Re: 810030 Microsoft VM Security Update

From: David Bailey (dave@pixel-publishing.co.uk)
Date: 02/18/03 

From: "David Bailey" <dave@pixel-publishing.co.uk>
Date: Mon, 17 Feb 2003 19:41:27 -0800

>-----Original Message-----
>Gary Williams wrote:
>>>-----Original Message-----
>>>From: David Bailey [mailto:dave@pixel-publishing.co.uk]
>>>Posted At: 10 February 2003 12:12
>>>Posted To: security
>>>Conversation: 810030 Microsoft VM Security Update
>>>Subject: re: 810030 Microsoft VM Security Update
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>
>>>>
>>>>>I wish to install the above update.
>>>>>
>>>>>Following the readme instructions I have ascertained
I
>>>>>currently have version 5.00.3167 installed on my
system.
>>>>>
>>>>>Before I can apply the 810030 patch I must first
update
>>>
>>>my
>>>
>>>>>version of the Virtual Machine to 5.00.3805.
>>>>>
>>>>>The update read me file tells me I can download this
>>>
>>>from
>>>
>>>>>the Windows Update site, but I have entered the most
>>>>>obvious search terms and come up with nothing. I also
>>>>>tried the Microsoft Download Centre and drew a blank.
>>>>>
>>>>>Does anyone know where on Microsoft's site I can
>>>
>>>download
>>>
>>>>>this patch, or do I have to update my version of
>>>
>>>Internet
>>>
>>>>>Explorer from version 5 to 5.5 - assuming this
contains
>>>>>the later version of the Virtual Machine.
>>>>>
>>>>>All help gratefully appreciated.
>>>>>
>>>>
>>>>http://windowsupdate.microsoft.com and let it scan
your
>>>
>>>PC.
>>>
>>>>--
>>>>Gary Williams
>>>>newsposter@gdwnet.com
>>>>Visit http://www.gdwnet.com for IT articles about real-
>>>
>>>world issues.
>>>
>>>>Please keep discussions in the newsgroup.
>>>>Backup everything before making any changes - Just in
>>>
>>>case!!!
>>>
>>>>Have you looked at http://groups.google.com? - The
answer
>>>
>>>you seek is
>>>
>>>>probably there!
>>>>
>>>>.
>>>>I wish to be able to download the update and archive
it.
>>>
>>>In any event, whilst windowsupdate will list the 810030
>>>update in it's list of critical updates, you would be
>>>attempting to patch an earlier version of the virtual
>>>machine which the update cannot patch.
>>
>>
>> The MS02-69 patch is 5.5MB in size. This is not patch
it is actually the
>> full version of the Microsoft Java VM (version 3809 in
fact)
>>
>>
>>>Please follow the security bulletin link in the 'read
>>>more' pop up window, and you will appreciate what I am
>>>saying.
>>>
>>>Why can't I download the file, the instructions say it
is
>>>available. Things are seldom as simple it seems, as
>>>Microsoft claim.
>>
>>
>> Because of legal issues with MS and Sun over Java.
>>
>> You can download build 5.00.3805 from
>> http://java-virtual-machine.net/download.html
>>
>> You should also read the FAQ on this page which
contains more
>> information about the legal and security situation with
this package.
>>
>> Regards,
>>
>
>
>Why not get rid of the buggy ass, security ridden peice
of crap called
>microsoft virtual machine and get the real one from Sun?
>
>.
>Given the complexity of applying this security update, I
would gladly do this. If I simply disable all options
relating to Java Virtual Machine within Internet Options
in Internet Explorer, does this mean my system is no
longer vulnerable to the security flaw as discussed in
810030?

Also, how do I then instruct Internet Explorer to use the
Sun Java environment instead?

Thank you very much for your help.

Dave Bailey

Relevant Pages

  • RE: Smiley central Active X controls
    ... security setting was selected. ... It still will not allow me to download ... Does NOT monitor behavior on the Internet ... Why some spyware services may mistake Fun Web Products and its MyWebSearch ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Java isnt working right, but all internet tests tell me its working perfectly
    ... Go to Internet Options> Security> Internet Zone, ... The new webpage shows 2 options: display graphic chart or java ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • MHTML Redirection Leads to Downloading EXE and Executing
    ... A vulnerability in Internet Explorer is found: any attacker that can reach MYCOMPUTER security zoneis able to download his EXE file and execute it. ...
    (Bugtraq)
  • Re: mirosoft say this but their product says cant do
    ... In Internet Explorer, click Tools, and then click Internet Options. ... You mean you can't actually look at the screen to see the option right there that says "Require server verification on all sites in this zone". ... The option only needs to be disabled while you enter the URL string, so you can leave it off or turn it back on after you are done adding the URLs that you want to add to that security zone. ... If you don't like the big blob in the middle of the browser window asking if you want to allow the download then configure the security settings so just the yellow Infobar shows up under the normal toolbars. ...
    (microsoft.public.windowsxp.general)
  • Not able to connect to Secure Websites
    ... Security to download updates, play online music etc. ... In the Security section of Internet Options, ... SSL and SSL 3.0 are checked ...
    (microsoft.public.windows.inetexplorer.ie6.browser)