7 New M$ Paches for July?

Check out Microsoft's site here http://www.microsoft.com/security/bu...s/default.mspx . It looks like we have 7 patches coming out today: 018-024.

Here's the high level scoop:

Quote:

---

http://www.microsoft.com/security/bu...7_windows.mspx

Scorecard: 7 total...

• 2 Critical
• 4 Important
• 1 Moderate
• Of the 7, three (3) are re-releases replacing patches from issued in 2003 & 2004

Critical Bulletins:
MS04-022 - Vulnerability in Task Scheduler Could Allow Code Execution (841873)
http://www.microsoft.com/technet/sec.../MS04-022.mspx
* Impact: Remote code execution
* Affected Software: Windows 2000, Windows XP

MS04-023 - Vulnerability in HTML Help Could Allow Code Execution (840315)
http://www.microsoft.com/technet/sec.../MS04-023.mspx
* Impact: Remote code execution
* Affected Software: Windows 2000, Windows XP, Server 2003, Windows 98, Windows ME
* Note: Windows NT not affected by default but if have IE 5.5 SP2 or IE 6 SP1 installed it is

Important Bulletins:
MS04-019 - Vulnerability in Utility Manager Could Allow Code Execution (842526)
http://www.microsoft.com/technet/sec.../MS04-019.mspx
* Impact: Local evevation of privilege
* Affected Software: Windows 2000
* NOTE: Replaces MS03-025!!!

MS04-020 - Vulnerability in POSIX Could Allow Code Execution (841872)
http://www.microsoft.com/technet/sec.../MS04-020.mspx
* Impact: Local evevation of privilege
* Affected Software: Windows 2000, Windows NT

MS04-021 - Security Update for IIS 4.0 (841373)
http://www.microsoft.com/technet/sec.../MS04-021.mspx
* Impact: Remote code execution
* Affected Software: Windows NT

MS04-024 - Vulnerability in Windows Shell Could Allow Remote Code Execution (839645)
http://www.microsoft.com/technet/sec.../MS04-024.mspx
* Impact: Remote code execution
* Affected Software: Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows 98, Windows ME
* NOTE: Replaces MS03-027 on Windows XP ONLY!!!

Moderate Bulletins:
MS04-018 - Cumulative Security Update for Outlook Express (823353)
http://www.microsoft.com/technet/sec.../MS04-018.mspx
* Impact: Denial of Service
* Affected Software: Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows 98, Windows ME
* Affected Components: Outlook Express 5.5 & 6
* NOTE: Replaces MS04-013!!!

---

/edit 22:05 UTC
* Modified note on MS04-024 regarding what patch it replaces.
* Added note on MS04-023 about NT vulnerability if IE installed.

[optimism] well at least they are bringing out patches i suppose, and not just trying to hide the need for them [/optimism]

LOL at fyrewall

/me heads off to run Windows update... again....

I would guess that all of these new 'Vulnerabilities' are already addressed in SP2 RC2 then, because of all the patches that have come out in the 2 months I have had the RC2 version, I have never had a patch come up for it.

Anyone else having trouble installing these updates? When I go to windowsupdate.microsoft.com, it scans my computer right, and I select the updates, they download, but when it goes to install them it freezes, and then eventually says Install failed.

I even tried each individually, but still freezes...

Quote:

---

Originally posted here by yanksfan
Anyone else having trouble installing these updates? When I go to windowsupdate.microsoft.com, it scans my computer right, and I select the updates, they download, but when it goes to install them it freezes, and then eventually says Install failed.

I even tried each individually, but still freezes...

---

I had that happen to me once. I simply turned off my firewall, and every thing was fine. (Of course, I turned it on again, after updating.)

Like the GREAT admin I am, I installed all patches today on the one XP box I own, and of course on my Mom's box....Which I forgot to do....Damn...Oh well, I said great not perfect.

Thanks moxnix, that was the problem. I turned off my firewall too, and it installed just fine.

I mean Microsoft supply a firewall with their latest OS, all be it a not too good one, so why should switching your firewall off make a difference? I certainly wouldn't want to do that!

I'd be interested to know what firewalls needed switching off and if there were any messages. Is there any telling entry in your firewall logs?

It could simply be a permission setting. The thing to do would be to check firewall logs to see if the firewall blocked Update, and if so, add Update to the permitted list. There are other various settings that could have an affect too (as my last couple of weeks with Sygate and Kerio have so well demonstrated -- see my thread on that).

I don't remember which firewall I was using at that time, but it was a third party firewall.

AngelicKnight is right about it being a permission problem, because the patch would download, but not install. At the time I found out what it was, it was by turning it off and the installations working. By the time the next patch came around I was trying out a different firewall, and didn't have that problem.

Yeah, it's a double-edged sword -- some firewalls are far more advanced and configurable than others (why Sygate and Kerio are far superior to ZA, for example), while at the same time those firewalls make it easier for you to lock yourself out of your own trusted connections if you're not careful -- if you're a bit of a novice like myself, that is, me being the AO Village Idiot and all (hmm...if I hadn't already claimed "AO Autobot" that might make a good title ;)). The slightest misconfiguration can cause such a problem (as I showed in my Sygate thread), but a little patience and willingness to learn the ins and outs will go a long way.

Anyway, I'm starting to wander off topic...Just thought I'd throw that in there. :)

In a response to your question Simple Simon, I'm pretty sure that Microsoft's built in firewall only filters and blocks incoming connections. The reason why I had to turn my firewall off is because it was blocking an outbound connection, which Microsoft's firewall wouldn't stop.

That is also why I don't use Microsoft's firewall, because it doesn't stop outbound connections.