RE: MS05-019 Windows XP SP1 issues with raw sockets (nmap problems) and MTU

From: Amanda Wang [MSFT] (v-amanwa_at_online.microsoft.com)
Date: 04/27/05 

Date: Wed, 27 Apr 2005 13:18:30 GMT

Hello,

Per your description, he seems have some questions regarding
http://support.microsoft.com/?kbid=898060
and http://www.microsoft.com/technet/security/bulletin/MS05-019.mspx

For these questions, I have submitted to related department and am waiting
for reply.

For the current situation, I would ask some of your questions as following:

- will the MS05-019 bulletin be updated with these issues (still listed as
1.0 as of 2005-04-26 08:33 PST)?

No recently.

- is Microsoft planning on reissuing a new binary fix for MS05-019 after
KB898060 has undergone the necessary regression testing?
- is a new binary fix planned to be released out of cycle, or do we have
to wait until May 10 2005?

Not yet determined.

1. Re-Release involves huge customer download; there will may not be a
release of MS05-19.
2. We are currently evaluating if there is a need.
3. This hotfix contains MS05-19, and this fix has hotfix level testing.
4. You can get the hotfix from PSS.

So, I would recommend the hotfix which includes MS05-019.

- are raw sockets enabled in the XP SP1 version of KB 898060?
- could advanced users request an alternate patch version that enables raw
sockets under XP SP2?

These two questions I'm contacting our related department and waiting for
reply. I will give the answers after getting the response from there as
soon as possible.

HTH!

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

====================================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================================

--------------------
>From: <powzzofr@myalias.postalias>
>Subject: MS05-019 Windows XP SP1 issues with raw sockets (nmap problems)
and MTU
>Date: Tue, 26 Apr 2005 08:38:47 -0700
>Lines: 18
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
>Message-ID: <uretVYnSFHA.3420@TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.security,microsoft.public.windowsxp.general
>NNTP-Posting-Host: dhcpool201e-002.coph.arizona.edu 128.196.187.52
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windowsxp.general:375842
microsoft.public.security:23148
>X-Tomcat-NG: microsoft.public.security
>
> I understand Microsoft is working on updates of this security patch per
>KB 898060 (as well as for WS2003 SP1). I have several questions:
>
>- will the MS05-019 bulletin be updated with these issues (still listed as
>1.0 as of 2005-04-26 08:33 PST)?
>- is Microsoft planning on reissuing a new binary fix for MS05-019 after KB
>898060 has undergone the necessary regression testing?
>- is a new binary fix planned to be released out of cycle, or do we have to
>wait until May 10 2005?
>- are raw sockets enabled in the XP SP1 version of KB 898060?
>- could advanced users request an alternate patch version that enables raw
>sockets under XP SP2?
>
> Disabling raw sockets is a serious issue for nmap users, and
Microsoft's
>suggestion to use Windows Server 2003 is not practical for many users (RAM
>requirements for VPC is my biggest problem).
>
>
>

Relevant Pages

  • Re: BSOD
    ... I found a hotfix and applied it and waiting to see whether I will still get BSOD ... Enquire, plan and execute ...
    (microsoft.public.windowsxp.newusers)
  • Re: Gibson is back and at it again
    ... Windows XP is now widely distributed with its "evil" raw sockets ... capability, but I'm still waiting for the death of the internet that ...
    (alt.2600)
  • Re: update cube statements make server go to 100% processor and hangs
    ... Thanks for your suggestion. ... I didn't wanna start out waiting for MS to ... send me a hotfix, so I took 5 minutes too look over the stuff again ...
    (microsoft.public.sqlserver.olap)
  • Re: ISA 2004 SP2 WebProxy Filter Bug?
    ... The reported issues with SP2 have been fixed in the rollup. ... waiting for the patches that fix them, ... Once the hotfix or rollup is released for PSS distribution, ...
    (microsoft.public.isa)
  • Re: Exchange Error 8331 & hotfix
    ... I applied the hotfix, and it did not solve my problem. ... I'm still waiting ... microsoft recommends that you ... > service pack.. ...
    (microsoft.public.windows.server.sbs)
Quantcast