MS Security Advisor memo - 199x

Last modified: Thu Feb 14 10:50:04 2002 +0900 (JST)


$B!!(BMS $B$N(B Security Advisor $B$H(B MSKK $B$N(B Security Advisor $B$H$NBP1~$,$H$C$F$b$o$+$j$K$/$$$N$G!"HwK:O?$N$D$b$j$G$D$/$C$?%Z!<%8$G$9!#(B $B4V0c$$$rH/8+$5$l$?J}!"(B ? $B$K$J$C$F$$$kItJ,$K$D$$$F$4B8CN$NJ}$,$$$i$C$7$c$$$^$7$?$i!"(B $B$<$R(B$B$*$7$($F$/$@$5$$(B$B!#(B $B$h$m$7$/$*4j$$$$$?$7$^$9!#(B

$B!!$J$*!"$3$N%Z!<%8$NFbMF$O$I$N%Z!<%8$K$bA}$7$FL5J]>Z$G$"$k$3$H$r@k8@$7$F$*$-$^$9!#A4$F$N>pJs$,=8$^$C$F$$$k$o$1$b$"$j$^$;$s!#(B


$B"#!!(B1999$B!!"#(B

$BK\9q%Z!<%8(B

$BF|K\%Z!<%8(B

No.

$BFbMF(B

KB

$BFbMF(B (MSKK No.)

KB

$BF|K\8l(B
patch
$BM-L5(B

MS99-061 (1999.12.22)

Patch Available for "Escape Character Parsing" Vulnerability
$B$*$h$S(B FAQ

Q246401

$B!V%(%9%1!<%WJ8;z2r@O!W$N@H

?

patch $B$"$j(B: x86, Alpha

MS99-060 (1999.12.23)

Patch Available for "HTML Mail Attachment" Vulnerability
$B$*$h$S(B FAQ

Q249082

$B!V(BHTML $B%a!<%kE:IU%U%!%$%k!W$N@H

J051863

patch $B$"$j(B

MS99-059 (1999.12.21)

Patch Available for "Malformed TDS Packet Header" Vulnerability
$B$*$h$S(B FAQ

Q248749

$B!VIT@5$J(BTDS$B%Q%1%C%H%X%C%@!W$N@H

J053551

$B8DJL(B patch $B$J$7(B: SQL Server 7.0 SP2 $B$G(B fix

MS99-058

(1999.12.22)

Patch Available for "Virtual Directory Naming" Vulnerability
$B$*$h$S(B FAQ

Q238606, Q186803

$B!V2>A[%G%#%l%/%H%j$NL>A0!W$N@H

J052207

patch $B$"$j(B: x86, Alpha

MS99-057 (1999.12.17)

Patch Available for "Malformed Security Identifier Request" Vulnerability
$B$*$h$S(B FAQ

Q248185

$B!V(BSID $B$KL58z$J0z?t$,EO$5$l$?>l9g!W$N@H

J051851

MS99-056 $B$N(B fix $B$K4^$^$l$k(B

MS99-056 (1999.12.17)

Patch Available for "Syskey Keystream Reuse" Vulnerability
$B$*$h$S(B FAQ

Q248183

$B!V(BSyskey $B$,%-!<%9%H%j!<%`$r:F;HMQ$9$k!W$N@H

J051850

patch $B$"$j(B: SP7 $B$G(B fix

MS99-055 (1999.12.10)

Patch Available for "Malformed Resource Enumeration Argument" Vulnerability
$B$*$h$S(B FAQ

Q246045

$B!V%j%=!<%9%+%?%m%0MW5a$KBP$72~$6$s$5$l$?0z?t$,EO$5$l$?>l9g!W$N@H

J051870

patch $B$"$j(B: SP7 $B$G(B fix

MS99-054 (1999.12.01)

Patch Available for "WPAD Spoofing" Vulnerability
$B$*$h$S(B FAQ

Q247333

$B!V(BWPAD Spoofing$B!W$N@H

J051681

IE 5.01 $B$G(B fix

MS99-053 (1999.12.02)
$B1F6A(B: IIS 4.0, Site Server 3.0
$BCWL?EY(B: $B>.(B?

Patch Available for Windows "Multithreaded SSL ISAPI Filter" Vulnerability
$B$*$h$S(B FAQ

Q244613

$B!V%^%k%A%9%l%C%I(B SSL ISAPI $B%U%#%k%?!W$N@H

J055200

x86 $BHG(B, alpha $BHG(B

MS99-052 (1999.11.29)

Patch Available for "Legacy Credential Caching" Vulnerability
$B$*$h$S(B FAQ

Q168115

$B!V%Q%9%o!<%I$r%-%c%C%7%e$9$k%l%,%7%a%+%K%:%`$,M?$($k!W@H

J053089

patch $B$"$j(B

MS99-051 (1999.11.30)

Patch Available for "IE Task Scheduler" Vulnerability
$B$*$h$S(B FAQ

Q246972

$B!V(BIE $B%?%9%/%9%1%8%e!<%i!W$N@H

J051680

IE 5.01 $B$G(B fix

MS99-050 (1999.12.10)

Patch Available for "Server-side Page Reference Redirect" Vulnerability
$B$*$h$S(B FAQ

Q246094

$B!V%5!<%P!H%j%@%$%l%/%H!W$N@H

J051917

patch $B$"$j(B

MS99-049 (1999.11.29)

Patch Available for "File Access URL" Vulnerability
$B$*$h$S(B FAQ

Q245729

$B!V(BURL $B$rMQ$$$?%U%!%$%k%"%/%;%9!W$N@H

J053095

patch $B$"$j(B

MS99-048

Patch Available for "Active Setup Control" Vulnerability
$B$*$h$S(B FAQ

Q244540

$B!V(BActive Setup Control$B!W$N@H

J051665

IE 4.01 SP2/5.0 $BMQ(B patch $B$"$j!"(B IE 5.01 $B$G(B fix

MS99-047

Patch Available for "Malformed Spooler Request" Vulnerability
$B$*$h$S(B FAQ

Q243649

$B!V2~$6$s$5$l$?%9%W!<%i%j%/%(%9%H!W$N@H

J050919

patch $B$"$j(B (2000.05.24): NT 4.0 SP7 $B$G(B fix

MS99-046

Patch Available to Improve TCP Initial Sequence Number Randomness
$B$*$h$S(B FAQ

Q243835

$B!V(BTCP/IP $B$N%7!<%1%s%9HV9f$,M=B,$G$-$F$7$^$&!W@H

J050737

SP6a $BMQ(B patch $B$"$j(B: SP7 $B$G(B fix

MS99-045

Patch Available "Virtual Machine Verifier" Vulnerability
$B$*$h$S(B FAQ

Q244283

$B!V2>A[%^%7%s%Y%j%U%!%$%"!W$N@H

J051666

build 3188 $B$G(B fix $B$5$l$F$$$k(B (IE 5.01 $B$G(B Java VM $B$rA*Br$9$k$H(B build 3229 $B$,%$%s%9%H!<%k$5$l$k(B)

MS99-044

Patch Available for "Excel SYLK" Vulnerability
$B$*$h$S(B FAQ

Q241900, Q241901, Q241902

$B!V(BExcel SYLK$B!W$N@H

J051701, J051702, J051700

Excel 97 $BMQ(B patch, Excel 2000 $BMQ(B patch: Office 2000 SR1 $B$G(B fix

MS99-043

Workaround Available for "Javascript Redirect" Vulnerability
$B$*$h$S(B FAQ

Q244356, Q244357

$B!V(BJavascript $B%j%@%$%l%/%H!W$N@H

J051574, J053009

IE 5 $B$O(B $B$3$A$i(B (1999.12.02) (IE 5.01 $B$G(B fix)

MS99-042

Patch Available for "IFRAME ExecCommand" Vulnerability
$B$*$h$S(B FAQ

Q243638

$B!V(BIFRAME ExecCommand$B!W$N@H

J051103

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-041

Tool Available for "RASMAN Security Descriptor" Vulnerability
$B$*$h$S(B FAQ

Q242294

$B!V(BRASMAN $B%;%-%e%j%F%#5-=R;R!W$N@H

J050713

tool $B$OF|K\8lHG(B NT $B$G$b;HMQ2D$N$O$:(B : SP7 $B$G(B fix

MS99-040

Workaround for IE 5 "Download Behavior"
$B$*$h$S(B FAQ

Q242542

IE 5 $B!V%@%&%s%m!<%IF0:n!W$N@H

J051102

patch $B$"$j(B (MS99-042 fix $B$K4^$^$l$k(B)

MS99-039

Patch Available for "Domain Resolution" and "FTP Download" Vulnerabilities
$B$*$h$S(B FAQ

Q241805, Q241407, Q241562

$B!V%I%a%$%s2r7h!W!"!V(BFTP$B%@%&%s%m!<%I!W$N@H

J050254, J050253, J052383

IIS 4 $BMQ(B patch $B$"$j(B, MCIS 2.5 SP1 $B$K$F(B fix

MS99-038

Patch Available for "Spoofed Route Pointer" Vulnerability
$B$*$h$S(B FAQ

Q238453

$B!V%Q%1%C%H$NIT@5>pJs$K$h$j%=!<%9%k!<%F%#%s%0$,M-8z$K$J$k!W@H

J050097

patch $B$"$j(B: SP6a $B$G(B fix: Windows 98 $BMQ$O(B Windows Update $B7PM3$G$OF~

MS99-037

Patch Available for "ImportExportFavorites" Vulnerability
$B$*$h$S(B FAQ

Q241438, Q241361

$B!V(BImportExportFavorites$B!W$N@H

J051213

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-036

Windows NT 4.0 Does Not Delete Unattended Installation File
$B$*$h$S(B FAQ

Q241048, Q155197, Q158484

$B!V(BWindows NT 4.0 $B$,L5?M%$%s%9%H!<%k%U%!%$%k$r:o=|$7$J$$!W$3$H$K$h$k@H

J043376

%windir%\system32 $B$K(B $winnt$.inf $B$"$k$$$O(B $nt4pre$.inf $B$,$"$C$?$i:o=|$7$F$7$^$($P$h$$!#(B

MS99-035

Patch Available for "Set Cookie Header Caching" Vulnerability
$B$*$h$S(B FAQ

Q238647

$B!V(BSet Cookie $B%X%C%@$K$h$k%-%c%C%7%e!W$N@H

J050066

patch $B$"$j(B

MS99-034

Patch Available for "Fragmented IGMP Packet" Vulnerability
$B$*$h$S(B FAQ

Q238329

$B!VCGJR2=$5$l$?(B IGMP $B%Q%1%C%H!W$N@H

J049950

patch $B$"$j(B

MS99-033

Patch Available for "Malformed Telnet Argument" Vulnerability
$B$*$h$S(B FAQ

Q240163

$B!V2~$6$s$5$l$?(B Telnet $B0z?t!W$N@H

J050135

patch $B$"$j(B

MS99-032

Patch Available for "Scriptlet.typlib/Eyedog" Vulnerability
$B$*$h$S(B FAQ

Q240308

$B!V(BScriptlet.typlib/Eyedog$B!W$N@H

J050122

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-031

Patch Available for "Virtual Machine Sandbox" Vulnerability
$B$*$h$S(B FAQ

Q240346

$B!V2>A[%^%7%s%5%s%I%\%C%/%9!W$N@H

J049939, J051666

$BF|K\8l(B build 3186 $BF~

MS99-030

Patch Available for Office "ODBC Vulnerabilities
$B$*$h$S(B FAQ

Q239114, Q239482, Q239104, Q239471, Q239105, Q172733, Q141796

Office $B!V(BODBC $B%I%i%$%P!W$N@H, Microsoft ODBC $B%I%i%$%P$K4X$9$kLdBj(B $B$*$h$S(B FAQ

J050044, J050042 (Q239114), J050043 (Q239482), J050045 (Q239104), J050053 (Q239471), J050052 (239105), J050041 (Q172733), J050054 (Q141796)

patch $B$"$j(B: Office 2000, Office 97 ($BCf?H$OF1$8(B)

MS99-029

Patch Available for "Malformed HTTP Request Header" Vulnerability
$B$*$h$S(B FAQ

Q238349

[IIS] $BFCo7A<0$N%X%C%@!<$G%5!<%S%95qH]$,H/@8$9$k(B

J049652

patch $B$"$j(B

MS99-028

Patch Available for "Terminal Server Connection Request Flooding" Vulnerability
$B$*$h$S(B FAQ

Q238600

[NT] $BB??t$N@\B3MW5a$K$h$k%5!<%S%9ITG=967b(B (MSKK2000-32)

J049565

patch $B$"$j(B: x86, alpha

MS99-027

Patch Available for "Encapsulated SMTP Address" Vulnerability
$B$*$h$S(B FAQ

Q237927

?

?

$B1Q8lHG(B patch $B$rF|K\8lHG$K$bE,MQ2DG=(B

MS99-026

Patch Available for "Malformed Dialer Entry" Vulnerability
$B$*$h$S(B FAQ

Q237185

[NT] $B%@%$%d%i=*N;;~$K%"%/%;%90cH?$,H/@8$9$k(B (MSKK2000-31)

J049358

patch $B$"$j(B

MS99-025

Re-Release: Unauthorized Access to IIS Servers through ODBC Data Access with RDS
$B$*$h$S(B FAQ

Q184375
(CVE-1999-1011)

[IIS]RDS$B!"(BIIS$B!"(BODBC $B$N%;%-%e%j%F%#(B
[IIS]Microsoft Security Bulletin MS99-025 $B$N(B FAQ
IIS$B$N(BRDS$B$*$h$S(BJet$B%;%-%e%j%F%#LdBj(B
(Windows NT World 2000$BG/(B3$B7n9f(B $B7n4)%;%-%e%j%F%#%l%]!<%H(B No.3)

J042933, J049349

MS98-004 $B$N:F%j%j!<%9!#(B $BBP:v$O1Q8lHG$HF1MM$K2DG=!#(B

MS99-024

Patch Available for "Unprotected IOCTLs" Vulnerability
$B$*$h$S(B FAQ

Q236359

[NT] $BIT@5$J(B IOCTL $B4X?t8F$S=P$7$K$h$k%5!<%S%9ITG=967b(B

J048954 (MSKK2000-29)

patch $B$"$j(B

MS99-023

Patch Available for "Malformed Image Header" Vulnerability
$B$*$h$S(B FAQ

Q234557

[NT] $B2~$6$s$5$l$?%$%a!<%8(B $B%X%C%@$N
(
MSKK99-03, MSKK2000-34)

J049645

NT 4.0 SP5 $B$G(B fix $B$5$l$F$$$k(B

MS99-022

Patch Available for "Double Byte Code Page" Vulnerability
$B$*$h$S(B FAQ

Q233335

[IIS] $BFCDj$NJ8;z$,(B URL $B$N:G8e$K$"$k;~!"%Z!<%8FbMF$,I=<($5$l$k(B

J048898

patch $B$"$j(B: $BF|K\8l(B SP5 $B$G(B fix: 1999.08.18 $BIU$1$G(B MS99-029 $BAjEv$NFbMF$K99?7$5$l$F$$$k(B

MS99-021

Patch Available for "CSRSS Worker Thread Exhaustion" Vulnerability
$B$*$h$S(B FAQ

Q2133323

[NT]MaxRequestThreads $B$rD6$($k$H(B Windows NT $B$,%O%s%0$9$k(B

J049116

patch $B$"$j(B

MS99-020

Patch Available for "Malformed LSA Request" Vulnerability

Q231457

[NT]$B0-0U$N$"$k%W%m%0%i%`$K$h$j(B LSA $B$,Dd;_$9$k(B

J048965

patch $B$"$j(B

MS99-019

Patch Available for "Malformed HTR Request" Vulnerability

Q234905
(CVE-1999-0874)

[IIS] $BE,@Z$G$O$J$$(B HTTP $B%j%/%(%9%H$G(B IIS $B$,Dd;_$9$k(B

J048654

patch $B$"$j(B

MS99-018

Patch Available for "Malformed Favorites Icon" Vulnerability

Q231450, Q231452

[IE5] $B$*5$$KF~$jLdBj$r2sHr$9$k$?$a$N=$@5%W%m%0%i%`(B

J048443

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-017

Patch Available for "RAS and RRAS Password" Vulnerability

Q230681, Q233303

[NT]DUN $BG'>Z;~$N%Q%9%o!<%I$,%-%c%C%7%e$5$l$F$7$^$&(B

J049279

patch $B$"$j(B (RAS $B$N$_(B): SP6a $B$G(B fix

MS99-016

Patch Available for "Malformed Phonebook Entry" Vulnerability

Q230677

[NT] $BEEOCD"%(%s%H%j$N2~$6$s$K$h$j>c32$,H/@8$9$k(B

J048256

patch $B$"$j(B

MS99-015

Patch Available for "Malformed Help File" Vulnerability

Q231605

[NT] $B2~$6$s$5$l$?%X%k%W%U%!%$%k$K$h$j%X%k%W(B $B%f!<%F%#%j%F%#$N1~Ez$,Dd;_$9$k(B

J049259

patch $B$"$j(B

MS99-014

Patch Available for Excel 97 Virus Warning Vulnerabilities

Q231304

Excel 97 $B%;%-%e%j%F%#=$@5%W%m%0%i%`(B
(MSKK99-01, 02)

J049592

patch $B$"$j(B

MS99-013

Patches Available for File Viewers Vulnerability

Q231368, 232449, Q184717 (JWNTUG Newsletter Vol.4/No.015 1999.05.12 $B$h$j(B)

[sitemcis] $B%U%!%$%k(B $B%S%e!<%"$N@H
[IIS] $B%5%s%W%k$N(B ASP $B%3!<%I$,%5!<%P!<%U%!%$%k$NI=<($K;HMQ$5$l$k(B

J048136, J049348

patch $B$"$j(B

MS99-012

MSHTML Update Available for Internet Explorer

Q226326

"MSHTML" $BLdBj$N=$@5%W%m%0%i%`(B

J048100

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-011

Patch Available for "DHTML Edit" Vulnerability

Q226326

"DHTML Edit Control" $BLdBj$N=$@5%W%m%0%i%`(B

J048099

patch $B$"$j(B (IE 5.01 $B$G(B fix)

MS99-010

Patch Available for File Access Vulnerability in Personal Web Server

Q216453
Q217765
Q217763

W98: $B%Q!<%=%J%k(B Web $B%5!<%P!

J047293

not yet

MS99-009

Patch Available for "Malformed Bind Request" Vulnerability

Q221989

$BF|K\8l(B KB $B$J$7(B

$BF|K\8l(B KB $B$J$7(B

$B8DJL(B patch $B$J$7(B: Exchange 5.5 SP3 $B$G(B fix (SP3 fix list)

MS99-008

Patch Available for Windows NT "Screen Saver" Vulnerability

Q221991

[NT] $B%9%/%j!<%s%;!<%P!<$rMxMQ$7$F4IM}

J047159

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

MS99-007

Patch Available for Taskpads Scripting Vulnerability

Q218619

?

?

$B%j%=!<%9%-%C%H(B tool $B$OF|K\8lHG$,$J$$$O$:$J$N$G!"(B MS99-007 $B$G<($5$l$F$$$k1Q8l99?7HG$r$=$N$^$^;H$($P$$$$$O$:!#(B

MS99-006

Fix Available for Windows NT "KnownDLLs List" Vulnerability

Q218473

[NT] KnownDLLs $B$NJQ99$K$h$k(B Admin $B8"8B$N

J046993

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

MS99-005

BackOffice Server 4.0 Does Not Delete Installation Setup File

Q217004

?

?

?

MS99-004

Patch Available for Authentication Processing Error in Windows NT 4.0 Service Pack 4

Q214840

[NT] LM $B%O%C%7%e$G$N%Q%9%o!<%IJQ99$K$h$k%;%-%e%j%F%#LdBj(B

J047068

patch $B$"$j(B: NT 4.0 SP5 $B$G(B fix

MS99-003

Patch Available for IIS "Malformed FTP List Request" Vulnerability

Q188348

[IIS] $B0[>o$J(B FTP $B%j%/%(%9%H$K$h$j(B FTP $B%5!<%P!<$,%5!<%S%9ITG=$K$J$k(B ($BCf?H$,$J$$$N$G!"$[$s$H$K$3$l$N$3$H$J$N$+%$%^%$%A3N?.;}$F$:(B)

J048648

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

MS99-002

Patch available for "Word97 Template" Vulnerability

Q214652

$B%^%$%/%m%=%U%H(B $B%o!<%I(B 97/98 $B%;%-%e%j%F%#LdBj=$@5%W%m%0%i%`(B

?

patch $B$"$j(B (SR2 $BMQ(B)

MS99-001

Patch Available for exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard

Q214757

[OFF97] Forms 2.0 $B%3%s%H%m!<%k(B $B%;%-%e%j%F%#LdBj=$@5%W%m%0%i%`(B

J047399

patch $B$"$j(B

$B"#!!(B1998$B!!"#(B

$BK\9q%Z!<%8(B

$BF|K\%Z!<%8(B

No.

$BFbMF(B

KB

$BFbMF(B

KB

patch
$BM-L5(B

MS98-020

Patch Available for "Frame Spoof" Vulnerability

Q167614

"Frame Spoof" $BLdBj$N=$@5%W%m%0%i%`(B

J046417

patch $B$"$j(B

MS98-019

Patch Available for IIS "GET" Vulnerability

Q192296

[IIS] $B0[>o$J(B GET $B%j%/%(%9%H$K$h$j(B Web $B%5!<%P!<$,%5!<%S%9ITG=$K$J$k(B

J046333

IIS4 $BMQ$N$_(B: NT 4.0 SP5 $B$K$F(B fix ($B1Q8l(B KB $B$NHV9f$G7G:\$5$l$F$$$k(B)

MS98-018

Patch Available for Excel "CALL Vulnerability"

Q196791

Microsoft Excel 97 CALL $B4X?t$N%;%-%e%j%F%#LdBj$K$D$$$F(B

?

patch $B$"$j(B

MS98-017

Patch Available for "Named Pipes Over RPC" Issue

Q195733

RPC $B%3%s%]!<%M%s%H$X$N967b$K$h$k%O%s%0(B

J047069

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

MS98-016

Update available for "Dotless IP Address" Issue in Microsoft Internet Explorer 4

Q168617

"Dotless IP Address" $BLdBj$N>\:Y(B

J045917

patch $B$"$j(B

MS98-009

Update Available for Windows NT Privilege Elevation Attack

Q190288

[NT]SecHole $B$G4IM}

J044836

patch $B$"$j(B

MS98-008

Update Available For Long file name Security Issue affecting Microsoft(I.(B Outlook™ 98 and Microsoft Outlook Express 4.

?

Outlook Express $B$N%U%!%$%kE:IULdBj$N=$@5%W%m%0%i%`$,$4MxMQ$K$J$l$^$9(B

?

patch $B$"$j(B

MS98-007

Potential SMTP and NNTP Denial-of-Service Vulnerabilities in Microsoft Exchange Server

Q188341

?

?

patch $B$"$j(B

MS98-006

Potential Denial-of-Service in IIS FTP Server due to Passive Connections

Q189262, Q181743

$BF|K\8l(B KB $B$J$7(B?

$BF|K\8l(B KB $B$J$7(B?

NT 4.0 SP4 $B$G(B fix ($B1Q8l(B KB Q189262 $B$G5-:\(B)

MS98-005

Unwanted Data Issue with Office 98 for the Macintosh

?

?

?

?

MS98-004

Unauthorized ODBC Data Access with RDS and IIS

Q184375

[IIS]RDS$B!"(BIIS$B!"(BODBC $B$N%;%-%e%j%F%#(B

J042933

$B%l%8%9%H%j$d(B .ini $B%U%!%$%k$r@_Dj$7$F(B fix $B$9$k!#(B

MS98-003

File Access Issue with WindowsNT Internet Information Server (IIS)

Q188806, Q105763

[IIS]IIS $B$,%9%/%j%W%H$N%=!<%9%3!<%I$rEO$7$F$7$^$&(B

J044297

patch $B$"$j(B: NT 4.0 SP4 $B$G(B fix

MS98-002

Updates Available for the "The Error Message Vulnerability" Against Secured Internet Servers

Q148427

[IIS]SSL (PCT/TLS) $B$N=$@5%W%m%0%i%`$K4X$9$k>pJs(B

J044266

patch $B$"$j(B


patch $BJL(B

$BCm0U(B
Microsoft $B$N(B patch $B$O!"(Banonymous ftp $B$K$h$kG[I[$+$i(B Microsoft $B%@%&%s%m!<%I%;%s%?!<(B$B$K$h$kG[I[$KJQ99$5$l$F$$$k!#(B $B$3$N9`$N>pJs$O$b$O$d99?7$5$l$J$$!#(B

$B"#!!(BPostSP6/SP6a patch$B!!"#(B

$B!!(BSP6a $B$G$O!"(BSP6 $B$N(B Afd-fix $B$,4^$^$l$F$$$^$9!#(B

patch $BL>(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\8l(B patch $B>u67(B

C2-fix

C2 Evaluation $B%Z!<%8(B

$B!!(B

$B!!(B

$B"#!!(BPostSP6 patch$B!!"#(B

$B!!(Bftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/ $B$J$I$+$iF@$?>pJs$r$^$H$a$?$b$N$G$9!#(B

patch $BL>(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\8l(B patch $B>u67(B

Afd-fix

Q245678

$B!!(B

$B!!(B

Security/Rasman-fix

MS99-041 $B$r;2>H(B

$B!!(B

$B!!(B

Security/TCPIP-fix

MS99-046 $B$r;2>H(B

$B!!(B

$B!!(B

Y2K/Convlog-fix

Q245329

$B!!(B

patch $B$"$j(B

$B"#!!(BPostSP5 patch$B!!"#(B

$B!!(Bftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/ $B$*$h$S(B ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/jpn/nt40/ $B$J$I$+$iF@$?>pJs$r$^$H$a$?$b$N$G$9!#(B

$B!!(BSP5 fix $B0lMw(B:

$B!!(BJ047859 $B$h$j(B J048376 $B$NJ}$,FbMF$,(B update $B$5$l$F$$$k$_$?$$!#(B

patch $BL>(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\8l(B patch $B>u67(B

Csrss-fix

MS99-021 $B$r;2>H(B

$B!!(B

$B!!(B

Dialer-fix

MS99-026 $B$r;2>H(B

$B!!(B

$B!!(B

IGMP-fix

MS99-034 $B$r;2>H(B

$B!!(B

$B!!(B

IOCTL-fix

MS99-024 $B$r;2>H(B

$B!!(B

$B!!(B

LSA3-fix

MS99-020 $B$r;2>H(B

$B!!(B

$B!!(B

NetDDE-fix

Q231337
NETDDE.EXE Fails to Relay WM_DDE_TERMINATE to Remote Clients

J049092
[NT]Netdde.exe $B$,(B WM_DDE_TERMINATE $B$r%j%b!<%H%/%i%$%"%s%H$KJV?.$7$J$$(B

$BF|K\8l8DJL(B patch $B$J$7(B: $BF|K\8l(B SP5 $B$G(B fix

NTFS-fix

Q229607
File Corruption on an NTFS Volume with More Than 4 Million Files

?

?

Perfctrs-fix

Q234351
Memory Leak When Performance Counters Are Not Available

?

?

RAS-fix

MS99-016 $B$r;2>H(B

$B!!(B

$B!!(B

RASPassword-fix

MS99-017 $B$r;2>H(B

$B!!(B

$B!!(B

RRASPassword-fix

MS99-017 $B$r;2>H(B

$B!!(B

$B!!(B

Winhlp32-fix

MS99-015 $B$r;2>H(B

$B!!(B

$B!!(B

Rpcltscm-fix

Q239132
Exchange Clients Appear to Intermittently Hang During Normal Operation

?

?

Spoof-fix

MS99-038 $B$r;2>H(B

$B!!(B

$B!!(B

Y2K/BIOS2-fix

Q216913
BIOS Date Value Does Not Immediately Update on January 1, 2000

J047619
[NT]BIOS $B$NF|IU$,:GBg(B 1 $B;~4V(B 2000/1/1 $B$K99?7$5$l$J$$(B

patch $B$"$j(B

Y2K/NNTP-fix

Q238020
XIMS: NNTP Service Converts Two-Digit Years Incorrectly

?

patch $B$"$j(B

Y2K/Times-fix

Q240195

J049846

patch $B$"$j(B

$B"#!!(BPostSP4 patch$B!!"#(B

$B!!(Bftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/ $B$*$h$S(B ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/jpn/nt40/ $B$J$I$+$iF@$?>pJs$r$^$H$a$?$b$N$G$9!#(B

$B!!(BSP4 fix $B0lMw(B: $B1Q8lHG(B

$B!!(BSP4 fix $B0lMw(B: $BF|K\8lHG(B (J045743)

patch $BL>(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\8l(B patch $B>u67(B

Clik-fix (Archive/Clik-fix)

Q195540
Windows NT 4.0 Does Not Recognize ATAPI Iomega Clik 40! Drive

J049089, [NT]Iomega Clik 40! (ATAPI $BHG(B ZIP $B%I%i%$%V(B) $B$rG'<1$G$-$J$$(B

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

Disk-fix

Q221331
Routing and Remote Access Server (RRAS) Computer Stops Responding to Incoming Calls Under Stress

J048064
[NT] RRAS $B%3%s%T%e!<%?$,9bIi2Y2<$G8F$S=P$7$K1~Ez$7$J$/$J$k(B

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

Gina-fix (Archive/Gina-fix)

Q214802
Windows NT Lets You Paste Text into Unlock Workstation Dialog Box

J047067
[NT] $B%m%C%/Cf$K%/%j%C%W(B $B%\!<%I$+$i$NE=$jIU$1$,2DG=(B

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

Infget-fix (Archive/Infget-fix)

MS98-019 $B$r;2>H(B

$B!!(B

$B!!(B

Kernel-fix

MS99-023 $B$r;2>H(B

$B!!(B

$B!!(B

Msv1-fix (Archive/Msv1-fix)

MS99-004 $B;2>H(B

$B!!(B

$B!!(B

Nprpc-fix (Archive/Nprpc-fix)

MS98-017 $B;2>H(B

$B!!(B

$B!!(B

Tcpip-fix (Archive/Tcpip-fix)

Q195725
Intermediate Network Driver Causes STOP 0x0000001E on MP PC

$BF|K\8l(B KB $B$J$7(B

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

Rnr-fix

Q214864
GetHostByName API Returns Unbindable Addresses
Q216091
GetHostByName() Returns IP Address of Disabled Interface
Q217001
GetHostByName API Returns Unbindable Addresses

J047202
[NT]GetHostByName() $B$,L58z$J%$%s%?!<%U%'%$%9$N(B IP $B%"%I%l%9$rJV$9(B
J049091
[NT]GetHostByName API $B$,%P%$%s%I$G$-$J$$%"%I%l%9$rJV$9(B

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

ScrnSav-fix

MS99-008 $B;2>H(B

$B!!(B

$B!!(B

Sms-fix (Archive/Sms-fix)

Q196270
SNMP Agent Leaks Memory When Queried

J047040
[NT] SNMP $B%(!<%8%'%s%H$G%/%(%j!<;~$K%a%b%j(B $B%j!<%/$,H/@8$9$k(B

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

Smss-fix

MS99-006 $B;2>H!#(B

$B!!(B

$B!!(B

roll-up (Sms-fix Gina-fix Msv1-fix Nprpc-fix Infget-fix Clik-fix Tcpip-fix $B$r$R$H$D$K$^$H$a$?$b$N(B)

Q195734
WinNT 4.0 Post-Service Pack 4 Hotfixes Combined Into One Package

$B!!(B

$B!!(B

Y2K/BIOS2-fix

Q216913
BIOS Date Value Does Not Immediately Update on January 1, 2000

J047619
[NT]BIOS $B$NF|IU$,:GBg(B 1 $B;~4V(B 2000/1/1 $B$K99?7$5$l$J$$(B

patch $B$"$j(B: 1999.08.28 $B$4$m$K99?7$5$l$F$$$k(B

Y2K/MSMQ-fix

Q230050
MSMQ Err: Error While Creating MSMQ Internal Certificate

$BF|K\8l(B KB $B$J$7(B

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

Y2K/Times-fix

Q240195

?

?

Y2K/Y2KUPD

Q218877
Mfc40.dll Causes Programs to Display Wrong Date After 01/01/2000
Q221120
Command Line Switches Supported by the Y2K Update

J047136
[NT] Mfc40.dll $B$r;HMQ$7$?%W%m%0%i%`$,(B 2000 $BG/$KIT@5$JF|IU$rI=<((B

patch $B$"$j(B: NT 4.0 SP5 $B$K$F(B fix

$B"#!!(BIIS patch$B!!"#(B

$B!!(Bftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/ $B$*$h$S(B ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/jpn/ $B$J$I$+$iF@$?>pJs$r$^$H$a$?$b$N$G$9!#(B

$BBgJ,N`(B

patch $BL>(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BBP>](B IIS Ver.

$BF|K\8l(B
patch
$B>u67(B

ASP

asp-fix575

Q224190
ASP may Leak Memory in Response.CacheControl Method

J048653
[IIS] Response.CacheControl $B$G%a%b%j%j!<%/$,H/@8$9$k(B

IIS 4

$B8DJL(B patch $B$J$7(B: NT 4.0 SP5 $B$K$F(B fix

asp-memfix

Q176245
XWEB: VBScript Error when Accessing Outlook Web Access Server [exchange]
Q176246
XWEB: Unexpected Behavior when Accessing Outlook Web Access [exchange]

?
patch $B$O$"$k(B

Excange 5.5, Outlook Web Access 5.5

IIS $B$NLdBj$G$O$J$$(B

asp-sesfix

Q177036
FIX: ASP 115 Error Occur With The Session Object

?

IIS 3

$B!!(B

aspdll

asp-sesfix $B$HF1$8(B

$B!!(B

$B!!(B

$B!!(B

Ext-fix

MS99-019 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

Fltr-fix

Q188343
ISAPI Filter Not Receiving SF_NOTIFY_SEND_RAW_DATA with Proxy

?

IIS 4

$B!!(B

IPRFTP-fix

MS99-039 $B$r;2>H(B

$B!!(B

$B!!(B

IISUPD

Q192224
Windows NT Option Pack Update for IIS Available for Download

?

IIS 4

$B!!(B

Viewcode-fix

MS99-013 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

HDBRK-fix

MS99-029 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

Y2K

HTMLA-fix

Q230335
Dates May Display Improperly Using Configuration Back-up

J049137
[IIS]HTMLA:$B9=@.$N%P%C%/%"%C%W;~$KF|IU$NI=<($,$*$+$7$$(B

IIS 4

SP4 $B$*$h$S(B SP5 $BMQ(B patch $B$"$j(B

certserv

Q184695
Readme Notes for Certificate Server Update

?

IIS 4, Certificate Server 1.0

$B!!(B

cmdbat

Q148188
Internet Information Server Security .CMD /.BAT Patch

?

IIS 1.0

$B!!(B

ctr-fix

Q185349
Problems Remotely Accessing W3 or FTP Perfmon Counters
Q188832
Intel VTune 3.0 Fails with Windows NT 4.0 Option Pack

J046358
[IIS]W3 $B$^$?$O(B FTP $B$N(B Perfmon $B%+%&%s%?$X$N%j%b!<%H%"%/%;%9$NLdBj(B

IIS 4

NT 4.0 SP4 $B$K$F(B fix

proxy

Q180533
HTMLA: Host Header Name Information Not Kept in New Web Site

?

IIS 4

$B!!(B

security

Ftpls-fix

MS99-003 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

Infget-fix

MS98-019 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

datafix

MS98-003 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

fesrc-fix

MS99-022 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

ftpfix

MS98-006 $B;2>H(B

$B!!(B

$B!!(B

$B!!(B

sfn-fix

Q179148
Settings May Not Be Applied with URL with Short Filename

?

IIS 4, Personal Web Server 4.0

$B!!(B

$B"#!!$=$NB>!!"#(B

$BN`JL(B

$BK\9q(B KB$B!">pJs%Z!<%8Ey(B

$BF|K\(B KB$B!">pJs%Z!<%8Ey(B

$BFC5-;v9`(B

Unique Identifier Updater for Office 98

$B1Q8lHG(B Office 98 $BMQ(B

Microsoft Office 98 $B%"%C%W%G!<%?(B 2 $B$K4^$^$l$F$k!#(B J048095: [OFF98] Office98 $B=qN`$K$*$1$k<1JLHV9f$K$D$$$F(B $B$K$b>pJs$,$"$k!#(B

$B!!(B

Microsoft Office 97 Unique Identifier Patch (Office 97 $B<1JLHV9f=$@5%W%m%0%i%`(B)

Office 97 SR-2 $BMQ(B ($B1Q8lHG(B)

Office 97 SR-2 $BMQ(B ($BF|K\8lHG(B)

$B!!(B

Office 97 $B<1JLHV9f:o=|%D!<%k(B

$B!!(B

Windows9x/NT 4.0 $BF|K\8lHG(B

$B!!(B

Outlook 97/98/2000 $B%;%-%e%j%F%#(B patch

$B!!(B


To Do

$B2a5n(B (1998) $B$N(B Security Advisor $B$NDI2C!#(B


$B;d$K$D$$$F(B