BID:8045

Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed

Info

Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed

Bugtraq ID:	8045
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Jun 26 2003 12:00AM
Updated:	Jun 26 2003 12:00AM
Credit:	These issues were reported by Microsoft with the release of Windows 2000 Service Pack 4.
Vulnerable:	Microsoft Windows 2000 Terminal Services SP3 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Terminal Services SP2 + Microsoft Windows 2000 Advanced Server SP2 + Microsoft Windows 2000 Datacenter Server SP2 + Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Terminal Services SP1 + Microsoft Windows 2000 Advanced Server SP1 + Microsoft Windows 2000 Datacenter Server SP1 + Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Terminal Services + Microsoft Windows 2000 Advanced Server + Microsoft Windows 2000 Datacenter Server + Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

Not Vulnerable:	Microsoft Windows 2000 Terminal Services SP4 + Microsoft Windows 2000 Advanced Server SP4 + Microsoft Windows 2000 Datacenter Server SP4 + Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Advanced Server SP4

Discussion

Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed

Microsoft has announced the release of Windows 2000 SP4. This service pack contains security roll-ups for a number of previously reported and fixed issues. The service pack also contains bugfixes and patches for a number of new security issues.

Windows 2000 administrators are advised to apply SP4 as soon as possible to prevent exploitation of any previously known or new security issues.

Solution / Fix

Microsoft Windows 2000 SP4 Released - Multiple Vulnerabilities Fixed

Solution:
These issues have been addressed in Windows 2000 SP4. Administrators should upgrade to SP4 at the earliest possible convenience. Windows 2000 Datacenter users should upgrade only if it is in conjunction with their OEM.

Please see the documentation provided by Microsoft for instructions on how to upgrade and to determine the applicability of upgrading to SP4.

Microsoft Windows 2000 Professional