Re: Microsoft Security Bulletin MS02-052

From: Ned Flanders (nedfla@hotmail.com)
Date: 09/20/02 

From: "Ned Flanders" <nedfla@hotmail.com>
Date: Thu, 19 Sep 2002 21:46:37 -0500

Well if you *really* want to find out in detail, download SUS from MS and
have a look around in it - my understanding is it's the same engine as WU.
That may raise your comfort level a bit. Or it may justify some serious
panic.... <g> IMO, WU is just a glorified batch update process and I don't
have a real issue with using it on my machines. I don't use it on
production servers, primarily because most don't have internet access so I
can't. Like any other tool, I double check its results with what I expect
the results to be and if they didn't match (well at least most of the time)
the I wouldn't use it.

FWIW the patch I downloaded (from WU) and extracted is the same basic EXE as
the other IE updates. This one just has a bunch of Java classes and a
certificate in it instead of the usual EXE/DLL combo. I've installed it on
2 test machines and it really doesn't appear to be breaking anything as far
as I can tell. Haven't put it on the WU download machine yet, ironically
enough.

"Vitalijus J. Karalius" <baltexport@nospam.com> wrote in message
news:OUjVc3CYCHA.444@tkmsftngp12...
> Yep, that's the reality. And you are correct - we don't know what the
risks
> are, since the process presented by MS is not transparent. Apparently,
it's
> up to us to spend the time to find out what any unintended consequences
may
> be.......at our expense of course.
>
> Apparently, the patch is so critical, MS is unwilling to allow it to be
used
> without first being run through an unknown (to the user) procedure. We'll
> wait and see.
>
> "Trustworthy Computing" obviously does not include full disclosure on the
> repairs to the MS defective product and any urelated configuration changes
> (or lack thereof) initiated by MS in the patch process.
>
> "Ned Flanders" <nedfla@hotmail.com> wrote in message
> news:#UWzmYBYCHA.2328@tkmsftngp12...
> > You probably won't get that, at least from MS, as WU seems to be the way
> the
> > want to do this one (JVM). You can't "directly" get the JVM 3805 update
> > either. If you're *really* paranoid, use a test box to download them
(the
> > patches; they *are* patches, honest....) from WU, save them to CD or
> > whatever, then blast the test box. Though I'm not certain what exactly
> you
> > think the risks are...
> >
> > "Vitalijus J. Karalius" <baltexport@nospam.com> wrote in message
> > news:u6sM7LAYCHA.360@tkmsftngp12...
> > > You didn't miss a thing.
> > >
> > > When you have a URL for the *patch*, maybe you will post it?
> > >
> > > We have no difficulty finding the link to "Windows Update" - it's the
> > patch
> > > we are interested in.........
> > >
> > > By way of example, MS02-051 for Win2K is found at
> > > Windows 2000:
> > > http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41326
> > >
> > > no "personalization" required.
> > >
> > >
> > > "Ned Flanders" <nedfla@hotmail.com> wrote in message
> > > news:#imb1EAYCHA.1808@tkmsftngp10...
> > > > You lost me here. I thought you were looking for a way to download
> the
> > > > patch. I evidently have no idea what you meant by "When somebody
> finds
> > a
> > > > "real" link to MS02-052 - please post it.". Please explain what
you
> > want
> > > > and I'll try to answer it.
> > > >
> > > > "Vitalijus J. Karalius" <baltexport@nospam.com> wrote in message
> > > > news:OmOQnAAYCHA.1676@tkmsftngp08...
> > > > > So who has root privelages on your boxes?
> > > > >
> > > > > Maybe BillyG??? It's 2002.09.19 - do you know what's being changed
> in
> > > your
> > > > > configuration???
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Office 2003 SP2
    ... Is there any customer care center where I could continue?? ... Anyone reading the EULA would have ... > || download SP-2, burn it and give you a copy. ... installing the CD of the downloaded and redistributed patch to get ...
    (microsoft.public.officeupdate)
  • Re: Microsoft Security Bulletin MS02-052
    ... have a real issue with using it on my machines. ... FWIW the patch I downloaded and extracted is the same basic EXE as ... Haven't put it on the WU download machine yet, ... >> think the risks are... ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Microsoft Security Bulletin MS02-052
    ... have a real issue with using it on my machines. ... FWIW the patch I downloaded and extracted is the same basic EXE as ... Haven't put it on the WU download machine yet, ... >> think the risks are... ...
    (microsoft.public.win2000.security)
  • Re: Office 2003 SP2
    ... I'm a little surpriced about reading "Now go away". ... make it possible to install. ... > download SP-2, burn it and give you a copy. ... > || explicitly inquired about someone else downloading the patch for you, ...
    (microsoft.public.officeupdate)
  • Re: w32.blaster.worm.virus
    ... The quickest and simplest solution for you is to download (don't install ... only *after* you've applied the patch and you'll be ok on those units. ... As LanWench noted in a previous thread, machines that are already infected ...
    (microsoft.public.security)
Quantcast