OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
MSXML Service Packs

From: Joe Dance (dancejoeMOORE.SC.EDU)
Date: Fri Oct 15 2004 - 15:36:15 CDT

MBSA today reported that one NT server was running MSXML2.6 SP2, while SP3
was the most current SP available. On that system and others, it also
reported that MSXML 3 SP4 was installed, while SP5 was the most current SP
available. Admittedly, I had not run MBSA against these particular machines
in a while. I keep up with patches, but MSXML and MDAC updates do not seem
to get distributed by way of Windows Update, nor does it detect needed
updates to MSXML or MDAC - but MBSA checks them both.

The problem is that no trace of SP3 for MSXML 2.6, or of SP5 for MSXML 3,
can be found anywhere on any Microsoft websites, or other sites. There is
currently NO published information available, on the Microsoft XML websites
or elsewhere, about MSXML2.6, and the latest version of MSXML 3 available is
SP4.

Resolution:
MSXML 3 SP4 and MSXML4 SP2 are available online. Get current versions of
MSXML 3 and 4 at msdn.microsoft.com/XMLDownloads

For MSXML2.6, go to knowledgebase article 823490; download and install the
msxml file. Although the article does not mention MSXML 2.6 SP3, that is
what you are getting.

If anyone knows of a proper way to remove or uninstall old versions of
MSXML, I think a lot of folks would like to hear it. At least one Microsoft
rep has publicly stated that old versions of MSXML cannot be removed. They
are not listed in Add/Remove Programs. It might be as simple as
unregistering the dll files, and deleting them, but I'm not certain of that,
or of what other effects such action would trigger. As I stated, I'm open
to suggestion.

Joe Dance
University of South Carolina

---
[This E-mail scanned for viruses by Declude Virus]

--
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
--