OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Lucas, Mark J. (mjlucasDAR.CALTECH.EDU)
Date: Mon Jun 17 2002 - 12:54:26 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    After applying Q318138, "Unchecked Buffer in Remote Access Service Phonebook
    Could Lead to Code Execution", which was released last week, my Power Users
    and Users could no longer connect to any VPN using the "connectoid" in
    Network and Dial-up Connections. The icon switched from a cloud to a red X.
    Right clicking on the icon would bring up properties but "connect" was
    grayed out. Administrators could connect normally. Dial-up connections
    were unaffected.

    If C:\Documents and Settings\All Users\Application
    Data\Microsoft\Network\Connections\Pbk\rasphone.pbk was opened Power
    Users/Users could connect normally, as well as being able to connect during
    logon by checking the "Log on using dial up networking" check box. While
    connected this way, the connectoid in Network and Dial-up Connections showed
    the normal cloud icon. However, once disconnected, the icon immediately
    switched back to the red X and a new connection could not be initiated
    through Network and Dial-up Connections but it could be initiated through
    rasphone.pbk.

    A new VPN connectoid could be created in the Power User/User account and
    would work normally until logoff. When the Power User/User logged back on,
    the connectoid would again be unusable.

    A case was opened with Microsoft concerning this issue and they are aware of
    the problem.

    Uninstalling the hotfix on the clients immediately corrects the problem.

    ----------------
    Mark J. Lucas, Sr. System Administrator
    Development & Alumni Relations, Information Services
    California Institute of Technology
    Voice: (626) 395-2177
    Fax: (626) 844-9356
    mjlucasdar.caltech.edu