News

Microsoft Releases Security Notices

Microsoft has released updates on two recent security bulletins. On October 22, Microsoft released a bulletin on the availability of a patch that improves the randomness of TCP Initial Sequence Generators. Recently, however, Microsoft learned that the patch contains a regression error and, as a result, has removed it from the Microsoft Web site.

The patch is affected by the same error that was recently announced in Windows NT 4.0 Service Pack 6. The effect of the error is to prevent some applications from connecting to the server via Winsock unless run in an administrative context. The error is not associated with TCP Initial Sequence numbers, nor does it pose any security risk.

Microsoft has also announced a re-release of a patch originally announced on October 18. That patch was a workaround for a vulnerability that would allow a malicious Web site operator to read files on the computer of a user who had visited the site. Microsoft has completed a patch that completely eliminates the vulnerability. Microsoft Internet Explorer 4.01 and 5 are affected by the vulnerability. The patch is available at http://www.microsoft.com/msdownload/iebuild/jsredir/en/jsredir.htm. The IE 4.01 patch requires IE 4.01 SP2 in order to install. That is available at http://www.microsoft.com/Windows/ie/download/windows.htm.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Announces Milestones for 'Perpetual' Office Products

    Office 2021 for Windows, commonly thought of as the retail "boxed" product, will reach general availability on Oct. 5, the same day as Windows 11.

  • The Case for Windows 11 Will Be Made with Security and Telemetry

    Steering a Windows 11 move will be rough without measuring the gains or losses along the way, so says Cambridge, Mass.-based Microsoft partner Aternity.

  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.

  • New Microsoft 365 Monitoring Platform Helps MSPs Avoid the 'Logo Blame Game'

    Martello Technologies has announced a new platform to help partners manage their customers' Microsoft 365 and Microsoft Teams deployments.