Re: ASN.1 vulnerability -is- on Win98

["Joshua Levitsky" <jlevitsk () joshie com>]

----- Original Message ----- 
> As per Microsoft there is now a Windows 98 security patch for MS04-007. It
> was completed today and is not available o­n Windows Update at this time.
If
> you have a support contract with Microsoft be sure to ask your TAM for the
> patch. Perhaps by the time anyone reads this the patch will be available
o­n
> the advisory page. I suspected this would happen.

Just an update. Microsoft is not going to post the patch on Windows Update.
You have to call in to Microsoft to get the patch or get it from your TAM if
you have a corporate account. I have been deploying the update since
yesterday because we use the AD client in 98 on our remaining machines so I
can't rename the vulnerable DLLs without killing the AD client. (As far as I
know.)

--
Joshua Levitsky, MCSE, CISSP
http://www.foist.org/
[5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1]