I've had more than a few people complain about MS Security Bulletins indicating Windows Update as the only place to get a patch. Their complaints have focused on their belief they cannot get a redistributable version of the patch, as if they'd have to take every box to WU to get it patched.

This simply isn't the case (at least not the case with IE 5.x/6.x). Apart from Software Update Services (you're own WU box), you can get redistributable versions of all patches from WU by following the instructions below. These instructions are also mirrored at;

http://www.ntbugtraq.com/redisWU.asp

This example is for the latest build of the Microsoft Virtual Machine patch released 9/24/2002.

Go to Windows Update <http://v4.windowsupdate.microsoft.com/en/default.asp>

Choose Personalize Windows Update

Check "Display the link to the Windows Update Catalog under See Also" (a section in the left panel of the WU site)

You'll then get a new link on the page titled "Windows Update Catalog", choose that link

Click on "Find updates for Microsoft Windows operating systems"

Choose "Windows 2000 family" from the Operating System listbox

Click "Advanced search options" button

Type in VM in the "Contains these words" textbox. Don't try and put an MSXX-XXX number in, that doesn't work (doh!) KB article numbers work.

Click "Search" or hit enter

Click on "Critical Updates and Service Packs", it should have a (2) beside it.

In the "Q329077: Security Update - (Posted Date: September 24, 2002)" panel, click "Add"

Click "Go to Download Basket"

In the "Type or browse to the download location of your choice:" textbox, type c:\temp, or click the browse button to browse to a directory on your system. This is where the redistributable package is going to be downloaded to. The directory must already exist.

Click "Download Now"

Accept the license if you want to proceed and understand it.

When the download is complete, you'll see the "Download History" screen. You'll notice the "Q329077: Security Update" panel, and in there you'll also see a link to a local file. It should look something like;

Location: C:\temp\Software\en\com_microsoft.windows2000\x86win2k\com_microsoft.Q329077_VM_UPD_5710

You can click on that link to bring up a listing of the directory, or browse there yourself. You'll see two files there, ReadMore and VM-SFIX3.exe. These are the redistributable versions.

The location will eventually be populated with a variety of directories, indicating platform, language, processor, etc...

There you go. Redistribute to your heart's (and the license's) content.

Cheers,
Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]