Potential Problem with Microsoft Security Bulletin MS01-057

From: Peter Koso (PKoso@BEANSPROUT.NET)
Date: 12/07/01 

Date:         Fri, 7 Dec 2001 14:01:43 -0500
From: Peter Koso <PKoso@BEANSPROUT.NET>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

Potential issue with this security patch. Running NT 4.0 SP6a and Exchange
5.5 SP4.

Issue is with an older version of IE on the exchange server. We were running
IE 4.01 SP1. The patch applies fine but upon reboot there is an error
message

        "procedure entry point wnsprintfa could not be located in the
dynamic link library shlwapi.dll"

        See MS knowledgebase Q284706

The error manifests itself with OWA (outlook Web Access) users not seeing
any text of their emails. They can logon fine and see the subject lines -
but clicking on the message brings up a white page.

Resolved (with help from MS tech support) by backing off the patch,
installing IE 5.5 SP2 and re-installing the patch. This takes several
reboots.

regards,

Peter Koso
Beansprout Networks

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
BEST-OF-BREED ANTIVIRUS SOLUTION FOR MICROSOFT EXCHANGE 2000
Earn 5% rebate on licenses purchased for Trend Micro ScanMail for
Microsoft Exchange 2000 between October 1 and November 16. ScanMail
ensures 100% scanning of inbound and outbound traffic and provides
remote software management. For program details or to download your
30-day FREE evaluation copy:
http://www.antivirus.com/banners/tracking.asp?si=53&bi=245&ul=http://www.a
ntivirus.com/smex2000_rebate

Relevant Pages

  • Re: Microsoft Security Bulletin MS02-025
    ... upgrade my entire Exchange organization to SP2 in order to apply this patch? ... > Software: Microsoft Exchange ... > seek to exploit this flaw and mount a denial of service attack. ...
    (microsoft.public.security)
  • Re: Apply KB926666 on FE E2k3 box?
    ... If I were merely running an Exchange 2k3 enviornment then it'd ... patch all client OS's ... Run Time Zone Update tool (against all Exchange servers, ...
    (microsoft.public.exchange.admin)
  • RE: SBS 2003 Basic - E-mail Addresses not added
    ... You're experiencing the symptoms addressed by the KB 837444 patch for Exchange 2003. ... If you want to obtain the KB 837444 patch, you will need to open up a support case with Microsoft Product Support first. ... Microsoft Small Business Server Support ... SBS 2000: microsoft.public.backoffice.smallbiz2000 ...
    (microsoft.public.windows.server.sbs)
  • Re: Question on Security Update for Exchange 2003
    ... The cost to setup a lab environment is not extremely high. ... performed a backup just for a security patch. ... So here the person posts that they have taken over Exchange duties, ...
    (microsoft.public.exchange.admin)
  • Re: Exchange Public Folders Information Leakage
    ... Exchange Public Folders Information Leakage ... SecuriTeam security advisory regarding MS01-047. ... Microsoft Exchange Server itself is not affected. ... TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE ...
    (NT-Bugtraq)