OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Patch MS03-045 for Czech W2K has conflicting kernel32.dll

From: Ondøej Holas (OHolasEXCH.DIGI-TRADE.CZ)
Date: Fri Oct 17 2003 - 11:50:22 CDT

Patch MS03-045 (824141) for Czech version of Windows 2000 has kernel32.dll with preferred base address changed and causing overlay with mpr.dll. If a process using mpr.dll starts and kernel32.dll is loaded first, it's OK - mpr.dll is relocated (the only effect of the conflict here is a bit greater memory usage since pages of relocated libraries are not shared between processes). If mpr.dll is loaded first, kernel32.dll cannot be relocated (is present on "KnownDlls list") and the process does not start at all. Uninstallation of 824141 helps to resolve this problem, but leaves the system unpatched by MS03-045.

English version of the patch seems to be OK. We've not tested other language versions.

Regards,

Ondrej Holas
Senior Systems Consultant

DIGI TRADE, s.r.o.
Vlkova 46
Praha 3
130 00
Czech Republic
Tel.: +420 222 720 699
Fax : +420 222 722 302
http://www.digi-trade.cz

----
NTBugtraq subscribers save $103.00 off the TICSA exam by using promo
code "NT1003" when registering to take the TICSA exam at www.2test.com.
Prove to your employer and peers that you have the knowledge and
abilities to be an active stakeholder in today's enterprise security.
Become TICSA certified www.trusecure.com/ticsa. Promotion expires
12/31/03 and cannot be used in combination with other offers.

----