Windows 2000 SP4 Rollup Released
Hey Hey,
I thought this might be of interest to those of you still running Windows 2000 in case you ever have to do a reinstall (What?? That happens with MS Products?)...
Anyways, they've released a rollup to SP4 which is available at http://www.microsoft.com/downloads/d...DisplayLang=en
KB Information on the subject is available here.
Included patches and fixes are:
Quote:
MS02-050 Certificate validation flaw might permit identity spoofing 317636
MS03-030 Unchecked Buffer in DirectX Could Enable System Compromise 819696
MS03-022 Vulnerability in ISAPI Extension for Windows Media Services may cause code execution 822343
MS03-025 Flaw in Windows message handling through Utility Manager could enable privilege elevation 822679
MS03-041 Vulnerability in Authenticode Verification Could Allow Remote Code Execution 823182
MS03-023 Buffer overrun in the HTML converter could allow code execution 823559
MS03-026 Buffer Overrun in RPC May Allow Code Execution 823980
MS03-034 Flaw in NetBIOS could lead to information disclosure 824105
MS03-045 Buffer overrun in the ListBox and in the ComboBox Control could allow code execution 824141
MS03-039 A buffer overrun in RPCSS could allow an attacker to run malicious programs 824146
MS03-044 Buffer overrun in Windows Help and Support Center could lead to system compromise 825119
MS03-042 Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution 826232
MS03-043 Buffer overrun in Messenger service could allow code execution 828035
MS03-049 Buffer Overrun in the Workstation Service Could Allow Code Execution 828749
MS03-008 Flaw in Windows Script Engine may allow code to run 814078
MS04-007 An ASN.1 vulnerability could allow code execution 828028
MS04-008 Vulnerability in Windows Media Services could allow a Denial of Service attack 832359
MS04-012 Cumulative Update for Microsoft RPC/DCOM 828741
MS04-006 A vulnerability in the Windows Internet Name Service (WINS) could allow code execution 830352
MS04-011 Security Update for Microsoft Windows 835732
MS04-014 Vulnerability in the Microsoft Jet Database Engine could permit code execution 837001
MS04-016 Vulnerability in DirectPlay could allow denial of service 839643
MS04-024 A vulnerability in the Windows shell could allow remote code execution 839645
MS04-023 Vulnerability in HTML Help could allow code execution 840315
MS04-020 A vulnerability in POSIX could allow code execution 841872
MS04-022 A vulnerability in Task Scheduler could allow code execution 841873
MS04-019 A vulnerability in Utility Manager could allow code execution 842526
MS04-030 Vulnerability in WebDAV XML message handler could lead to a denial of service 824151
MS04-032 Security update for Microsoft Windows 840987
MS04-037 Vulnerability in Windows shell could allow remote code execution 841356
MS04-031 Vulnerability in NetDDE could allow remote code execution 841533
MS04-045 Vulnerability in WINS could allow remote code execution 870763
MS04-043 Vulnerability in HyperTerminal could allow code execution 873339
MS04-044 Vulnerabilities in Windows Kernel and LSASS could allow elevation of privilege 885835
MS04-041 A vulnerability in WordPad could allow code execution 885836
MS05-003 Vulnerability in the Indexing Service could allow remote code execution 871250
MS05-008 Vulnerability in Windows shell could allow remote code execution 890047
MS05-011 Vulnerability in server message block could allow remote code execution 885250
MS05-010 Vulnerability in the License Logging service could allow code execution 885834
MS05-015 Vulnerability in hyperlink object library could allow remote code execution in Windows Server 2003 888113
MS05-001 Vulnerability in HTML Help could allow code execution 890175
MS05-013 Vulnerability in the DHTML editing component ActiveX control could allow code execution 891781
MS05-002 Vulnerability in cursor and icon format handling could allow remote code execution 891711
MS05-012 Vulnerability in OLE and COM could allow remote code execution 873333
MS05-016 Vulnerability in Windows Shell that could allow remote code execution 893086
MS05-019 Vulnerabilities in TCP/IP could allow remote code execution and denial of service 893066
MS05-017 Vulnerability in MSMQ could allow code execution 892944
MS05-018 Vulnerabilities in Windows kernel could allow elevation of privilege and denial of service 890859
MS05-020 Cumulative security update for Internet Explorer 890923
MS03-022 Vulnerability in ISAPI Extension for Windows Media Services may cause code execution 822343
MS05-014 Cumulative security update for Internet Explorer 867282
Peace,
HT
Just updated several servers
Hi guys!
Just did updating with some of our servers here with Win2K just last Tuesday. SP4 and couple of Security updates (POST-SP4) as well. The idea of having a consolidated version of these patches is handy for Sys Ads and the like. Time to burn some.
Thanks for the info, HTRegz.
By the way, just a side-note, Win 2000 had been really out there for quite some time as well as Win XP, but for mid-size corporation doing server apps and other integration, Win 2K and the latter Win 2K3 would be the bet. We used Win XP Pro more on our Workstation Boxes and very reliable especially in Remote Desktop Connections, thereby accessing the Servers from it.
Yo!