thomas L. Jones, Ph.D., Computer Science The subject of this complaint is an on-demand video located at: http://www.microsoft.com/events/series/securityexperts.mspx#TechNet%20Webcasts You may have to take steps to work around a problem caused by the line break. I must say, it is difficult indeed to "demand" this video. I was already registered for Passport, but soon the software started asking me this, and asking me that. Finally, it asked me for my name, absolutely the last thing a program ever asks in a computer context. I mean, what is my name? Thomas Jones? Thomas L Jones? Thomas L. Jones? Dr. Thomas Jones, etc., etc. Then I was forced to change browsers. If the webcasts are Internet Explorer only, please say so at the top level. And get this: The videos are seemingly that d--- broadband only content, UNLABELED broadband only content. Finally, having tried for more than an hour, I gave up, cussing. Thomas L. Jones, Ph.D., curmudgeon Member, Society for the Abolition of Unlabeled Broadband-only Content DrJones6txnospamyq@alum.MIT.edu Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72788
  - 8
    - Cant get rid of W32.Sober.O@mm I have norton anti +++ on my pc. tried the tool provided by Symantec / Norton + Mcafee (stinger). Still i cant get rid of this god damn worm. Can anyone give me a simplified version of what it does. How to get it out of my system. Regards Timmy Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72781
  - 9
    - Problems logging out of Passport OK, I have been having repeated inability to log out of hotmail, by clicking "signout." It produces a screen that displays a red "x" next to hotmail meaning it was unable to log out. I have a suspicion that my account may have been co-opted by someone, as my computer has alerted that the certificate is not recognized and i received an email from an acquantaince that suggested I had sent them something I know I hadn't. Any ideas? Thanks. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72779
  - 10
    - mass storage device I have a flash USB 2 memory stick which was working perfectly. It now thinks it is a security device (not a mass storage device) and the computer (or any computer) can't open it - any suggestions what I've done or how I can access the valuable data on the stick Thanks Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72770
  - 11
    - Smart Card based Logon & User ID and Password Hello group, Regarding Smart Card based logon, all of the documention I'm reading indicates that in order for this to work, the username field in AD must contain the EID number off of the Smart Card. My question is, is there a way to maintain the username field as an actual name instead of an IED? -- Nestor L. Cabrera Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72753
  - 12
    - Firewall and Group Policy Hello: I currently have disabled MS firewall on LAN connections and enabled on Wireless and Dialup not allowing file and print sharing or remote desktop/assistance. For my users it is more important to keep them secure when not on our LAN which has a nice hardware firewall to protect them. I have been toying with the idea of enabling the firewall on XP machines and maybe 2003 servers through Group Policy allowing the exceptions necessary for me to remotely administer the services, update virus software, install patches, etc. My concern is Windows firewall does not allow exception for each individual connection, seems it is a one for all configuration. If you have Group Policy firewall connections will they also be applied when the user is not physically connected to the domain? Even if they sign onto domain using cached credentials? Needless to say it is more important to protect my laptops over unsupervised wireless and dialup connections than on our protected LAN. It would be a nice improvement to MS firewall to allow different exceptions for each connection. Thanks, Cindy Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72752
  - 13
    - Do not have permission to view or edit permission settings for a folder Hello I get "You do not have permission to view or edit the current permission settings for (folder name), but you can change auditing settings." I how to regain access to this folder? This happened because I mistakenly removed every account except "CREATOR OWNER" and my account at work "äÍÉÔÒÉÊ ëÏÐÎÉÞÅ× (Kopnichev@clearing.ru)" from my portable HDD Security Properties and changed the owner to "äÍÉÔÒÉÊ ëÏÐÎÉÞÅ× (Kopnichev@clearing.ru)". Please, Help! Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72737
  - 14
    - Access is denied to some my folders. How to regain access? Hello I mistakenly removed every account except "CREATOR OWNER" and my account at work "äÍÉÔÒÉÊ ëÏÐÎÉÞÅ× (Kopnichev@clearing.ru)" from my portable HDD Security Properties, and access to some folders on my portable HDD became denied. How to regain the access to all my HDD folders? Thanks. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72733
  - 15
    - Will I have full control over my portable HDD at home computer? Hello My portable HDD Security Properties contain "CREATOR OWNER" and my account at work "äÍÉÔÒÉÊ ëÏÐÎÉÞÅ× (Kopnichev@clearing.ru)". Will I have full control over my portable HDD at home computer? How to make sure that I will have full control over my portable HDD at home computer? Thanks. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72726
  - 16
    - anti virus I downloaded virus protection software "AntiVir" because my NAV (Norton) did not catch some Trojans and Backdoors (I have current definitions). The "AntiVir" detects all any idea why? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72722
  - 17
    - MS05-25 Security Update Am expieriencing a problem with systems that have loaded this security update. It affects their ability to open document library folders in a web folders view on a sharepoint server. Has anyone else seen this and if so is there a fix? Thanks Kurt Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72711
  - 18
    - Certificate Authority type I was brought into an environment without good documentation and am trying to figure out what types of CA's are present. I have 2 servers (both domain controllers). One is a Root Certificate authority, the other is a subordinate. I'm trying to determine if they are enterprise, or standalone. Is there someway I can tell which it is? I can't find it in the MMC. Is there a registry key that would tell me what kind it is? I would assume they are enterprise but the previous admin wasn't very good and left on bad terms so I can't ask and can't afford to assume. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72709
  - 19
    - Using delegation to grant dc event log access Does anyone know if there are delegation options available that would allow you to give a group Read access to domain controller event logs? Either a single dc or all of them in a domain. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72702
  - 20
    - Service Account Certficates Hello Everyone, I have issued a certificate to a Service Account's certificate store. Does anyone know how to turn on certificate authentication for service accounts? Is it a registry change or local security setting or something else? thanks, Terence Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72701
  - 21
    - what type of certificate authority? I was brought into an environment without good documentation and am trying to figure out what types of CA's are present. I have 2 servers (both domain controllers). One is a Root Certificate authority, the other is a subordinate. I'm trying to determine if they are enterprise, or standalone. Is there someway I can tell which it is? I can't find it in the MMC. Is there a registry key that would tell me what kind it is? I would assume they are enterprise but the previous admin wasn't very good and left on bad terms so I can't ask and can't afford to assume. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72700
  - 22
    - webserver + file&print sharing enabled In my organization we have a Win2003+IIS6.0 server with a website available on the Internet. Such webserver resides in the internal network. File & Print Sharing for MS Networks is enabled on this box. We have internal users that access this server via UNC path and update the website there by dumping content to the \\myserver\share-iis. Question is this, if I use a reverse proxy (ISA 2004) to publish such website that resides on this Win2003 server, do you consider it is alright leaving this box as is ? I mean, leave it with access via NetBIOS (F&P sharing) enabled so that people can use from the internal network ? Or it would be considerably more secure work setting up a staging server and leave this box only as a webserver ? Then put a tool on the Webserver that could upload content from the 'staging' server ? The point is here is this, do you think the fact I am publishing this via ISA 2004 (or any similar product) makes this secure enough to keep File & Print sharing turned on ? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72699
  - 23
    - Automatically updated? I have XPHome, SP3. I have my PC set to automatically download and install updates. The only problem I have with this is that I don't know how to tell if all updates have in fact been installed. I'm assuming that the automatic updates also include the update put out monthly. How do I find out if all everything is in fact up to date? Thanks for any advice. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72697
  - 24
    - File Permission Issue I'm having an interesting issue with file/folder permissions. I create a folder on a share drive and populate it with files. When I go back to the security tab, it tells me that I only have permission to view the security of the files even though Everyone/Full control is the permission setting and I am the owner of the folder. Any thoughts? Thanks Dan Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72694
  - 25
    - Protecting CD copy Hi to all. Does anyone know a good procedure to protect cdÂ´s against ilegal copy? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72689
- Next
  - 1
    - "Reverse" proxy available. Any need to put web servers in DMZ ? This is the discussion here: I have ISA 2004 setup as a workgroup in the DMZ successfully publishing my OWA 2003. I have a web server (win2003, IIS6.0) that pulls data from a SQL 2000 db. Such web server is currently in the "internal" network. Web server requires no authentication. In my view it makes more sense keep such web server as is in the internal network and publish it via "ISA" to take advantages of HTTP filters and other things ISA offers. Instead, do you see any advantage security wise of moving such webserver to the DMZ instead ? That will require a whole in the firewall to allow traffic to the SQL db which resides in the internal network. If you can help, advise on pros and cons of placing such web server in the DMZ instead of keeping ISA->Web server(Internal). Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72688
  - 2
    - Automatically updated? I am running XP2 (Home) with SP2. I have my automatic updates set to download and update automatically. Is this something I should do, or should I have it set to download then notify me to update? The only problem I have with setting it as fully automated is that I don't know how to tell if all the latest updates have in fact been installed, such as the monthly updates. Can someone advise? Thanks! Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72687
  - 3
    - windows media player 9 when I play music with windows media player 9 (I prefer this edition) after about 10 seconds the slider bar on the bottom and the visualizations freeze for about 10 seconds then carry on, sometimes it happens again during the rest of play. I have done a factory refresh, no different also reinstalled W,M,P still no different, is there something wrong with W,M,P or the hardware? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72685
  - 4
    - New MSSecure.XML Version 2005.06.15.0 Now Available MSSECURE.XML Data Version 2005.06.15.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified yesterday, June 15, 2005, and is now available for all supported languages (English, French, German and Japanese). Today's release contains NO NEW BULLETINS - but fixes the following data error: MSXML 3.0 incorrectly reporting SP7 as the latest service pack. MSXML 3.0 SP5 is the latest publicly available MSXML 3.0 service pack, although SP7 can be installed on Windows 2000 platforms when SQL Server 2000 SP4 is installed, and can be found on Windows Server 2003 machines. MSXML 3.0 SP7 is not available as a separate download at this time. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72682
  - 5
    - Dicussion on where RADIUS server should be All network diagrams I've seen so far indicates that a RADIUS server (Windows IAS, ACS, or whatever) should be placed in the 'internal' network and establish communications with DC's there. Then if an external user attempts to connect via VPN (DMZ), then I would allow only the ports necessary from the VPN concentrator to the RADIUS server and pre-authenticate users at that point. I have a security guy fellow here that tells me that the RADIUS server should be placed in the "DMZ" instead. Does this make sense at all ? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72681
  - 6
    - Win32 security limitations: why? Hi, Trying to spawn a process from an impersonated client from within IIS-ASP I came across some (in my opinion) weird behaviour. 1) CreateProcess and ShellExecute both create the new process using the current process-token, yielding in a process running under the IWAM_xxx account. This happens even if the client was an anonymous user! I just don't understand this behaviour. Other operating systems I know will spawn the process from the *current* security context, so under the imporsonated client. Doing it on the MS-way enables anonymous users to create process with a higher security level. Thats a major security risk! Or not? Can someone put some light on it, or point me to more detailed information about why MS implemented security the way thay did? 2) Its even impossible with CreateProcessAsUser() to create the process under the imporsonated account because the SeAssignPrimaryTokenPrivilege must be held (and by default nobody does...) 3) I also needed to load the user hive, so I tried LoadUserProfile(). Also this API needed a privilege: the SeRestorePrivilege. Since the imporsonated user is a "normal" user, it didn't held this privilege, so the account couldn't load its own profile! Why is that? I understand that loading another user's profile is a security risk, but loading your own profile is definitly not. I would like to understand more about the why's. Please help. Thanks a lot. Peter Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72675
  - 7
    - Data decryption EFS Well World here's my problem: I have some very important encrypted data (EFS) that I need to decrypt from my previous system (WinXP Pro). I also have the following files from previous system: C:\Documents and Settings\dorde\Application Data\Microsoft\Crypto\RSA\* ...\SystemCertificates\My\Certificates\* ...\SystemCertificates\My\Keys\* but I don't have, so called, "Master Key". I know all passwords from previous system. So, is there anything I can do? Please, Thanks Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72674
  - 8
    - Visited site history When I click on the address line and type www. and then a letter, several addresses show up that I have not visited. They do not appear in the history when I click on the down arrow. Where are these sites coming from? Are they attached to another site I'm visiting? Or is someone else in my house trying to go to sites they don't want me to know about? Thanks for the help! Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72670
  - 9
    - A virus, or not? I routinely ran spybot and ad-aware, in addition to my AVG virus checker and the on-line virus check with Trend Micro and RAV. None of them detected any malware. Then I installed the MS Antispyware program. It immediately found a Trojan: iteye, located in c:/windows\system32\notpad.exe . It is shown as a high threat level. Why do all these other programs not detect something as obvious as notpad.exe?? -- Walter www.rationality.net - Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72665
  - 10
    - Determine whether an admin is viewing other users mailboxes? Hi all, I am posting this up to the security and exchange groups. Is there a way to determine whether an indivudual who has permissions to open other users mailboxes is actually doing so? For example can you view the outlook profile of the individual in question? or an event log entry? We have a possible abuse of privilege situation but are unsure as to whether this type of behavior can be verified. Any advice is appreciated. Thanks. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72658
  - 11
    - File Permissions are not inheriting On an SBS2003 server I have the company folder set to allow Users, Administators, System , and Owner Full control over files and directories. These permissions are set to inherit and propogate to child objects. The problem happens when a user creates a new folder from their workstation via a network share. The permissions on this new folder do not inherit chosing to give the user, and administrator control. If I go to the company folder and re-apply the "replace permissions entrons on all child objects" things are reset until the user creates another object. be it file or folder) I don't understand what is going on here as this is not a problem on any of the other servers I manage. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72653
  - 12
    - Security Log We are trying to log account management and some account logons through the default domain controller gp, but we are unable to get anything to show up in our security log on the pdc, even if we reset the password directly on the server. We have got this to work very easily on our test dc but have no idea why we don't get notifications on our prod dc. Any suggestions? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72652
  - 13
    - Auditing Whom delete an file or folder. Hi, It is possible and how to set Audit so I can log which user at which workstation delete an file or folder? Thank, S. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72647
  - 14
    - WInXP SP3 Why not release a SP3 for WinXP that incluldes all the latest updates? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72646
  - 15
    - Links If you get a link in an email or see one on the forum, what is the best way to tell if the link is safe. How are some ways to check it before clicking on it? Thanks Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72637
  - 16
    - IUSR_WIN2K3 needs "Set Key" and "Create Subkey" permission to read I have an IIS ISAPI Extension running as the Internet Guest Account (IUSR_WIN2K3), and I'm having trouble getting it to read some registry keys. The RegOpenKeyEx() function is able to open the registry fine, but when I do a RegQueryValueEx(), it returns "5" (ERROR_ACCESS_DENIED). I've found that if I assert permissions to "Set Value" and "Create Subkeys", then I AM able to read the value (even if "Query Value" isn't allowed!). If I assert everything except "Create Subkeys", it won't work. etc, etc... I'm completely baffled by this behavior. This is a test development win2k3/IIS6 box that doesn't have any major software installed on it. Any idea what could cause this? Thanks Jason Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72636
  - 17
    - Audit Account Management We have set under our domain group policy to audit success and failure on our account management. We had an instance of someone resetting our domain admin password and don't want it to happen again. But, even after turning on this under our default domain gp and default domain controller gp, we are not getting any messages under our security event log. Anyone have an idea that we have missed? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72631
  - 18
    - New MSSecure.XML Version 2005.06.14.0 Now Available MSSECURE.XML Data Version 2005.06.14.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, June 14, 2005, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 10 new bulletins, 7 of which are fully supported by MBSA. There are also 3 re-releases for previously released bulletins listed below: June Re-releases 1) MS02-035 (SQL Tool re-release) - there are no vulnerable files to identify, so there is no automated detection for this item. This will appear in MBSA as an MBSA Note Message as it did with the original release (see MS02-035 and KB306460 for details) 2) MS05-004 (ASP .Net re-release) - not supported by MBSA, but supported by February edition of the EST Tool. 3) MS05-019 (TCP re-release)- this patch replaces the original MS05-019 release. Only the patch in today's release is sufficient to resolve this vulnerability; neither the original patch nor the subsequent hot-fix are sufficient to resolve this issue. New June Bulletins 4) MS05-025 (IE Cumulative) - Supersedes MS05-020 for all matching instances (W2003 SP1 is not superseded). 5) MS05-026 (HTML Help) - Supersedes MS05-001, MS04-023 and MS03-044 in all cases; does NOT replace MS02-055 even though files appear similar due to an ACL change that is not present in future updates. 6) MS05-027 (SRV.SYS) - Supersedes MS03-024 for all instances; supersedes MS02-070 for WinXP SP1 instance only. 7) MS05-028 (Web Client) 8) MS05-029 (Exchange 5.5) - Support for all Exchange 5.5 SP4 instances except when Exchange OWA is configured as a standalone IIS application that links to an Exchange installation on another server. For this case, EST must be used (see below) 9) MS05-030 (Outlook Express) - not supported by MBSA. Supported by June EST tool (see below). 10) MS05-031 (MS Interactive Training) - not supported by MBSA. Supported by June EST tool (see below). 11) MS05-032 (MSAgent) 12) MS05-033 (Telnet) - Windows Telnet instances detected by MBSA. Services for UNIX instances of Telnet require June EST tool (see below) 13) MS05-034 (ISA Server 2000) - not supported by MBSA. Supported by June EST tool (see below). ---------------------------- There are a number of technical issues with today's release that may be valuable to enterprise administrators: MSXML 3.0 SP5 and SP7: For customers with MSXML 3.0 SP7 (present on Windows Server 2003 SP1 or installed with SQL Server 2000 SP4) or MSXML 3.0 SP5 - both are now considered acceptable versions for the 'latest service pack' warning in MBSA. This resolves a previous warning that reported "MSXML 3.0 SP7 is installed, SP5 is the latest available service pack for this product." MS05-012 (OLE) and KB894391: MBSA would report a 'greater than expected' warning if the post MS05-012 hot-fix was applied. This has been fixed. MS05-009 (WMP9) and KB892313: MBSA would report a 'greater than expected' warning if the post MS05-009 hot-fix was applied. This has been fixed. ---------------------------- What is the Enterprise Update Scanning Tool (EST)? As part of an ongoing commitment to provide detection tools for complex updates for bulletin-class issues that are not supported by MBSA, a stand-alone tool may be provided for certain bulletins. Microsoft will evaluate the detection and deployment complexity of each bulletin, and provide detection support based on the specifics of each release. When a detection tool is created for a specific bulletin, customers will be able to script running the tool from a command line interface, and process the results using an XML output file. Detailed documentation will be provided with the tool to ensure customers can leverage it quickly. See the following link for details http://support.microsoft.com/default.aspx?id=894193 Additional detection for the 4 bulletins (Services for UNIX instance of Telnet, Outlook Express, Interactive Training, ISA Server 2000) not fully supported by MBSA can be obtained by downloading the June edition of the Enterprise Scan Tool (EST) located at the link above. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72630
  - 19
    - Microsoft Security Bulletin(s) for June 2005 Follow up set to microsoft.public.security June 14, 2005 Today Microsoft released the following Security Bulletin(s). Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: http://www.microsoft.com/technet/security/Bulletin/ms05-Jun.mspx Critical Bulletins: Cumulative Security Update for Internet Explorer (883939) http://www.microsoft.com/technet/security/Bulletin/ms05-025.mspx Vulnerability in HTML Help Could Allow Remote Code Execution (896358) http://www.microsoft.com/technet/security/Bulletin/ms05-026.mspx Vulnerability in Server Message Block Could Allow Remote Code Execution (896422) http://www.microsoft.com/technet/security/Bulletin/ms05-027.mspx Important Bulletins: Vulnerability in Web Client Service Could Allow Remote Code Execution (896426) http://www.microsoft.com/technet/security/Bulletin/ms05-028.mspx Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179) http://www.microsoft.com/technet/security/Bulletin/ms05-029.mspx Cumulative Security Update in Outlook Express (897715) http://www.microsoft.com/technet/security/Bulletin/ms05-018.mspx Cumulative Security Update in Outlook Express (897715) http://www.microsoft.com/technet/security/Bulletin/ms05-030.mspx Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (898458) http://www.microsoft.com/technet/security/Bulletin/ms05-031.mspx Moderate Bulletins: Vulnerability in Microsoft Agent Could Allow Spoofing (890046) http://www.microsoft.com/technet/security/Bulletin/ms05-032.mspx Vulnerability in Telnet Client Could Allow Information Disclosure (896428) http://www.microsoft.com/technet/security/Bulletin/ms05-033.mspx Cumulative Security Update for ISA Server 2000 (899753) http://www.microsoft.com/technet/security/Bulletin/ms05-034.mspx Re-Released Bulletins: SQL Server Installation Process May Leave Passwords on System (Q263968) http://www.microsoft.com/technet/security/Bulletin/ms02-032.mspx ASP.NET Path Validation Vulnerability (887219) http://www.microsoft.com/technet/security/Bulletin/ms05-004.mspx Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179) http://www.microsoft.com/technet/security/Bulletin/ms05-029.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72629
  - 20
    - AD GetObject fails in ASP page when using smartcard logon Hi, I am having problems accessing Active Directory from VBscript in an ASP web application when it is configured for smartcards using Directory Service certificate mapping. The system scenario is as follows. Server 1 - W2K3 Server as Domain Controller with Active Directory Server 2 - W2K3 Server running IIS 6.0 and Exchange 2K3 Server Client 1 - W2K3 Server as client with CAC smartcard and IE 6 IIS is configured for Directory Service mapping, SSL, "Enable client certificate mapping" and Accept Client certificate. The client uses a CAC smartcard to logon and invokes a Web application on Server 2 via IE 6. Web app on Server 2 loads ASP page using VBScript to call GetObject("LDAP://CN=client1,CN=Users,DC=SERVER1,DC=COM") on User object to retrieve user attributes. GetObject fails with Err.Number = -2147016672 (0x80072020 - ERROR_DS_OPERATIONS_ERROR) In IIS Mgr properties for web app Virtual Directory, select Security/Edit and uncheck "Enable client certificate mapping". Now the user is prompted for username and password and GetObject succeeds. Does anybody have any ideas? PS I am told that if IIS cert mapping is used instead of DS mapping, it works OK. Thanks, MikeC Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72627
  - 21
    - It is patch day (10).... Patch your systems! Thanks Microsoft, -Im Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72626
  - 22
    - June Patches - where are they? it's 8am PST and nothing So, it's June 14th - where are the patches? Does MS release them at a certain time - like 10am PST or something? I'm very very eager to get them today, but I don't feel like sitting here at my browser clicking links and refreshing every 10 min in some hope they released them. Would be nice if there was a specific TIME to go along w/the specific day. Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72624
  - 23
    - Administrator password Hi, We have been told we have to change our Domain Administrator password. Is this as simple as going into A/D and reseting the password or is there more involved. Any advice would be grateful. Thx Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72621
  - 24
    - all in one fax, copier, scanner.........safe? are there any security issues with connecting an all-in-one to a networked machine? ie- is it possible to hack into the device via the phone line and then gain access to the computer~ domain? Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72620
  - 25
    - Compare Security config between two w2k servers Can Security Configuration and Analysis be used to compare two server's security configs? I have created a new database and a blank template file. Using these to load Security Configuration and Analysis and then Analyze Computer Now results in the Database Setting being Undefined and the Computer Setting showing the server's config. Now I want to "save/import/update" the Database Setting with the Computer Setting. Then open this database on another server to "highlight" security config differences. Many thanks Dan Tag: MS05-025 for NT4 with IE6 SP1 Tag: 72619

Anyone know if there is a patch for IE6-SP1 in NT4 other than
IE6.0sp1-KB883939-SMS-Deploy-KB899950-x86-ENU.EXE? This patch apparently
runs properly however MBSA keeps alerting to the fact that the patch is
missing... Can I conclude that in fact there is no way of patching NT4 in
order to address MS05-025?

Any help into this matter would be appreciated.

Thanks

JCO

Top

Re: MS05-025 for NT4 with IE6 SP1 by PA

PA
Mon Jun 20 16:57:57 CDT 2005

See the section quoted below from the FAQ on this page:
http://www.microsoft.com/technet/security/bulletin/ms05-025.mspx

<QP>
Extended security update support for Microsoft Windows NT Workstation 4.0
Service Pack 6a and Windows 2000 Service Pack 2 ended on June 30, 2004.
Extended security update support for Microsoft Windows NT Server 4.0 Service
Pack 6a ended on December 31, 2004. I'm still using one of these operating
systems, what should I do?
</QP>
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

José Carlos Oliveira wrote:
> Anyone know if there is a patch for IE6-SP1 in NT4 other than
> IE6.0sp1-KB883939-SMS-Deploy-KB899950-x86-ENU.EXE? This patch apparently
> runs properly however MBSA keeps alerting to the fact that the patch is
> missing... Can I conclude that in fact there is no way of patching NT4 in
> order to address MS05-025?
>
> Any help into this matter would be appreciated.
>
> Thanks
>
> JCO

Top