Re: Microsoft Security Bulletin MS03-049 - Installation problems?

From: Russ (Russ.Cooper_at_RC.ON.CA)
Date: 11/12/03

  • Next message: Michael Howard: "The Developer Implications of Windows XP SP2" 
    Date:         Wed, 12 Nov 2003 11:47:59 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    A number of people have reported that after installing MS03-049 on a Windows XP system, and then scanning using either Microsoft's or Shavlik's MSSecure.xml file, they are getting a message back indicating that the wkssvc.dll file has the wrong file version. They're told it is version 5.1.2600.1301 when it should be 5.1.2600.1309. Unfortunately, nobody has mentioned what SP their systems are at when they get this message.

    The XP MS03-049 update package actually has two different versions of wkssvc.dll in it. One version is for Windows XP Gold, the other is for Windows XP SP1 or SP2.

    In the XP Gold patch, wkssvc.dll has version 5.1.2600.121

    In the XP SP1/SP2 patch, wkssvc.dll has version 5.1.2600.1309.

    wkssvc.dll version 5.1.2600.1301 shipped with Windows XP SP1.

    So either there is a mistake in the installer logic of the updates, or, the people who are seeing this message aren't on SP1 despite having the wkssvc.dll version from SP1. I looked at the Update.inf files and both appear to be correct, but I may be missing something. I also checked the details of the patch within the MSSecure.xml file, and it appears to be correct.

    On my Windows XP SP1 system applying MS03-049 worked fine, MBSACLI reports no problems after the installation.

    Let me know if you experience this problem, and provide me with as much detail about versions, SPs, etc.. as you can.

    Cheers,
    Russ - NTBugtraq Editor 

    ----
NTBugtraq subscribers save $103.00 off the TICSA exam by using promo
code "NT1003" when registering to take the TICSA exam at www.2test.com.
Prove to your employer and peers that you have the knowledge and
abilities to be an active stakeholder in today's enterprise security.
Become TICSA certified www.trusecure.com/ticsa.  Promotion expires
12/31/03 and cannot be used in combination with other offers.
----
  • Next message: Michael Howard: "The Developer Implications of Windows XP SP2"

    Relevant Pages

    • Re: Updates if no internet connection
      ... Description of the System Update Readiness Tool for Windows Vista ... There are 3 prerequisites updates that are required before instaling the SP1 package that is available from Windows Update. ... I still can't work out if I need to install the three pre-SP1 updates even if I am using the standalone version of SP1. ...
      (microsoft.public.windowsupdate)
    • Re: Fax Services
      ... it is not recommended that we apply only Windows 2003 SP1 to ... Windows Server 2003 SP1 ... You can download Windows Small Business Server 2003 Standard Edition from ... When opening a new thread via the web interface, we recommend you check the ...
      (microsoft.public.windows.server.sbs)
    • Re: Vista SP1
      ... Unlimited installation and compatibility support for Vista SP1 is available ... Vista | select Windows Vista Service Pack 1 ... MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 ... Microsoft using the link above that you have indeed checked those things ...
      (microsoft.public.windowsupdate)
    • Re: XP Pro (Gold?) and SP3
      ... The semantics is that it is possible to install sp3 on a system with sp1 or sp2; ... Windows XP SP3 will be available through Windows Update and the Microsoft ...
      (microsoft.public.windowsxp.general)
    • Re: Win 2003 SP1 failed
      ... I will try installing the SP1 when logged under ... then apply other service packs. ... > A. Windows Server 2003 SP1 ... > G. SBS 2003 SP1 ...
      (microsoft.public.windows.server.sbs)