Results 1 to 8 of 8

Thread: service packs

  1. April 22nd, 2003, 10:02 PM #1
    Ru$kb0y
    Ru$kb0y is offline
    Banned
    Join Date
    Dec 2002
    Posts
    29

    Unhappy service packs

    Iv gotta cd with service pack 3, which covers service pack 1&2 for microsoft windows 2000 pro. just wondering does this also cover all the hot fixes and security patches for IIS 5 up until the release of service pack 3. or will i still need to download all the hot fixes.

    thanks Rboy.
    Reply With Quote Reply With Quote
  2. April 22nd, 2003, 10:04 PM #2
    pr0letariat
    pr0letariat is offline
    Member
    Join Date
    Dec 2002
    Posts
    59
    always, i repeat always download the latest patches/hotfixes...
    esp. with IIS

    Even though you might patche something twice, it's better to be safe then sorry!
    When you connect to your ISP, you are potentially opening your computer to the world. There are \'naughty people\' out there who enjoy breaking into other people\'s computers. Give some thought to the security of your computer...
    http://www.AntiOnline.com/sig.php?imageid=360
    Reply With Quote Reply With Quote
  3. April 22nd, 2003, 10:06 PM #3
    Lv4
    Lv4 is offline
    Senior Member
    Join Date
    Mar 2003
    Posts
    372
    the service packs are "supposed" to have all the hot fixes and patches up to the release of the SP itself... but I have found several missing in previous ones. It doesn't take all that long to download the hot fixes and patches anyway... plus there are probably several critical ones that came out after the SP anyway.

    Go surf the knowlegebase on MS, and check out the IIS pages there to find the latest greatest stuff.

    Give a man a match and he will be warm for a while, light him on fire and he will be warm for the rest of his life.
    Reply With Quote Reply With Quote
  4. April 22nd, 2003, 10:08 PM #4
    XDrack
    XDrack is offline
    Member
    Join Date
    Mar 2003
    Posts
    46
    It supoust that the SP shuld get it, but bether be shure and analyse youre IIS.

    xDRack
    Reply With Quote Reply With Quote
  5. April 22nd, 2003, 10:15 PM #5
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    You should check the hotfixes and see if they will need to be applied. It used to -- and I'm not sure if it still happens -- but if you applied a SP after a hotfix or vice versa it might break the "fix" and make the vulnerability accessible. Microsoft's website should have information on what order SPs, hotfixes, etc. need to be applied.

    Even after setting all the SPs, hotfixes, etc. a vulnerability check of the server using a tool like SAINT, SARA, Retina and/or NMAP should be done to double-check for vulnerabilities or other problems. And remember to document everything so you can rebuild it in case of worse case scenario problems.

    Good luck.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  6. April 22nd, 2003, 10:15 PM #6
    Ru$kb0y
    Ru$kb0y is offline
    Banned
    Join Date
    Dec 2002
    Posts
    29
    done this search on the site for service patches for IIS 5 got these results


    http://www.microsoft.com/technet/tre...t1=go&isie=yes


    although there is no mention on WebDAV vulnerability??? i thought that came out recently...


    Rboy
    + thanks for help...
    Reply With Quote Reply With Quote
  7. April 22nd, 2003, 10:18 PM #7
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    ru$kboy,

    Would these help?

    http://www.iisanswers.com/articles/Webdav.htm

    http://www.entercept.com/news/uspr/03-17-03.asp
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  8. April 22nd, 2003, 10:32 PM #8
    Ru$kb0y
    Ru$kb0y is offline
    Banned
    Join Date
    Dec 2002
    Posts
    29
    thanks guys will disable WebDAV manually, from regedit, although need to put service pack 3 on first...

    micro$oft say...

    Start Registry Editor (Regedt32.exe).
    Locate and click the following key in the registry:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters

    On the Edit menu, click Add Value, and then add the following registry value:
    Value name: DisableWebDAV
    Data type: DWORD
    Value data: 1

    Restart IIS. This change does not take effect until the IIS service or the server is restarted.

    ...neway lol

    Rboy
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules