MSB MS-4-007

  • Thread starter Thread starter Chuck
  • Start date Start date
C

Chuck

Having just read Microsoft's latest update notice (MS04-007), and
noting that it rates a Critical Severity Rating, I proceeded
immediately to Microsoft Update, and rescanned for updates pending.
Imagine my surprise when Microsoft Update reported 0 Critical Updates
available for my system, Windows XP Pro SP1.

I searched my installation history carefully, and ensured that the
relevant update, 828028, had not been yet applied to my system.

Would this be yet another instance of the left hand not telling the
right hand what it is doing?
 
Chuck;

Go back and check at Windows Update
and rescan. I had to check twice for Security Update 828028.
And Security Update 832894 still can't be found.
 
Chuck;

Microsoft Security Bulletin MS04-007
Security Update for Windows XP: KB828028
http://www.microsoft.com/downloads/...97-D4AE-48E9-ACD0-1343D89CCBBA&displaylang=en
Click to expand...


Wesley,

I read MS04-007, and KB828028, earlier. To find the latest security
releases for you visit Windows Update and click "Scan for updates."

Nowehere in MS04-007 does it say that the update is not applicable to
all versions of Windows XP. I checked the file in question on my
system, msasn1.dll, and noted that I have V5.1.2600.0, dated
8/23/2001. The recommended update is V5.2.3790.88, dated 10/23/2003.

MS04-007 was issued 2/10/2004. KB828028 on 2/9/2004. The referenced
fix is dated 10/23/2003. In 3+ months, Microsoft couldn't manage to
add the fix being released to Microsoft Update?
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Chuck;

Go back and check at Windows Update
and rescan. I had to check twice for Security Update 828028.
And Security Update 832894 still can't be found.
Click to expand...

Hah. Now it shows available.

I wonder how many M$ customers will quit after the first time, think
their system doesn't apply to the Critical situation, and not update?
Is this a bug in the M$ Update ActiveX control, the Update server, or
what?

Thanks for the clue.
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Unfortunately, quite a few.
If you know it's supposed to be available,
persistence figures in. :o)

I have no idea what the deal is.
 
Chuck;

I'm not a spokesman, just relaying what I knew. :o)

Just because you're paranoid doesn't mean they
aren't out to get ya.
 
On Wed, 11 Feb 2004 01:37:14 GMT, "Wesley Vogel"
If you know it's supposed to be available,
persistence figures in. :o)
Click to expand...

Took me two days, via ADSL, to get the pages to load.
I smell the blood of a DDoS battle...

-- Risk Management is the clue that asks:
Click to expand...
"Why do I keep open buckets of petrol next to all the
ashtrays in the lounge, when I don't even have a car?"
 
Back
Top