RE: MS02-052 coporate install file??(q329077)

From: Paul.D.Jordan@aib.ie
Date: 10/03/02


Date: Thu, 03 Oct 2002 16:04:03 +0100
From: Paul.D.Jordan@aib.ie
To: csanterre@MerchantsOverseas.com, duncan.gray@arciris.co.uk, security-basics@securityfocus.com

XP/2000

I see the problem now - sorry Chris didn't realise you were on 98 -
instructions I had pointed to relate to W2K and XP only :-(
The helpful message Chris got is at
http://v4.windowsupdate.microsoft.com/en/thanks.asp

http://v4.windowsupdate.microsoft.com will work only if you are on W2K or
XP
but would I believe allow you to find a direct link to the update file
itself following
the instructions at http://www.ntbugtraq.com/redisWU.asp

Win98/NT4 - End User Updates

If you are on Windows 98/Windows 98 Second Edition/Windows Millennium Edition (Windows
Me)/Windows NT 4.0 try

http://windowsupdate.microsoft.com/

and the

Q329077: Security Update

is available from this location but "not as a direct link to the update file itself"

Support in getting the direct file link for Admins - maybe???

Microsoft state (on http://windowsupdate.microsoft.com/ under Support
Information) that regarding "Support for Software Updates"
SUPPORT FOR SOFTWARE UPDATES
"No-charge e-mail support for the Windows Update site includes: help with Web site navigation, site content quality or error
messages, and basic download assistance. All other assistance, including
installation and setup issues, is available via our Personal and
Professional support offerings at http://support.microsoft.com/directory/."

N.B. The No-charge and basic download assistance - so you might want to try dropping them a line using the following page

http://support.microsoft.com/default.aspx?scid=/support/email/windowsupdate/wassist.asp

Hope this helps a little more than my last post Chris :-)
Paul

**********************************************************************
*Paul Jordan, IT Security Operations (ROI/UK)
*E-mail: Paul.D.Jordan@aib.ie
*Post: Block A1, AIB, Bankcentre, Dublin 4
*Phone: 353-1-6413888 Ext 13872 Internet http://www.aib.ie
*
*This posting is strictly confidential and is intended
*only for use by the addressee unless otherwise indicated.
*Opinions expressed are solely those of the originator and
*use of any material contained in the posting is entirely at
*the user's risk.
**********************************************************************

Chris Santerre <csanterre@MerchantsOverseas.com>
03/10/2002 02:43 PM

 
        To: "'Paul.D.Jordan@aib.ie'" <Paul.D.Jordan@aib.ie>, Chris Santerre
<csanterre@MerchantsOverseas.com>
        cc: security-basics@securityfocus.com, 'Duncan Gray'
<duncan.gray@arciris.co.uk>
        Subject: RE: MS02-052 coporate install file??(q329077)

I would first like to thank all who have replied. However there still is
no
solution. Problem is, there used to be a personalise windows update on the
site in version 3. I've done this before ;)

Latest winupdate page is v4 (Thanks for direct link Duncan G.) This
version
spits this out if you go to it with Win98:
"
Thank you for your interest in Windows Update

Windows Update is the online extension of Windows that helps you get the
most out of your computer.

The latest version of Windows Update is only available on computers that
are
running Microsoft Windows 2000 or Windows XP.
"

Your instructions here Paul, are basically the same. No Win98 support. Am
I
to believe that all the end users out there with 98 are not getting the
critical JVM update? Admins are expected to perform a winupdate on every
machine?

I'm trying really hard not to MS bash. :)

Yes, I don't have a win2000 or XP box at this location. I already thought
of
that.

-----Original Message-----
From: Paul.D.Jordan@aib.ie [mailto:Paul.D.Jordan@aib.ie]
Sent: Thursday, October 03, 2002 4:37 AM
To: Chris Santerre
Cc: security-basics@securityfocus.com
Subject: Re: MS02-052 coporate install file??(q329077)

Think instructions at following URL might be what you are looking for?

http://www.ntbugtraq.com/redisWU.asp

Paul

**********************************************************************
*Paul Jordan, IT Security Operations (ROI/UK)
*E-mail: Paul.D.Jordan@aib.ie
*Post: Block A1, AIB, Bankcentre, Dublin 4
*Phone: 353-1-6413888 Ext 13872 Internet http://www.aib.ie
*
*This posting is strictly confidential and is intended
*only for use by the addressee unless otherwise indicated.
*Opinions expressed are solely those of the originator and
*use of any material contained in the posting is entirely at
*the user's risk.
**********************************************************************

Chris Santerre <csanterre@MerchantsOverseas.com>
02/10/2002 03:39 PM

 
        To: security-basics@securityfocus.com
        cc:
        Subject: MS02-052 coporate install file??(q329077)

Microsoft is driving me nuts again!
Flaw in Microsoft VM JDBC Classes Could Allow Code Execution (Q329077)

The coporate update site is retired. The MS JVM site has no more updates.
Everything points back to the winupdate site. Winupdate site's directions
on
how to show direct links to update files is outdated and no longer
working.

So how the heck are admins updating all there users? Going around doing a
winupdate on all of them? I don't think so! Anyone have a place to
download
the update directly? I remember there used to be a trick as well. Update 1
machine and check it's temp folder or something. Any help would be great.

Linux looks better every day! Just another example of why MS will never
have
my vote for security. They can't even post a simple link to a CRITICAL
update!

Chris

**********************************************************************
This document is strictly confidential and is intended for use by
 the addressee unless otherwise indicated.

Allied Irish Banks
**********************************************************************

**********************************************************************
This document is strictly confidential and is intended for use by
 the addressee unless otherwise indicated.

Allied Irish Banks
**********************************************************************



Relevant Pages

  • Re: Windows updates... once more
    ... Also make sure you don’t have a Web Accelerator working in the background such as NetZerio, HiSpeed, Speedband etc. ... I too am unable to get windows update to function. ... I tried your solutions after trying solutions from MS Support. ... (instructions below from MS Support) ...
    (microsoft.public.windowsupdate)
  • Re: Windows updates... once more
    ... It was the accelerator program provided by my ... >> I too am unable to get windows update to function. ... (instructions below from MS Support) ... >> (instructions below from MS Support) I don't find corrupted files or damage. ...
    (microsoft.public.windowsupdate)
  • Re: WindowsUpdate Error 80070011 on every update
    ... Please follow these instructions at your own risk. ... Windows Update now downloads the patch. ... unless you take ownership of the folder. ... HardLinkFile operation fails. ...
    (microsoft.public.windowsupdate)
  • Re: cannot use Win Update 0x8DDD0004 hell
    ... Manager shows the web-browser as 'Running' but it has to be shut down from ... Now if I try and access the Windows Update Site, I get a frozen web page ... Tried downloading and re-installing Win Updater per instructions on this ... I have played with disabling Norton's Firewall. ...
    (microsoft.public.windowsupdate)
  • Re: file is empty but should not be
    ... > instructions, but there are no files there. ... antivirus and spyware removal tools in Safe Mode. ... make sure you've visited Windows Update ... This takes time, skill, and knowledge of the Windows operating system. ...
    (microsoft.public.windowsxp.general)