Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: 7 New M$ Paches for July?

  1. #1

    Exclamation 7 New M$ Paches for July?

    Check out Microsoft's site here http://www.microsoft.com/security/bu...s/default.mspx . It looks like we have 7 patches coming out today: 018-024.

    Here's the high level scoop:

    http://www.microsoft.com/security/bu...7_windows.mspx

    Scorecard: 7 total...
    • 2 Critical
    • 4 Important
    • 1 Moderate
    • Of the 7, three (3) are re-releases replacing patches from issued in 2003 & 2004

    Critical Bulletins:
    MS04-022 - Vulnerability in Task Scheduler Could Allow Code Execution (841873)
    http://www.microsoft.com/technet/sec.../MS04-022.mspx
    * Impact: Remote code execution
    * Affected Software: Windows 2000, Windows XP

    MS04-023 - Vulnerability in HTML Help Could Allow Code Execution (840315)
    http://www.microsoft.com/technet/sec.../MS04-023.mspx
    * Impact: Remote code execution
    * Affected Software: Windows 2000, Windows XP, Server 2003, Windows 98, Windows ME
    * Note: Windows NT not affected by default but if have IE 5.5 SP2 or IE 6 SP1 installed it is

    Important Bulletins:
    MS04-019 - Vulnerability in Utility Manager Could Allow Code Execution (842526)
    http://www.microsoft.com/technet/sec.../MS04-019.mspx
    * Impact: Local evevation of privilege
    * Affected Software: Windows 2000
    * NOTE: Replaces MS03-025!!!

    MS04-020 - Vulnerability in POSIX Could Allow Code Execution (841872)
    http://www.microsoft.com/technet/sec.../MS04-020.mspx
    * Impact: Local evevation of privilege
    * Affected Software: Windows 2000, Windows NT

    MS04-021 - Security Update for IIS 4.0 (841373)
    http://www.microsoft.com/technet/sec.../MS04-021.mspx
    * Impact: Remote code execution
    * Affected Software: Windows NT

    MS04-024 - Vulnerability in Windows Shell Could Allow Remote Code Execution (839645)
    http://www.microsoft.com/technet/sec.../MS04-024.mspx
    * Impact: Remote code execution
    * Affected Software: Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows 98, Windows ME
    * NOTE: Replaces MS03-027 on Windows XP ONLY!!!

    Moderate Bulletins:
    MS04-018 - Cumulative Security Update for Outlook Express (823353)
    http://www.microsoft.com/technet/sec.../MS04-018.mspx
    * Impact: Denial of Service
    * Affected Software: Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows 98, Windows ME
    * Affected Components: Outlook Express 5.5 & 6
    * NOTE: Replaces MS04-013!!!
    /edit 22:05 UTC
    * Modified note on MS04-024 regarding what patch it replaces.
    * Added note on MS04-023 about NT vulnerability if IE installed.

  2. #2
    Senior Member
    Join Date
    May 2004
    Posts
    519
    [optimism] well at least they are bringing out patches i suppose, and not just trying to hide the need for them [/optimism]

  3. #3
    Senior Member
    Join Date
    Feb 2004
    Posts
    620
    LOL at fyrewall

    /me heads off to run Windows update... again....

  4. #4
    Macht Nicht Aus moxnix's Avatar
    Join Date
    May 2002
    Location
    Huson Mt.
    Posts
    1,752
    I would guess that all of these new 'Vulnerabilities' are already addressed in SP2 RC2 then, because of all the patches that have come out in the 2 months I have had the RC2 version, I have never had a patch come up for it.
    \"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, Champagne in one hand - strawberries in the other, body thoroughly used up, totally worn out and screaming WOO HOO - What a Ride!\"
    Author Unknown

  5. #5
    Senior Member
    Join Date
    Apr 2002
    Posts
    214
    Anyone else having trouble installing these updates? When I go to windowsupdate.microsoft.com, it scans my computer right, and I select the updates, they download, but when it goes to install them it freezes, and then eventually says Install failed.

    I even tried each individually, but still freezes...
    Either get busy living or get busy dying.

    -The Sawshank Redemption

  6. #6
    Macht Nicht Aus moxnix's Avatar
    Join Date
    May 2002
    Location
    Huson Mt.
    Posts
    1,752
    Originally posted here by yanksfan
    Anyone else having trouble installing these updates? When I go to windowsupdate.microsoft.com, it scans my computer right, and I select the updates, they download, but when it goes to install them it freezes, and then eventually says Install failed.

    I even tried each individually, but still freezes...
    I had that happen to me once. I simply turned off my firewall, and every thing was fine. (Of course, I turned it on again, after updating.)
    \"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, Champagne in one hand - strawberries in the other, body thoroughly used up, totally worn out and screaming WOO HOO - What a Ride!\"
    Author Unknown

  7. #7
    Senior Member gore's Avatar
    Join Date
    Oct 2002
    Location
    Michigan
    Posts
    7,177
    Like the GREAT admin I am, I installed all patches today on the one XP box I own, and of course on my Mom's box....Which I forgot to do....Damn...Oh well, I said great not perfect.

  8. #8
    Senior Member
    Join Date
    Apr 2002
    Posts
    214
    Thanks moxnix, that was the problem. I turned off my firewall too, and it installed just fine.
    Either get busy living or get busy dying.

    -The Sawshank Redemption

  9. #9
    Senior Member
    Join Date
    Feb 2004
    Location
    Near Manchester (England)
    Posts
    145

    Question Isn't that dodgy?

    I mean Microsoft supply a firewall with their latest OS, all be it a not too good one, so why should switching your firewall off make a difference? I certainly wouldn't want to do that!

    I'd be interested to know what firewalls needed switching off and if there were any messages. Is there any telling entry in your firewall logs?
    Tomorrow is another day for yesterdays work!

  10. #10
    It could simply be a permission setting. The thing to do would be to check firewall logs to see if the firewall blocked Update, and if so, add Update to the permitted list. There are other various settings that could have an affect too (as my last couple of weeks with Sygate and Kerio have so well demonstrated -- see my thread on that).

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •