Re: MS03-031 rollup missing a patch?

[Jensenne Roculan <jroculan () securityfocus com>]

Taken straight from the Security Bulletin MS03-031:

Superseded patches: This patch supersedes the SQL 2000 SP2 and SQL 7.0 SP
4 version of the patch provided in Microsoft Security Bulletin MS02-061,
which was itself a cumulative patch. MS02-061 fixes are already included
in SQL 2000 SP3 and SP3a.

Jensenne

On Thu, 24 Jul 2003, Geo. wrote:

> > http://www.microsoft.com/technet/security/bulletin/MS03-031.asp
>
> it says:
>
> "This is a cumulative patch that includes the functionality of all
> previously released patches for SQL Server 7.0, SQL Server 2000, MSDE 1.0,
> and MSDE 2000. In addition, it eliminates three newly discovered
> vulnerabilities. "
>
> except it appears not to contain the patch MS02-061 at least according to
> hfnetchk.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html