Security Basics mailing list archives

RE: MS Service Packs


From: "Des Ward" <des.ward () ntlworld com>
Date: Fri, 20 Jun 2003 11:10:28 +0100

That is one way of doing it, but is not the most secure as you have to open
a hole in the firewall to allow this.  MS allow you to create an internal
update server inside your network or you you can just download the patches.
These ways are much better as you have more control.  Update from the web
should not be used as you may end up having servers at different patch
levels.

-----Original Message-----
From: phil groner [mailto:labodentnga () qc aira com] 
Sent: 19 June 2003 05:48
To: Thad Horak; security-basics () securityfocus com
Subject: Re: MS Service Packs

From my experience Once you' ve installed SP3  you have to run windows
update so that you can get all the patches starting from when SP3 was
released.
----- Original Message -----
From: "Thad Horak" <thadhorak () yahoo com>
To: <security-basics () securityfocus com>
Sent: Wednesday, June 18, 2003 11:59 AM
Subject: MS Service Packs


All,

Has anyone had any luck decyphering what security
fixes are include in what MS service packs. For
example, if I apply SP3 to a W2K Server will this
patch all security issues found for the base OS up
until the release of SP3. What about IIS/SMTP/FTP, etc
fixes. Do I need to install these Qfixes and rollups
seperately? I've looked through the readme for the SP,
but it's not that clear. Hoping someone on the list
has tackled this and can shed some light. Many thanks.

Thad

__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

--------------------------------------------------------------------------
-
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
--------------------------------------------------------------------------
--





---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: