RE: Microsoft Security Bulletin MS01-030

2001-06-14 Thread Michael B. Morell
I was a brave soul and did install it (rev3). I figured the third time may be a charm (I never installed the first 2 mind you, just lucky I guess being too busy to install the first 2 the second they came out). It seems to be ok, even though on the reboot it took a "scary" amount of time to come

Re: Microsoft Security Bulletin MS01-030

2001-06-14 Thread Michael Bryan
John Hanks wrote: > > Does anyone know if a third version is in the works or if I should keep > trying to make the second version work on my machines? MS just released version 3 of that Security Bulletin, with a 3rd "official" version of the patch for W2K. Again, the URL for the bulletin is h

RE: Microsoft Security Bulletin MS01-030

2001-06-14 Thread Paul L Schmehl
Microsoft has just released another updated version of this patch. According to the bulletin (http://www.microsoft.com/technet/security/bulletin/MS01-030.asp), they discovered that some outdated files were inadvertantly placed in the first updated patch, and this patch fixes that problem. We

RE: Microsoft Security Bulletin MS01-030

2001-06-13 Thread John Hanks
> From: Paul L Schmehl [mailto:[EMAIL PROTECTED]] > Sent: Monday, June 11, 2001 5:31 PM > To: Toma Vailikit; Microsoft Product Security > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: Microsoft Security Bulletin MS01-030 > > > Microsoft Security contacted me imm

RE: Microsoft Security Bulletin MS01-030

2001-06-13 Thread Calanan, Michael
Just to follow-up on this with a real-world example, we applied the v2.0 patch (dated 8 June) on an Exchange 2000 server, noticed the symptoms of the original release of the patch (6 June), where store.exe was consuming 100% of the CPU and opened a call to MS. The tech had us roll back the patch

RE: Microsoft Security Bulletin MS01-030

2001-06-12 Thread Paul L Schmehl
Microsoft Security contacted me immediately after I posted my warning to Bugtraq and gave me a contact to call to report the problem. Microsoft released an updated, regression tested patch the next day (Friday, June 8), I would assume in response to my report. We haven't tested it yet, but it

RE: Microsoft Security Bulletin MS01-030

2001-06-11 Thread Toma Vailikit
-Original Message- From: Paul L Schmehl [mailto:[EMAIL PROTECTED]] snip... We do not know if this will affect systems that do not use a-a-c. snip... Yes, it does affect non clustered Exchange servers in the same way. At least this has been in my case. I don't know if this is a problem

Re: Microsoft Security Bulletin MS01-030

2001-06-10 Thread Paul L Schmehl
At UTD we are running active-active clustering (a-a-c) with two virtual Exchange 2000 servers and a RAID array. We were in the process of installing Exchange 2000 on the second node, and the admins decided to apply this patch to the "active" node as well. After application of the patch (this