News

Microsoft Releases Security Notices

Microsoft has released updates on two recent security bulletins. On October 22, Microsoft released a bulletin on the availability of a patch that improves the randomness of TCP Initial Sequence Generators. Recently, however, Microsoft learned that the patch contains a regression error and, as a result, has removed it from the Microsoft Web site.

The patch is affected by the same error that was recently announced in Windows NT 4.0 Service Pack 6. The effect of the error is to prevent some applications from connecting to the server via Winsock unless run in an administrative context. The error is not associated with TCP Initial Sequence numbers, nor does it pose any security risk.

Microsoft has also announced a re-release of a patch originally announced on October 18. That patch was a workaround for a vulnerability that would allow a malicious Web site operator to read files on the computer of a user who had visited the site. Microsoft has completed a patch that completely eliminates the vulnerability. Microsoft Internet Explorer 4.01 and 5 are affected by the vulnerability. The patch is available at http://www.microsoft.com/msdownload/iebuild/jsredir/en/jsredir.htm. The IE 4.01 patch requires IE 4.01 SP2 in order to install. That is available at http://www.microsoft.com/Windows/ie/download/windows.htm.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Windows Admin Center vs. Hyper-V Manager: What's Better for Managing VMs?

    Microsoft's preferred interface for Windows Server is Windows Admin Center, but can it really replace Hyper-V Manager for managing virtual machines? Brien compares the two management tools.

  • Microsoft Offers More Help on Windows Server 2008 Upgrades

    Microsoft this week published additional help resources for organizations stuck on Windows Server 2008, which fell out of support on Jan. 14.

  • Microsoft Ups Its Carbon Reduction Goals

    Microsoft on Thursday announced a corporatewide carbon reduction effort that aims to make the company "carbon negative" by 2030.

  • How To Dynamically Lock Down an Unattended Windows 10 PC

    One of the biggest security risks in any organization happens when a user walks away from their PC without logging out. Microsoft has the solution (and it's not a password-protected screensaver).

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.