Re: Microsoft Security Bulletin MS02-061

From: Stephen Dybing (stephd@online.microsoft.com)
Date: 10/17/02 

From: stephd@online.microsoft.com ("Stephen Dybing")
Date: Thu, 17 Oct 2002 17:46:21 GMT

I've been informed that it's enough to replace the xpweb70.dll file and run
the script mentioned in the readme file.

Sincerely,
Stephen Dybing
Program Manager, Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.
Please reply to the newsgroups only, thanks.

--------------------
| From: "Jay" <jay4050@hotmail.com>
|
| we have already installed cumulative security patch metnioned in security
| Bulletin MS02-061 (Q316333) and all of our servers show version Microsoft
| SQL Server 2000 - 8.00.679 (Intel X86). nonetheless, i downloaded the
patch
| and compared the individual file versions and their last modified dates
with
| the those files in our production servers and they are same except for
| xpweb70.dll, we have file version 2000.80.606.0 and the file in patch has
| version 2000.80.686.0. Can we just replace this file from the patch? or
we
| still need to install the whole patch or is there a smaller version of the
| patch available to fix the new found vulenerabilty with webtasks
| stored/extended procedures?

Relevant Pages