RE: MS02-012/Q313450

From: Lee Leahu (lee@ricis.com)
Date: 02/28/02 

Date: Thu, 28 Feb 2002 12:57:41 -0600
To: "Bill Mote" <bill.mote@mem.com>, <focus-ms@securityfocus.com>
From: Lee Leahu <lee@ricis.com>

Ok, that makes sense,
but why do you need ntfsdrv.dll????

Lee
lee@ricis.com

Bill wrote:
asp.dll might need patching to fix CDONTS. That's my best guess.
bm

-----Original Message-----
From: Vladimir Ivanov [mailto:vivanov@tmsoft-ltd.kiev.ua]
Sent: Thursday, February 28, 2002 8:30 AM
To: focus-ms@securityfocus.com
Subject: MS02-012/Q313450

Hi All!
"Microsoft has released a patch for Windows 2000 that will eliminate a
vulnerability that exists because a malicious user could issue a specially
formatted, non-RFC compliant SMTP command that will result in a Denial of
Service attack. This would be carried out more typically through a custom
application where the malformed data would cause the SMTP service to fail.
Download now to prevent a possible Denial of Service Attack."
Patch is available to download:
http://download.microsoft.com/download/win2000platform/Patch/Q313450/NT5/EN-
US/Q313450_W2K_SP3_X86_EN.exe
I just download this patch and look at the files containted into it:
symbols/
aqueue.dll
asp.dll ????????
fscfg.dll
ftpctrs2.dll
ftpmib.dll
hotfix.exe
hotfix.inf
httpmib.dll
infoadmn.dll
infocomm.dll
isatq.dll
mailmsg.dll
ntfsdrv.dll ??????
smtpsvc.dll
sp3.cat
spmsg.dll
w3ctrs.dll
Does anybody know
what asp.dll and ntfsdrv.dll doing in this patch ?
Thanx.
Vladimir Ivanov

Relevant Pages

  • RE: MS02-012/Q313450
    ... Download now to prevent a possible Denial of Service Attack." ... I just download this patch and look at the files containted into it: ...
    (Focus-Microsoft)
  • MS02-012/Q313450
    ... Download now to prevent a possible Denial of Service Attack." ... I just download this patch and look at the files containted into it: ...
    (Focus-Microsoft)
  • Re: Office 2003 SP2
    ... Is there any customer care center where I could continue?? ... Anyone reading the EULA would have ... > || download SP-2, burn it and give you a copy. ... installing the CD of the downloaded and redistributed patch to get ...
    (microsoft.public.officeupdate)
  • Re: Office 2003 SP2
    ... I'm a little surpriced about reading "Now go away". ... make it possible to install. ... > download SP-2, burn it and give you a copy. ... > || explicitly inquired about someone else downloading the patch for you, ...
    (microsoft.public.officeupdate)
  • Re: Office 2003 SP2
    ... > explicitly inquired about someone else downloading the patch for you, ... My response to you indicated that this would not be legal. ... > converation about whether it is legal or not to ask someone else to download ... install the update onto my PC from that CD? ...
    (microsoft.public.officeupdate)