Re: Microsoft Security Bulletin (MS00-063)

["Boyce, Nick" <nick.boyce () EDS COM>]

On 9th.Sept.2000, Justin Lintz asked :

> Since your on the topic of not being able to download patches, I still
have
> not been able to download the IIS Hotfix checking tool, all i get is 404
> errors.  Anyone experiencing the same?

Yes, we are.  I actually emailed this to Bugtraq (unapproved, so didn't
appear) and to Microsoft themselves (<secure () microsoft com>), on Monday
4th.Sept.2000 :

> > we've just released a new tool that
> > will help administrators ensure that their servers are up to date on
> > all IIS 5.0 security patches.  The tool, called HFCheck, is available
> > for download at http://www.microsoft.com/technet/security/tools.asp.
>
> A) Unfortunately, I see the web page, but on clicking the download link :-

>     HTTP Error 404
>     404 Not Found
[...]
> B) Can we have a version of this tool for IIS 4.0 please ?

and later that day Microsoft replied to me :

> Thanks for your email.  We are aware of the broken link and
> have asked our web team to correct the page.  Due to the
> US holiday - this may not occur until sometime on Tuesday.
>
> Once we have received feedback from this version (IIS4), we
> will look to incorporate the feedback into this tool (or similar)
> for IIS4 and other applications.

(PS: I took "feedback from this version (IIS4)" to mean "... (IIS5)" in that
last paragraph)

Nick
EDS Healthcare, Bristol, UK