MS03-029 / Q823803 breaks RAS?

From: Adam D. Barratt (security-ntbugtraq_at_FUNKY-BADGER.ORG)
Date: 07/25/03

  • Next message: http-equiv_at_excite.com: "TEXT/PLAIN: ALERT("OUTLOOK EXPRESS")" 
    Date:         Fri, 25 Jul 2003 11:35:44 +0100
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Hi all,

    After installing MS03-029 / Q823803 on a number of our NT4 servers and
    workstations (via Windows Update) yesterday, we found that RAS failed to
    start on all machines on which it was installed.

    Specifically, the Remote Access Connection Manager service fails to start,
    due to an error loading a PPP module.

    Uninstalling the hotfix does not solve the issue, as the uninstall appears
    *not* to replace the version of kernel32.dll installed by the hotfix with
    the original version (dated 21/11/2001).

    Manually replacing kernel32.dll with the pre-hotfix version and rebooting
    appears to resolve the issue, but obviously leaves the hotfix unapplied.

    Has anyone else encountered this issue?

    Cheers,

    Adam

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: http-equiv_at_excite.com: "TEXT/PLAIN: ALERT("OUTLOOK EXPRESS")"

    Relevant Pages

    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... The way that Microsoft patched the new RPC Part II vulnerability ... Summer's Hottest Certification Just Got HOTTER! ... To learn more about the TICSA certification, ...
      (NT-Bugtraq)
    • Re: Delving into the contents of MS03-026 on XP
      ... Delving into the contents of MS03-026 on XPIf I were intentionally running XP Gold release, ... SP1 updates to the code just to get the hotfix. ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • WHERE ARE NT4 OLD PASSWORDS STORED
      ... Sorry if this bores many of you (being an NT4 question), ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Firewalls and DCOM
      ... Never underestimate the lengths to which your users will inadvertently go through to infect a network;)" ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • DCOM worm analysis report: W32.Blaster.Worm
      ... A Bugtraq user has already pointed out that a worm has been ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)