<<< Security bulletins 04-011; 04-012; 04-013; 04-014 >>>

April 13, 2004
Today Microsoft released the following Security Bulletins.

Note: www.microsoft.com/technet/security and www.microsoft.com/security are
authoritative in all matters concerning Microsoft Security Bulletins! ANY
e-mail, web board or newsgroup posting (including this one) should be
verified by visiting these sites for official information. Microsoft never
sends security or other updates as attachments. These updates must be
downloaded from the microsoft.com download center or Windows Update. See the
individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft
security notices, it is recommended that you physically type the URLs into
your web browser and not click on the hyperlinks provided.

Bulletin Summaries:

Windows: http://www.microsoft.com/technet/security/Bulletin/winapr04.mspx

Critical Bulletins:

MS04-011 - Security Update for Microsoft Windows (835732)
http://www.microsoft.com/technet/security/Bulletin/MS04-011.mspx

MS04-012 - Cumulative Update for Microsoft RPC/DCOM (828741)
http://www.microsoft.com/technet/security/Bulletin/MS04-012.mspx

MS04-013 - Cumulative Security Update for Outlook Express (837009)
http://www.microsoft.com/technet/security/Bulletin/MS04-013.mspx

Important Bulletins:

MS04-014 - Vulnerability in the Microsoft Jet Database Engine Could Allow
Code Execution (837001)
http://www.microsoft.com/technet/security/Bulletin/MS04-014.mspx

Re-Released Bulletins:
The following bulletins have been re-released to advise of the availability
of updates for various versions of Microsoft Exchange Server. Please see the
bottom of each bulletin for revision information.

MS00-082 - Patch Available for 'Malformed MIME Header' Vulnerability
http://www.microsoft.com/technet/security/Bulletin/MS00-082.mspx

MS01-041 - Malformed RPC Request Can Cause Service Failure
http://www.microsoft.com/technet/security/Bulletin/MS01-041.mspx

MS02-011 - Authentication Flaw Could Allow Unauthorized Users To
Authenticate To SMTP Service
http://www.microsoft.com/technet/security/Bulletin/MS02-011.mspx


MS03-046 - Vulnerability in Exchange Server Could Allow Arbitrary Code
Execution (829436)
http://www.microsoft.com/technet/security/Bulletin/MS03-046.mspx

This represents our regularly scheduled monthly bulletin release (second
Tuesday of each month). Please note that Microsoft may release bulletins out
side of this schedule if we determine the need to do so.

If you have any questions regarding the patch or its implementation after
reading the above listed bulletin you should contact Product Support
Services in the United States at 1-866-PCSafety (1-866-727-2338).
International customers should contact their local subsidiary.
--
--
http://www.sbslinks.com/really.htm

anonymous
Tue Apr 13 13:23:19 CDT 2004

Okay, don't pass out over this, but I think I only have Service Pack 1 for Exchange installed on SBS2000. It looks like there is a Service Pack 3 out for Exchange. JUST TO BE SURE, I'm going to ask before I do it

I've been having problems this week with incoming faxes not routing to an internet address that is then forwarded to a shared folder within Exchange in SBS2000.

I was thinking that I'd have to re-install Exchange, but thought maybe, after finding out that I don't have SP3 for Exchange installed, that if I intalled Exchange SP3, it may solve the problem

So, the question is, should I install Exchange SP3? If the answer is YES, then I need to stop all the Exchange processes in Services, right? Is there anything else that I need to do before I install Exchange SP3

Torrey Laue
Modern Travel Service
www.moderntravel.ne
www.rainbowskytravel.com

Javier
Tue Apr 13 14:20:19 CDT 2004

Dude... *run* before Susan sees you and get SBS SP1a:
http://www.microsoft.com/sbserver/downloads/sp1a.asp

It includes all current service packs for SBS (including Win2k SP4 and
Exchange 2k SP3) and several SBS-specific patches... if you download it make
sure you download ISA SP1 and SQL SP3 and install them (if you are using
ISA/SQL).

After that you still need to apply several patches that have been going
around for a while. It is VERY important that you keep your server (and the
workstations up to date)... this is NOT optional, is a REQUIREMENT.

Cheers,

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

"Torrey Lauer" <anonymous@discussions.microsoft.com> wrote in message
news:81023933-9371-4BB1-ADE6-BBC92B3AD07B@microsoft.com...
> Okay, don't pass out over this, but I think I only have Service Pack 1 for
> Exchange installed on SBS2000. It looks like there is a Service Pack 3
> out for Exchange. JUST TO BE SURE, I'm going to ask before I do it.
>
> I've been having problems this week with incoming faxes not routing to an
> internet address that is then forwarded to a shared folder within Exchange
> in SBS2000.
>
> I was thinking that I'd have to re-install Exchange, but thought maybe,
> after finding out that I don't have SP3 for Exchange installed, that if I
> intalled Exchange SP3, it may solve the problem.
>
> So, the question is, should I install Exchange SP3? If the answer is YES,
> then I need to stop all the Exchange processes in Services, right? Is
> there anything else that I need to do before I install Exchange SP3?
>
> Torrey Lauer
> Modern Travel Services
> www.moderntravel.net
> www.rainbowskytravel.com

Torrey
Tue Apr 13 15:22:05 CDT 2004

Javier,

How do I know if I've already installed SBS SP1a before?
I think I may have done that already. Is there a way to
check if I have already before re-doing it?

Also, how do I make sure I need to do the install update
ISA SP1? I've tried looking for the version number and
service pack number for ISA, but I can't find it.

Torrey Lauer
Modern Travel Services
www.moderntravel.ne
www.rainbowskytravel.com
>-----Original Message-----
>Dude... *run* before Susan sees you and get SBS SP1a:
>http://www.microsoft.com/sbserver/downloads/sp1a.asp
>
>It includes all current service packs for SBS (including
Win2k SP4 and
>Exchange 2k SP3) and several SBS-specific patches... if
you download it make
>sure you download ISA SP1 and SQL SP3 and install them
(if you are using
>ISA/SQL).
>
>After that you still need to apply several patches that
have been going
>around for a while. It is VERY important that you keep
your server (and the
>workstations up to date)... this is NOT optional, is a
REQUIREMENT.
>
>Cheers,
>
>--
>Javier [SBS MVP]
>
><< SBS ROCKS !!! >>
>
>"Torrey Lauer" <anonymous@discussions.microsoft.com>
wrote in message
>news:81023933-9371-4BB1-ADE6-BBC92B3AD07B@microsoft.com...
>> Okay, don't pass out over this, but I think I only have
Service Pack 1 for
>> Exchange installed on SBS2000. It looks like there is
a Service Pack 3
>> out for Exchange. JUST TO BE SURE, I'm going to ask
before I do it.
>>
>> I've been having problems this week with incoming faxes
not routing to an
>> internet address that is then forwarded to a shared
folder within Exchange
>> in SBS2000.
>>
>> I was thinking that I'd have to re-install Exchange,
but thought maybe,
>> after finding out that I don't have SP3 for Exchange
installed, that if I
>> intalled Exchange SP3, it may solve the problem.
>>
>> So, the question is, should I install Exchange SP3? If
the answer is YES,
>> then I need to stop all the Exchange processes in
Services, right? Is
>> there anything else that I need to do before I install
Exchange SP3?
>>
>> Torrey Lauer
>> Modern Travel Services
>> www.moderntravel.net
>> www.rainbowskytravel.com
>
>
>.
>

Javier
Tue Apr 13 17:02:18 CDT 2004

Hi!

Open the administrator management console and click on about (same thing you
do to see how many licenses are installed). You will see a line that says:
Version 2000 with Service Pack 1. That's the SBS SP level.

Now go to start-> run-> winver and you will see the Win2k SP level. If its
Service Pack 4 (and you saw Service Pack 1 in the previous step) then you
have SBS SP1a. If you see SP3 then you only have SBS SP1 and you need the
SP4 for Windows 2000.

Confused yet? :-)

Now lets go to the ISA part (which I had to look up!)...

ISA Management-> Servers and Arrays-> %servername%-> Computers-> right click
server name-> properties-> on the ISA Server version it should say
3.0.1200.166.

Also, remember to run HFNETCHK, Windows Update and/or MSBA for the status of
your service packs/patches in Windows 2000.

Cheers,

--
Javier [SBS MVP]

<< SBS ROCKS !!! >>

"Torrey Lauer" <anonymous@discussions.microsoft.com> wrote in message
news:1946001c42194$fd1bf200$a601280a@phx.gbl...
> Javier,
>
> How do I know if I've already installed SBS SP1a before?
> I think I may have done that already. Is there a way to
> check if I have already before re-doing it?
>
> Also, how do I make sure I need to do the install update
> ISA SP1? I've tried looking for the version number and
> service pack number for ISA, but I can't find it.
>
> Torrey Lauer
> Modern Travel Services
> www.moderntravel.ne
> www.rainbowskytravel.com
>>-----Original Message-----
>>Dude... *run* before Susan sees you and get SBS SP1a:
>>http://www.microsoft.com/sbserver/downloads/sp1a.asp
>>
>>It includes all current service packs for SBS (including
> Win2k SP4 and
>>Exchange 2k SP3) and several SBS-specific patches... if
> you download it make
>>sure you download ISA SP1 and SQL SP3 and install them
> (if you are using
>>ISA/SQL).
>>
>>After that you still need to apply several patches that
> have been going
>>around for a while. It is VERY important that you keep
> your server (and the
>>workstations up to date)... this is NOT optional, is a
> REQUIREMENT.
>>
>>Cheers,
>>
>>--
>>Javier [SBS MVP]
>>
>><< SBS ROCKS !!! >>
>>
>>"Torrey Lauer" <anonymous@discussions.microsoft.com>
> wrote in message
>>news:81023933-9371-4BB1-ADE6-BBC92B3AD07B@microsoft.com...
>>> Okay, don't pass out over this, but I think I only have
> Service Pack 1 for
>>> Exchange installed on SBS2000. It looks like there is
> a Service Pack 3
>>> out for Exchange. JUST TO BE SURE, I'm going to ask
> before I do it.
>>>
>>> I've been having problems this week with incoming faxes
> not routing to an
>>> internet address that is then forwarded to a shared
> folder within Exchange
>>> in SBS2000.
>>>
>>> I was thinking that I'd have to re-install Exchange,
> but thought maybe,
>>> after finding out that I don't have SP3 for Exchange
> installed, that if I
>>> intalled Exchange SP3, it may solve the problem.
>>>
>>> So, the question is, should I install Exchange SP3? If
> the answer is YES,
>>> then I need to stop all the Exchange processes in
> Services, right? Is
>>> there anything else that I need to do before I install
> Exchange SP3?
>>>
>>> Torrey Lauer
>>> Modern Travel Services
>>> www.moderntravel.net
>>> www.rainbowskytravel.com
>>
>>
>>.
>>

Ted
Wed Apr 14 13:40:36 CDT 2004

Also, if you are at Exchange SP1, you do not have SBS SP1
or SP1a installed. Part of that is Exchange SP3 (As well
as ISA SP1).

>-----Original Message-----
>Hi!
>
>Open the administrator management console and click on
about (same thing you
>do to see how many licenses are installed). You will see
a line that says:
>Version 2000 with Service Pack 1. That's the SBS SP
level.
>
>Now go to start-> run-> winver and you will see the
Win2k SP level. If its
>Service Pack 4 (and you saw Service Pack 1 in the
previous step) then you
>have SBS SP1a. If you see SP3 then you only have SBS SP1
and you need the
>SP4 for Windows 2000.
>
>Confused yet? :-)
>
>Now lets go to the ISA part (which I had to look up!)...
>
>ISA Management-> Servers and Arrays-> %servername%->
Computers-> right click
>server name-> properties-> on the ISA Server version it
should say
>3.0.1200.166.
>
>Also, remember to run HFNETCHK, Windows Update and/or
MSBA for the status of
>your service packs/patches in Windows 2000.
>
>Cheers,
>
>--
>Javier [SBS MVP]
>
><< SBS ROCKS !!! >>
>
>"Torrey Lauer" <anonymous@discussions.microsoft.com>
wrote in message
>news:1946001c42194$fd1bf200$a601280a@phx.gbl...
>> Javier,
>>
>> How do I know if I've already installed SBS SP1a
before?
>> I think I may have done that already. Is there a way
to
>> check if I have already before re-doing it?
>>
>> Also, how do I make sure I need to do the install
update
>> ISA SP1? I've tried looking for the version number and
>> service pack number for ISA, but I can't find it.
>>
>> Torrey Lauer
>> Modern Travel Services
>> www.moderntravel.ne
>> www.rainbowskytravel.com
>>>-----Original Message-----
>>>Dude... *run* before Susan sees you and get SBS SP1a:
>>>http://www.microsoft.com/sbserver/downloads/sp1a.asp
>>>
>>>It includes all current service packs for SBS
(including
>> Win2k SP4 and
>>>Exchange 2k SP3) and several SBS-specific patches... if
>> you download it make
>>>sure you download ISA SP1 and SQL SP3 and install them
>> (if you are using
>>>ISA/SQL).
>>>
>>>After that you still need to apply several patches that
>> have been going
>>>around for a while. It is VERY important that you keep
>> your server (and the
>>>workstations up to date)... this is NOT optional, is a
>> REQUIREMENT.
>>>
>>>Cheers,
>>>
>>>--
>>>Javier [SBS MVP]
>>>
>>><< SBS ROCKS !!! >>
>>>
>>>"Torrey Lauer" <anonymous@discussions.microsoft.com>
>> wrote in message
>>>news:81023933-9371-4BB1-ADE6-
BBC92B3AD07B@microsoft.com...
>>>> Okay, don't pass out over this, but I think I only
have
>> Service Pack 1 for
>>>> Exchange installed on SBS2000. It looks like there
is
>> a Service Pack 3
>>>> out for Exchange. JUST TO BE SURE, I'm going to ask
>> before I do it.
>>>>
>>>> I've been having problems this week with incoming
faxes
>> not routing to an
>>>> internet address that is then forwarded to a shared
>> folder within Exchange
>>>> in SBS2000.
>>>>
>>>> I was thinking that I'd have to re-install Exchange,
>> but thought maybe,
>>>> after finding out that I don't have SP3 for Exchange
>> installed, that if I
>>>> intalled Exchange SP3, it may solve the problem.
>>>>
>>>> So, the question is, should I install Exchange SP3?
If
>> the answer is YES,
>>>> then I need to stop all the Exchange processes in
>> Services, right? Is
>>>> there anything else that I need to do before I
install
>> Exchange SP3?
>>>>
>>>> Torrey Lauer
>>>> Modern Travel Services
>>>> www.moderntravel.net
>>>> www.rainbowskytravel.com
>>>
>>>
>>>.
>>>
>
>
>.
>

Henry
Fri Apr 16 01:36:49 CDT 2004

RTF

--
Henry Craven {SBS-MVP}
Melbourne Australia

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>
wrote in message news:%23l%23pH4XIEHA.2972@TK2MSFTNGP12.phx.gbl...
> April 13, 2004
> Today Microsoft released the following Security Bulletins.
>
> Note: www.microsoft.com/technet/security and
www.microsoft.com/security are
> authoritative in all matters concerning Microsoft Security Bulletins!
ANY
> e-mail, web board or newsgroup posting (including this one) should be
> verified by visiting these sites for official information. Microsoft
never
> sends security or other updates as attachments. These updates must be
> downloaded from the microsoft.com download center or Windows Update.
See the
> individual bulletins for details.
>
> Because some malicious messages attempt to masquerade as official
Microsoft
> security notices, it is recommended that you physically type the URLs
into
> your web browser and not click on the hyperlinks provided.
>
> Bulletin Summaries:
>
> Windows:
http://www.microsoft.com/technet/security/Bulletin/winapr04.mspx
>
> Critical Bulletins:
>
> MS04-011 - Security Update for Microsoft Windows (835732)
> http://www.microsoft.com/technet/security/Bulletin/MS04-011.mspx
>
> MS04-012 - Cumulative Update for Microsoft RPC/DCOM (828741)
> http://www.microsoft.com/technet/security/Bulletin/MS04-012.mspx
>
> MS04-013 - Cumulative Security Update for Outlook Express (837009)
> http://www.microsoft.com/technet/security/Bulletin/MS04-013.mspx
>
> Important Bulletins:
>
> MS04-014 - Vulnerability in the Microsoft Jet Database Engine Could
Allow
> Code Execution (837001)
> http://www.microsoft.com/technet/security/Bulletin/MS04-014.mspx
>
> Re-Released Bulletins:
> The following bulletins have been re-released to advise of the
availability
> of updates for various versions of Microsoft Exchange Server. Please
see the
> bottom of each bulletin for revision information.
>
> MS00-082 - Patch Available for 'Malformed MIME Header' Vulnerability
> http://www.microsoft.com/technet/security/Bulletin/MS00-082.mspx
>
> MS01-041 - Malformed RPC Request Can Cause Service Failure
> http://www.microsoft.com/technet/security/Bulletin/MS01-041.mspx
>
> MS02-011 - Authentication Flaw Could Allow Unauthorized Users To
> Authenticate To SMTP Service
> http://www.microsoft.com/technet/security/Bulletin/MS02-011.mspx
>
>
> MS03-046 - Vulnerability in Exchange Server Could Allow Arbitrary Code
> Execution (829436)
> http://www.microsoft.com/technet/security/Bulletin/MS03-046.mspx
>
> This represents our regularly scheduled monthly bulletin release
(second
> Tuesday of each month). Please note that Microsoft may release
bulletins out
> side of this schedule if we determine the need to do so.
>
> If you have any questions regarding the patch or its implementation
after
> reading the above listed bulletin you should contact Product Support
> Services in the United States at 1-866-PCSafety (1-866-727-2338).
> International customers should contact their local subsidiary.
> --
> --
> http://www.sbslinks.com/really.htm
>