RE: MS02-012/Q313450

From: Bill Mote (bill.mote@mem.com)
Date: 02/28/02 

From: "Bill Mote" <bill.mote@mem.com>
To: "Vladimir Ivanov" <vivanov@tmsoft-ltd.kiev.ua>, <focus-ms@securityfocus.com>
Date: Thu, 28 Feb 2002 11:59:31 -0500

asp.dll might need patching to fix CDONTS. That's my best guess.

bm

-----Original Message-----
From: Vladimir Ivanov [mailto:vivanov@tmsoft-ltd.kiev.ua]
Sent: Thursday, February 28, 2002 8:30 AM
To: focus-ms@securityfocus.com
Subject: MS02-012/Q313450

        Hi All!

    "Microsoft has released a patch for Windows 2000 that will eliminate a
vulnerability that exists because a malicious user could issue a specially
formatted, non-RFC compliant SMTP command that will result in a Denial of
Service attack. This would be carried out more typically through a custom
application where the malformed data would cause the SMTP service to fail.
Download now to prevent a possible Denial of Service Attack."

Patch is available to download:
http://download.microsoft.com/download/win2000platform/Patch/Q313450/NT5/EN-
US/Q313450_W2K_SP3_X86_EN.exe

I just download this patch and look at the files containted into it:
symbols/
aqueue.dll
asp.dll ????????
fscfg.dll
ftpctrs2.dll
ftpmib.dll
hotfix.exe
hotfix.inf
httpmib.dll
infoadmn.dll
infocomm.dll
isatq.dll
mailmsg.dll
ntfsdrv.dll ??????
smtpsvc.dll
sp3.cat
spmsg.dll
w3ctrs.dll

Does anybody know
            what asp.dll and ntfsdrv.dll doing in this patch ?

Thanx.
Vladimir Ivanov

Relevant Pages

  • RE: MS02-012/Q313450
    ... Download now to prevent a possible Denial of Service Attack." ... Patch is available to download: ...
    (Focus-Microsoft)
  • MS02-012/Q313450
    ... Download now to prevent a possible Denial of Service Attack." ... I just download this patch and look at the files containted into it: ...
    (Focus-Microsoft)
  • Re: Office 2003 SP2
    ... Is there any customer care center where I could continue?? ... Anyone reading the EULA would have ... > || download SP-2, burn it and give you a copy. ... installing the CD of the downloaded and redistributed patch to get ...
    (microsoft.public.officeupdate)
  • Re: Office 2003 SP2
    ... I'm a little surpriced about reading "Now go away". ... make it possible to install. ... > download SP-2, burn it and give you a copy. ... > || explicitly inquired about someone else downloading the patch for you, ...
    (microsoft.public.officeupdate)
  • ITRC Patch Download FAQ for OpenVMS users
    ... Access to the ITRC Patch Download Site ... Locating Kits ...
    (comp.os.vms)