MS posts 5 critical updates

[M_Six]

New worm going around, folks. Looks like Dell is getting swamped with calls about crashed machines. MS posted 5 new critical updates today, so grab 'em while you still can.

[rastorize]

Thanks M_Six.

[filipino]

thanks for the headup M_Six..

[surreal]

Do you know what they were M_Six?
I was over there This morning and picked up a few, but I also ignore the ones that don't apply to me... (skipping Outlook etc.)

[M_Six]

I guess not all of them are "critical", but I would consider any security issue to be so.

From Microsoft:

Summary:
========
This advisory contains information about all security updates released this month. It is broken down by security bulletin severity.

Critical Security Bulletins
===========================

MS04-022 - Vulnerability in Task Scheduler Could Allow Code
Execution (841873)

- Affected Software:
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4
- Windows XP and Windows XP Service Pack 1
- Windows XP 64-Bit Edition Service Pack 1

- Affected Components:
- Internet Explorer 6 when installed on Windows
NT 4.0 SP6a (Workstation, Server, or Terminal
Server Edition)

- Impact: Remote Code Execution
- Version Number: 1.0

MS04-023 - Vulnerability in HTML Help Could Allow Code
Execution (840315)

- Affected Software:
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4
- Windows XP and Windows XP Service Pack 1
- Windows XP 64-Bit Edition Service Pack 1
- Windows XP 64-Bit Edition Version 2003
- Windows Server 2003
- Windows Server 2003 64-Bit Edition

- Affected Components:
- Internet Explorer 6 when installed on Windows
NT 4.0 SP6a (Workstation, Server, or Terminal
Server Edition)

- Review the FAQ section of bulletin MS04-O23 for
information about these operating systems:
- Microsoft Windows 98
- Microsoft Windows 98 Second Edition (SE)
- Microsoft Windows Millennium Edition (ME)

- Impact: Remote Code Execution
- Version Number: 1.0

Important Security Bulletins
============================

MS04-019 - Vulnerability in Utility Manager Could Allow Code
Execution (842526)

- Affected Software:
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4

- Impact: Remote Code Execution
- Version Number: 1.0

MS04-020 - Vulnerability in POSIX Could Allow Code
Execution (841872)

- Affected Software:
- Windows NT Workstation 4.0 Service Pack 6a
- Windows NT Server 4.0 Service Pack 6a
- Windows NT Server 4.0 Terminal Server Edition
Service Pack 6
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4

- Impact: Remote Code Execution
- Version Number: 1.0

MS04-021 - Security Update for IIS 4.0 (841373)

- Affected Software:
- Windows NT Workstation 4.0 Service Pack 6a
- Windows NT Server 4.0 Service Pack 6a

- Impact: Remote Code Execution
- Version Number: 1.0

MS04-024 - Vulnerability in Windows Shell Could Allow Remote
Code Execution (839645)

- Affected Software:
- Windows NT Workstation 4.0 Service Pack 6a
- Windows NT Server 4.0 Service Pack 6a
- Windows NT Server 4.0 Terminal Server Edition
Service Pack 6
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4
- Windows XP and Windows XP Service Pack 1
- Windows XP 64-Bit Edition Service Pack 1
- Windows XP 64-Bit Edition Version 2003
- Windows Server 2003
- Windows Server 2003 64-Bit Edition

- Review the FAQ section of bulletin MS04-O24 for
information about these operating systems:
- Microsoft Windows 98
- Microsoft Windows 98 Second Edition (SE)
- Microsoft Windows Millennium Edition (ME)

- Impact: Remote Code Execution
- Version Number: 1.0

Moderate Security Bulletins
===========================

MS04-018 - Cumulative Security Update for Outlook Express
(823353)

- Affected Software:
- Windows NT Workstation 4.0 Service Pack 6a
- Windows NT Server 4.0 Service Pack 6a
- Windows NT Server 4.0 Terminal Server Edition
Service Pack 6
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4
- Windows XP and Windows XP Service Pack 1
- Windows XP 64-Bit Edition Service Pack 1
- Windows XP 64-Bit Edition Version 2003
- Windows Server 2003
- Windows Server 2003 64-Bit Edition

- Review the FAQ section of bulletin MS04-O18 for
information about these operating systems:
- Microsoft Windows 98
- Microsoft Windows 98 Second Edition (SE)
- Microsoft Windows Millennium Edition (ME)

- Impact: Denial of Service
- Version Number: 1.0

[Xtreeme]

As usuall its all that built in remote help, remote access crap catching up with M$. ANYONE, even a 10 year old could have told them that was a huge security flaw in itself. And since its deep in the OS your stuck with these flaws that keep showing. We need a REAL home version of XP without remote desktop and all the junk home users DONT use or need the risk of someone tampering with.

[John Prophet]

thats one reason I go thru the services/msc and turn off all the junk stuff that is not needed...all that remote desktop sharing crap included...hopefully it closes a few security holes.


it sort of makes me ill that Dell and others put out machine with so many holes...for instance often the machines come with 3 month old msoft updates not installed. I know they use images etc but still it seems they could do a lil better sometimes. Like when blaster was first out...the patch was out...I buy some Dells a while later and they dont even have the blaster patch, lol.

Thats one reason to buy from a local guy who is knowledgeable...I try to explain this to peeps when they ask why my comps cost more than WalMarts, lol....

[surreal]

you got that one right Xtreeme.

I was over there today, looking around and read the article about sp2....

Quote:

Microsoft has always encouraged users to turn on Automatic Updates in Windows XP. But Service Pack 2 requires you to make a choice, before you do anything else. You should turn it on. Your friends, family, and the Internet community will thank you for doing your part in fighting the spread of these worms, viruses, and Trojans

ie;
You have a choice to not let us control your computer. And you must be the one to make your choice. But remember if you chose to not ask Microsoft for help making the decisions for you regarding how you control your computer, you are not a good person.
You will spread worms, viruses, and Trojans. You will be working against your friends, family and the entire internet community.
And that makes you a very bad person.

Quote:

Windows Update
With Service Pack 2, the Windows Update site on the Web is launching a new and more intuitive interface.