NP, Rod - this is what I suspected. I only replied
because if I misconstrued something, I wanted to be correct. Thanks for
clearing it up for me - and hopefully for others.
Rick
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent
Sent: Wednesday, August 27, 2003 10:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] SP4 question
:) Sorry...I only highlighted the words because
that's the statement from MS, and to thumbtack the issue. It caught my eye
only after your post, but I was responding to the general
thread.
I've seen this issue floating around due to BugTraq's
report. BugTraq provides a good service, but falls short on
occasion. Anything you see on BugTraq (or any other list) should be taken
up first with your MS representative (TAM, SAM, MVP, etc.) -- particularly
security concerns.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Wednesday, August 27, 2003 10:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] SP4 question
Rod,
With all due respect, did I somehow indicate
otherwise? If I miscommunicated the message, I'd appreciate guidance
on how to better answer a question of this type.
-rtk
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent
Sent: Wednesday, August 27, 2003 9:10 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] SP4 question
SP4 DOES NOT reintroduce the
vulnerability.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Wednesday, August 27, 2003 10:02 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] SP4 question
Given that Russ Cooper did the original study that
presented the incomplete / incorrect information that Brian Livingston reported
on, going back to Russ is likely the correct step. Russ has since
retracted and corrected his findings. This correction can be found, as wll
on NTBUGTRAQ or the TruSecure site.
Regardless - SP4 does NOT negate / remove MS03-026, but
please check with NTBUGTRAQ to be 100% certain. Or, better yet - do as I
did when confronted with this. Conduct your own study!
:-)
Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active
Directory
Associate Expert
Expert Zone -
www.microsoft.com/windowsxp/expertzone
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Hicks/MIS/HQ/KEMET/US
Sent: Wednesday, August 27, 2003 8:03 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] SP4 question
I have heard mixed opinions on whether or not installing Win2k SP4 breaks the MS03-026 patch. Does anyone have any links to docs form MS about this subject. NTBUGTRAQ posted some reports from people that SP4 did break the patch, but later found it to be untrue.
Thanks
|
Jon Hicks | KEMET
Electronics Corporation | Server Team Phone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: jhicks352 [ Mailing: 2835 KEMET Way Simpsonville, SC 29681 USA ] |
