MS Windows and Office CRITICAL UPDATE Security Bulletin MS02-050 -- New 9-5-02

[Harvey]

Yeah, I know it's not about hardware, but it's about keeping your hardware running. I just figured this forum gets so much traffic, and this info is important enough to get to as many people as possible.

Hope you get it before it gets you.

* * *

Microsoft Security Bulletin MS02-050 -- More info

Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)

Originally posted: September 04, 2002
Updated: September 05, 2002

Summary:

Who should read this bulletin: Customers using Microsoft® Windows®, Office for Mac, Internet Explorer for Mac, or Outlook Express for Mac.

Impact of vulnerability: Identity spoofing.

Maximum Severity Rating: Critical

Recommendation: Administrators should install the patch immediately.

Affected Software:

Microsoft Windows 98
Microsoft Windows 98 Second Edition
Microsoft Windows Me
Microsoft Windows NT® 4.0
Microsoft Windows NT 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Office for Mac
Microsoft Internet Explorer for Mac
Microsoft Outlook Express for Mac

Patch availability:

Download locations for this patch:

Microsoft Windows 98/98SE
Windows Me
Windows NT 4.0
Windows NT 4.0 Terminal Server Edition
Windows 2000: (To be released shortly)
Windows XP and Windows XP 64 Bit Edition

Microsoft Office v.X for Mac: (To be released shortly)
Microsoft Office 2001 for Mac: (To be released shortly)
Microsoft Office 98 for the Macintosh (To be released shortly)
Microsoft Internet Explorer for Mac (for OS 8.1 to 9.x) (To be released shortly)
Microsoft Internet Explorer for Mac (for OS X) (To be released shortly)
Microsoft Outlook Express 5.0.5 for Mac (To be released shortly)

Microsoft Office v.X for Mac: (To be released shortly)
Microsoft Office 2001 for Mac: (To be released shortly)
Microsoft Office 98 for the Macintosh (To be released shortly)
Microsoft Internet Explorer for Mac (for OS 8.1 to 9.x) (To be released shortly)
Microsoft Internet Explorer for Mac (for OS X) (To be released shortly)
Microsoft Outlook Express 5.0.5 for Mac (To be released shortly)

 

[murphy55d]

thank you sir.

 

[Harvey]

Bump for the cause.

 

[aswedc]

"To be released shortly" WTF

 

[bigboxes]

Done.

~box

 

[Harvey]

Bump for the cause.

 

[Harvey]

Once more. This one's really important if you buy or sell on line. The headline on News.com Credit card theft feared in Windows flaw ? :Q

 

[bacillus]

bump

 

[Chang10is]

Thanks for the heads up

 

[JackBurton]

Thanks man!

 

[Mr.IncrediblyBored]

I posted this in the topic in Off Topic.

Originally posted by: KnightBreed
"This update is not designed for your version of Internet Explorer. Press OK to exit"

What the damn hell is this?

I get this error when I try to install the package. I'm on Win98 and IE5.0.

 

[Zepper]

Thanks Harvey!

The main patch is for IE6.x.
.bh.

 

[Mr.IncrediblyBored]

Originally posted by: Zepper
Thanks Harvey!

The main patch is for IE6.x.
.bh.

1) Is there a download for older IE versions?
2) Am I going to have to upgrade?
3) Is my version vulnerable to this flaw?

 

[Zepper]

KnightBreed et al.
Someone near the top of the thread posted a list of the affected software. I didn't see IE5 listed but you should go the the MS web site and check it out for yourself. All I use IE for is to do the automated Windows Update (that's another thing the court settlement should include - that all windows software automated update tools must be made to work with all browsers - in fact no other piece of MS software should be allowed to require IE for any purpose). For all my web browsing, email etc., I use either Mozilla or Opera.
:Q
.bh.

 

[MiExStacY]

does anyone know if this update is uncluded in SP1?

 

[bacillus]

Originally posted by: MiExStacY
does anyone know if this update is uncluded in SP1?

no its not included!