Re: Security update pulled back

From: Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] (sbradcpa_at_pacbell.net)
Date: 05/31/03


Date: Fri, 30 May 2003 23:09:10 -0700
To: mmarconi@harris.com


Who in their right might writes a story about a Pulled patch and doesn't
give the details as to watch patch was pulled..... every single news
reporting place with the exception of The Register web site ran that
story with no mention of the match and furthermore, didn't make it clear
that it didn't come down if you had auto critical updates, and only if
you chose the middle tier section of WU AND went out that day.

Somehow I doubt that 600,000 computers were affected .... 14 out of 14
XPs at my office were not.

818043: Recommended Update for Windows XP
Download size: 771 KB, < 1 minute

This update to internet Protocol Security Clients IPSec and L2TP/IPSec
allows IPSec to work across Network Address Translation (NAT)
boundaries. A
client may connect to a Windows Server 2003 Server with IPSec or
L2TP/IPSec
when the client is behind one or more NATs. Users should download this
update if they use IPSec and/or L2TP Virtual Private Network (VPN)
connections. After you install this item, you may have to restart your
computer.

This will be added to the KB article:

Microsoft has released an update package to enhance the current
functionality of the Layer Two Tunneling Protocol (L2TP) and Internet
Protocol security (IPSec) on computers that are running Windows XP or
Windows 2000. For detailed information about this update package, see
article 818043, "L2TP/IPSec NAT-T Update for Windows XP and Windows
2000,"
in the Microsoft Knowledge Base.

This update includes improvements to IPSec to better support virtual
private
network (VPN) clients that are behind network address translation (NAT)
devices. If you apply this update to a computer running Windows XP and
if
the IPSec service (which appears as "IPSEC services" in the list of
system
services) encounters a runtime error and is unable to start for any
reason,
the IPSec driver will operate in block mode because it cannot secure
network
traffic. For example, this problem might occur if a non-Microsoft
application is using UDP port 500 or UDP port 4500. When this problem
occurs, the computer cannot communicate with other computers on the
network.
To resolve this problem, you can remove this update. To remove this
update,
use Add/Remove Programs in Control Panel.

Mark wrote:

> There was an article in CNN that claimed that Microsoft
> pull back a security update for XP, released 21 May 2003.
> What was the ID / KB number of the update?



Relevant Pages

  • GPO: User to change TCP/IP settings:
    ... Server: Windows 2003 Standard ... Clients: Windows 2000 SP4 ... GPOs set. ... Administrative Templates -> Network -> Network Connections) there are a ...
    (microsoft.public.win2000.active_directory)
  • printing across network using multifunction printer psc1315
    ... Printing to the HP PSC1315 across a network having windows xp, ... Printing with linux client to linux server and windows xp to windows xp ... With the win98 clients, this was all that was required. ...
    (comp.os.linux.networking)
  • Re: Internet Sharing
    ... Configure the NAT Service in Windows 2000 ... Configure Clients to Use a Network Address Translation Server ...
    (microsoft.public.windows.server.general)
  • Re: Win 98 Client Support
    ... clients on a SBS2003 network. ... Windows 98 client experiences logon problems, ... intermittently drops off the network. ... >as I am sure you are aware, security within Windows 98 ...
    (microsoft.public.windows.server.sbs)
  • Re: User to change TCP/IP settings:
    ... If you happen to have any Windows XP or Server 2003 member server clients do ... > Administrative Templates -> Network -> Network Connections) there are a ...
    (microsoft.public.win2000.active_directory)