It was also noticed that any post-SP2 hotfixes were essentially
removed(???) from the system after applying SP2.

So, just to be safe, I installed SP2 then applied the following list of
post-SP2 hotfixes (one of which is actually included in SP2 even though
it's labelled for SP3...interesting):

[URLs may be wrapped]

Post-SP2 Hotfixes
--------------------
Q285156
http://www.microsoft.com/TechNet/security/bulletin/MS01-013.asp

Q285985
http://www.microsoft.com/TechNet/security/bulletin/MS01-004.asp

Q286818 (***included in SP2***)
http://www.microsoft.com/TechNet/security/bulletin/MS01-014.asp

Q287397
http://www.microsoft.com/TechNet/security/bulletin/ms01-011.asp

Q293826
http://www.microsoft.com/TechNet/security/bulletin/ms01-026.asp

Q294391
http://www.microsoft.com/TechNet/security/bulletin/MS01-024.asp

Q296185
http://www.microsoft.com/TechNet/security/bulletin/ms01-025.asp

After I applied these 6 (because remember one is already included in
SP2) I ran the IIS 5.0 hotfix checker and it didn't find any missing
items.

Eric

-----Original Message-----
From: Rich Wilson [mailto:wk633yahoo.com]
Sent: Thursday, May 17, 2001 12:47 PM
To: focus-mssecurityfocus.com
Subject: Win2K SP2

Background:

The Register is reporting possible hotfix problems with SP2
(http://www.theregister.co.uk/content/4/19007.html)

The article quotes a BetaNews poster who found the HotFix Checker for
IIS 5.0
(HFCINST) reports 4 patches as needing to be applied, after applying
SP2.
(http://www.betanews.com/article.php3?sid=989612340)

Three of the four (MS01-023, MS01-016 and MS01-014) are all listed as
fixed in the bug fix list for SP2
(http://support.microsoft.com/support/kb/articles/Q298/1/93.ASP)

What I can't find is MS01-004 (Q285985), and I've searched all for pages
of the bug fix list.

Someone else pointed out that MS01-026 didn't make it into SP2, so be
sure to apply it.

Anyone have any idea about MS01-004? Did I miss it? (just had a
thought and answered my own question, MS01-026 includes MS01-004, so as
long as you do both, SP2 and MS01-026, you should get everything)

ok, new question, is order important between MS01-026 and SP2?

=====
: __o
: -\<,
: 0/ 0

__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]