WinXP SP1 with MDAC 2.8SP1(MS06-014)

  • Thread starter Thread starter Li Yuan
  • Start date Start date
L

Li Yuan

Is WinXP SP1 with MDAC 2.8SP1 affected by the vulnerability mentioned in
MS06-014?

WinXP SP1 with MDAC 2.7SP1, WinXP SP2 with MDAC 2.8SP1 and WinXP SP1 with MDAC
2.8 are listed in affected software and components.
 
Good question. I'll ask MS and get back to you.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============
 
Yes, it is affected.
http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx

Affected Software:
..Microsoft Windows XP Service Pack 1 running Microsoft Data Access
Components 2.7 Service Pack 1 - Download the update
..Microsoft Windows XP Service Pack 2 running Microsoft Data Access
Components 2.8 Service Pack 1 - Download the update
..Microsoft Windows XP Professional x64 Edition running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update
..Microsoft Windows Server 2003 running Microsoft Data Access Components
2.8 - Download the update
..Microsoft Windows Server 2003 Service Pack 1 running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update
..Microsoft Windows Server 2003 for Itanium-based Systems running Microsoft
Data Access Components 2.8 - Download the update
..Microsoft Windows Server 2003 with SP1 for Itanium-based Systems running
Microsoft Data Access Components 2.8 Service Pack 2 - Download the update
..Microsoft Windows Server 2003 x64 Edition running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/


MowGreen said:
Good question. I'll ask MS and get back to you.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

Li said:
Is WinXP SP1 with MDAC 2.8SP1 affected by the vulnerability mentioned in
MS06-014?

WinXP SP1 with MDAC 2.7SP1, WinXP SP2 with MDAC 2.8SP1 and WinXP SP1 with
MDAC
2.8 are listed in affected software and components.
Click to expand...
Click to expand...
 
Thanks, Bernard. MS confirms that MDAC 2.8 SP1 is affected on
XP SP1.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============
 
I think MS06-014 should be revised for the neglect. It would be strange that
WinXPSP2 with 2.8SP1 is at risk while WinXPSP1 with 2.8SP1 is safe, though.

Bernard, I've carefully checked, XP SP1 with MDAC 2.8 SP1 is NOT listed on
affected software or components.

MowGreen, thanks for your confirmation. I still need some explanations about
whether the update for sp1+mdac2.8, sp2+mdac2.8sp1 or sp1+mdac2.7sp1 can be used
for sp1+mdac2.8sp1.

--
Sincerely, Alex

MowGreen said:
Thanks, Bernard. MS confirms that MDAC 2.8 SP1 is affected on
XP SP1.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============
Yes, it is affected.
http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx

Affected Software:
.Microsoft Windows XP Service Pack 1 running Microsoft Data Access
Components 2.7 Service Pack 1 - Download the update
.Microsoft Windows XP Service Pack 2 running Microsoft Data Access
Components 2.8 Service Pack 1 - Download the update
.Microsoft Windows XP Professional x64 Edition running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update
.Microsoft Windows Server 2003 running Microsoft Data Access Components
2.8 - Download the update
.Microsoft Windows Server 2003 Service Pack 1 running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update
.Microsoft Windows Server 2003 for Itanium-based Systems running Microsoft
Data Access Components 2.8 - Download the update
.Microsoft Windows Server 2003 with SP1 for Itanium-based Systems running
Microsoft Data Access Components 2.8 Service Pack 2 - Download the update
.Microsoft Windows Server 2003 x64 Edition running Microsoft Data Access
Components 2.8 Service Pack 2 - Download the update
Click to expand...
Click to expand...
 
Alex,

Once again, good question. Maybe I'm missing something but there is not
a clear explanation for your situation.
When checking the MDAC 2.8SP1 download page, this is what one finds :
http://www.microsoft.com/downloads/...95-EFC2-4F8E-A9E0-3A1AFBD5922E&displaylang=en

System Requirements

* Supported Operating Systems: Windows 2000; Windows 98; Windows
ME; Windows NT

XP is not even listed. The MDAC 2.8 download page DOES list XP:
http://www.microsoft.com/downloads/...E3-C795-4B7D-B037-185D0506396C&displaylang=en

System Requirements

* Supported Operating Systems: Windows 2000; Windows 98; Windows
ME; Windows NT; Windows XP

I find this very confusing. If it were my system, I'd create a Restore
Point and then install the update from this link :
Microsoft Windows XP Service Pack 2 running Microsoft Data Access
Components 2.8 Service Pack 1

If any issue boot issue arises, go to Safe Mode and uninstall the
update. If that doesn't work, run System Restore from SM.
Also, System Restore run from a Command Prompt can be utilized if
needed :
http://support.microsoft.com/kb/304449

Then I'd run the MBSA 2.0 to confirm that this is the correct update:
http://support.microsoft.com/kb/895660

HTH,
MowGreen
 
Yep, it's a good idea to install the patch for sp2+mdac2.8sp1 after a restore point.

The download page for mdac2.8sp1 should be revised now.:-)
 
It seems I missed sth. KB899456 said:

The MDAC 2.8 SP1 stand-alone release is not supported on the Microsoft Windows
XP operating system or on the Microsoft Windows Server 2003 operating system. To
update the MDAC version that is installed together with Windows XP or with
Windows Server 2003, you must use operating system service packs or Windows
Update.
 
IOW, it's included in XP SP2 and then one would need to do the update.
Yer choice, Alex. How did you get MDAC 2.8 SP1 installed then ? ;)

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============
 
microsoft.public.cn.security, microsoft.public.cn.windowsxp¶¼ÊÇÖÐÎÄÐÂÎÅ×飬ӢÎÄÓû§Ã»±ØÒªµÄʱºòÇë×îºÃ²»ÒªÓá£

--
-΢ÈíÖÐÎÄÐÂÎÅ×é¡¢¾«»ªÇøOutlook Express°æÖ÷
-´ó¼ÒÒ»Æð¹²Í¬½»Á÷°É!
-ÁªÏµ·½Ê½£ºMSN: (e-mail address removed)

-΢ÈíÐÂÎÅ×é(NNTP)£ºnews://msnews.microsoft.com/ (ÍƼö)
-΢ÈíÖÐÎļ¼ÊõÉçÇø£ºhttp://bbs.mscommunity.com/
-½¨Òéͨ¹ýNNTP·½Ê½ÔĶÁÐÂÎÅ×é(ÀýÈçʹÓÃOutlook Express)£¬¶ø²»ÊÇWebÍøÒ³¡£
 
ÎÒ±¾²»Ïë·¢Ó¢ÎÄÓʼþ£¬µ«¿ÉÒÔÔ¤¼ÆÖÐÎÄ×éûÈË´îÀíÎÒ£»ÊÂʵҲӡ֤ÁËÕâµã¡£
 
I don't know...I'd never read the article before..but I really
installed...confused...:-P
--
Sincerely, Alex

MowGreen said:
IOW, it's included in XP SP2 and then one would need to do the update.
Yer choice, Alex. How did you get MDAC 2.8 SP1 installed then ? ;)

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

Li said:
It seems I missed sth. KB899456 said:

The MDAC 2.8 SP1 stand-alone release is not supported on the Microsoft Windows
XP operating system or on the Microsoft Windows Server 2003 operating system. To
update the MDAC version that is installed together with Windows XP or with
Windows Server 2003, you must use operating system service packs or Windows
Update.
Click to expand...
Click to expand...
 
ÕâÑùµÄ»°£¬Ö±½Ó·¢È¥Ó¢ÎÄ×é¾Í¹»ÁË£¬Á½ÖÖÓïÑÔÕâÑù»ìÔÚÒ»ÆðÒ²²»ÊÇÄÇôÍ×µ±¡£

--
-΢ÈíÖÐÎÄÐÂÎÅ×é¡¢¾«»ªÇøOutlook Express°æÖ÷
-´ó¼ÒÒ»Æð¹²Í¬½»Á÷°É!
-ÁªÏµ·½Ê½£ºMSN: (e-mail address removed)

-΢ÈíÐÂÎÅ×é(NNTP)£ºnews://msnews.microsoft.com/ (ÍƼö)
-΢ÈíÖÐÎļ¼ÊõÉçÇø£ºhttp://bbs.mscommunity.com/
-½¨Òéͨ¹ýNNTP·½Ê½ÔĶÁÐÂÎÅ×é(ÀýÈçʹÓÃOutlook Express)£¬¶ø²»ÊÇWebÍøÒ³¡£
 
Back
Top