News

Microsoft NT 4 Security Patch Flawed

Microsoft on Tuesday acknowledged problems with a Windows NT 4.0 security patch that was first released on June 23.

Users running Windows NT 4.0 Server with the Routing and Remote Access Service (RRAS) enabled reported problems after installing patch MS03-029. Apparently after installing the patch and rebooting, RRAS would fail.

"It does not affect other non-RRAS functions, nor is there a problem with the actual fix for the security vulnerability itself," Microsoft wrote in an explanation now included in the security bulletin.

Customers who are directly affected can contact Microsoft Product Support Services for a hotfix, but the fixed patch won't be publicly released until Microsoft has tested it more thoroughly, the company said.

The occasion for the original patch was a denial-of-service vulnerability in a Windows NT 4.0 file management function. Microsoft originally gave the problem a "moderate" severity rating.

The security bulletin explaining the security vulnerability and the problems with the patch can be found here:
www.microsoft.com/technet/security/bulletin/MS03-029.asp.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Warns IT Pros on Windows Netlogon Fix Coming Next Month

    Microsoft on Thursday issued a reminder to organizations to ensure that their systems are properly patched for a "Critical"-rated Windows Netlogon vulnerability before next month's "update Tuesday" patch distribution arrives.

  • Microsoft Nudging Skype for Business Users to Teams

    Microsoft on Thursday announced some perks and prods for Skype for Business unified communications users, with the aim of moving them to the Microsoft Teams collaboration service instead.

  • How To Improve Windows 10's Sound and Video Quality

    Windows 10 comes with built-in tools that can help users get the most out of their sound and video hardware.

  • Microsoft Offers More 'Solorigate' Advice Using Microsoft 365 Defender Tools

    Microsoft issued yet another article with advice on how to use its Microsoft 365 Defender suite of tools to protect against "Solorigate" advanced persistent threat types of attacks in a Thursday announcement.

comments powered by Disqus