|
|
|
POPULAR XP NEWSLETTER |
|
Claim Your FREE Guides! |
|
------------------ Newsletter:
New Articles:
|
| POPULAR ARTICLES |
| COMMON ERRORS |
|
DIGITAL MEDIA |
|
|
KB893066Published By Marc Liron - Microsoft MVP
Windows XP with Service Pack 1
A remote code execution vulnerability
exists that could allow an attacker to send a specially crafted IP
message to an affected system. An attacker who successfully
exploited this vulnerability could cause the affected system to
remotely execute code. However, attempts to exploit this
vulnerability would most likely result in a denial of service.
A denial of service vulnerability
exists that could allow an attacker to send a specially crafted
Internet Control Message Protocol (ICMP) message to an affected
system. An attacker who successfully exploited this vulnerability
could cause the affected system to reset existing TCP connections. A denial of service vulnerability exists that could allow an attacker to send a specially crafted Internet Control Message Protocol (ICMP) message to an affected system that could cause network performance to degrade and potentially stop the affected system from responding to requests. TCP Connection Reset Vulnerability - Low
A denial of service vulnerability
exists that could allow an attacker to send a specially crafted TCP
message to an affected system. An attacker who successfully
exploited this vulnerability could cause the affected system to
reset existing TCP connections.
A denial of service vulnerability
exists that could allow an attacker to send a specially crafted
Internet Control Message Protocol (ICMP) message to an affected
system. An attacker who successfully exploited this vulnerability
could cause the affected system to reset existing TCP connections. A denial of service vulnerability exists that could allow an attacker to send a specially crafted Internet Control Message Protocol (ICMP) message to an affected system that could cause network performance to degrade and potentially stop the affected system from responding to requests. Spoofed Connection Request Vulnerability - Low
A denial of service vulnerability
exists that could allow an attacker to send a specially crafted
TCP/IP message to an affected system. An attacker who successfully
exploited this vulnerability could cause the affected system to stop
responding.
An attacker who successfully exploited
the most severe of these vulnerabilities could take complete control
of an affected system. An attacker could then install programs;
view, change, or delete data; or create new accounts with full user
rights. However, an attacker who successfully exploited the most
severe of these vulnerabilities would most likely cause the affected
system to stop responding. KB893066 - More Information The Windows XP security update is packaged as a dual-mode package. Dual-mode packages contain files for the original version of Windows XP Service Pack 1 (SP1) and files for Windows XP Service Pack 2 (SP2).
File Name - Version - Date - Time -
Size - Folder (The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.) When you install these security updates, the installer checks to see if one or more of the files that are being updated on your system have previously been updated by a Microsoft hotfix. If you have previously installed a hotfix to update an affected file, one of the following conditions occurs, depending on your operating system:
Windows XP SP1
Windows XP SP2 KB893066 - Verify Files:
You may be able to verify the files that this security update has
installed by reviewing the following registry keys. KB893066 - Known Problems!
1) In Windows XP Service Pack 2,
the Add or Remove Programs tool in Control Panel lists software updates.
Add or Remove Programs lists software updates under the name of the
product that they update. In Windows XP Service Pack 2, Add or Remove
Programs will list this update under Windows XP – Software Updates. In
Windows XP Service Pack 2, Add or Remove Programs will not show
"Installed On" for this software update. Therefore, this software update
does not show up in the order of installation. Instead, this software
update shows at the top of the Windows XP – Software Updates list.
For more information, click here:
kb897656
(Networking programs that send TCP packets or UDP packets over raw IP
sockets may stop working after you apply security update MS05-019 to a
computer that is running Windows XP with Service Pack 1) Windows XP SP2 introduces a few new "twists" to TCP/IP in order to help users and "reduce the threat" of worms spreading fast without control! (More here) One such "fix" Microsoft have introduced is to limit the number of possible TCP connection attempts per second to 10 (from unlimited in SP1). This new feature can possibly affect server and P2P programs that need to open many outbound connections at the same time. You only need to worry about the number of connection attempts per second if you have noticed a slowdown in network programs requiring a number of connections opened at once. You can check if you're hitting this limit from the Event Viewer - look for TCP/IP Warnings saying: "TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts" Event ID 4224 Keep in mind this is a cap only on incomplete outbound connect attempts per second, NOT total connections. Still, running servers and P2P programs could lead to problems by having this new limitation. So a "counter fix" was created and made available at: Event ID 4226 Patcher v2.23 (The reason for a patcher file is that even though the setting was registry editable in XP SP1, it is now only possible to edit by changing it directly in the system file tcpip.sys - as explained in the Microsoft kb893066) Of course for those that used this Patcher file will now find things are back to where they were... So by running this patcher again you should get around the problem...
Was this article on kb893066 was useful?Have you signed up for my popular Windows XP Newsletter below? Enjoy the rest of site and remember if you have a query about this site or a comment to make then drop me a line at the Contact Page Finally a quality XP Newsletter!
FACT:
There are dozens of Windows XP newsletters - BUT this one is
different!
Find out more here:
XP
Newsletter Kind Regards
Marc Liron -
Bio | ||||||||
|
