MinorRev: Microsoft Security Bulletin MS03-051 - Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360)

From: Russ (Russ.Cooper_at_RC.ON.CA)
Date: 01/13/04

  • Next message: Nexus: "Disabling the Winhlp32 "Jump to URL" option" 
    Date:         Tue, 13 Jan 2004 14:36:27 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Reason for Revision:
    V1.5 January 13, 2004: Added a FAQ about FrontPage Server Extensions and
    Service Pack 4 for Windows 2000. Updated file version in the FrontPage
    Server Extensions 2002 section. Corrected setup switches in the
    FrontPage Server Extensions stand-alone and Windows 2000 section.

    Microsoft Security Bulletin MS03-051:
    Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code
    Execution (813360)

    Bulletin URL:
    http://www.microsoft.com/technet/security/bulletin/MS03-051.asp

    Summary:
     Version Number: V1.5
     Revision Date: 01-13-2003
     Impact of Vulnerability: Remote Code Execution
     Maximum Severity Rating: Critical
     Patch(es) Replaced: This update replaces the security updates contained
    in the following bulletins: MS01-035 and MS02-053.
     Caveats: None
     CVE Number(s): CAN-2003-0822,CAN-2003-0824

    Tested Software:
     Affected Software:
     * Microsoft Windows 2000 Service Pack 2, Service Pack 3
     * Microsoft Windows XP, Microsoft Windows XP Service Pack 1
     * Microsoft Office XP, Microsoft Office XP Service Pack 1, Service Pack
    2

     Affected Components:
     * Microsoft FrontPage Server Extensions 2000
    <http://www.ntbugtraq.com/link/C84C3D10-A821-4819-BF58-D3BC70A77BFA.asp>
     * Microsoft FrontPage Server Extensions 2000 (Shipped with Windows
    2000)
    <http://www.ntbugtraq.com/link/057D5F0E-0E2B-47D2-9F0F-3B15DD8622A2.asp>
     * Microsoft FrontPage Server Extensions 2000 (Shipped with Windows XP)
    <http://www.ntbugtraq.com/link/9B302532-BFAB-489B-82DC-ED1E49A16E1C.asp>
     * Microsoft FrontPage Server Extensions 2002
    <http://www.ntbugtraq.com/link/3E8A21D9-708E-4E69-8299-86C49321EE25.asp>
     * Microsoft SharePoint Team Services 2002 (Shipped with Office XP)
    <http://www.ntbugtraq.com/link/5923FC2F-D786-4E32-8F15-36A1C9E0A340.asp>

     Software Not Affected:
     * Microsoft Windows Millennium Edition
     * Microsoft Windows NT Workstation 4.0, Service Pack 6a
     * Microsoft Windows NT Server 4.0, Service Pack 6a
     * Microsoft Windows NT Server 4.0, Terminal Server Edition, Service
    Pack 6
     * Microsoft Windows 2000 Service Pack 4
     * Microsoft Windows XP 64-Bit Edition Version 2003
     * Microsoft Windows Server 2003 (Windows SharePoint Services)
     * Microsoft Windows Server 2003 64-Bit Edition (Windows SharePoint
    Services)
     * Microsoft Office System 2003

    This email is sent to NTBugtraq automagically as a service to my
    subscribers. (v2.2)

    Cheers,
    Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor

    -----
    Editor's Note: The 43rd Most Powerful Person in Networking says...

    Wondering how to unsubscribe from NTBugtraq? Just send a message to Listserv@listserv.ntbugtraq.com with unsubscribe ntbugtraq in the message body, you don't need a subject line. If it says you aren't subscribed, you've either subscribed with a different email address or your address has changed somehow. Just email Russ.Cooper@rc.on.ca and I'll remove you.
    -----

  • Next message: Nexus: "Disabling the Winhlp32 "Jump to URL" option"

    Relevant Pages