Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

[it's Hadrian]

Hello after applying Microsoft Security Bulletin MS03-001 Unchecked
Buffer in Locator Service Could Lead to Code Execution (810833) gives
some problems on this dual processor NT4 - Sp6A system.

** The information
at
http://support.microsoft.com/?kbid=810833
looks about the same as my pdf file made at 26 January 2003 **

Since applying the patch to this system I have some trouble starting
up which might take two or three tries.
Since I have installed the patch for a part the first time (forgot to
switch off the NOd 32 AV) and later I installed completely I can't
roll the patch back. I can't find what files are involved in this
patch but I would be happy if someone could tell what files were
installed so I could take them off and replace them if possible.
I remember, if not mistaken, trouble about this same patch some years
ago but can't remember exactly a date.
I would be very happy if someone would help me out.

Best regards,

it's Hadrian

hadrian@40whyspamxs.com

 

[it's Hadrian]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

On Thu, 04 Oct 2007 07:43:22 +0000, it's Hadrian
<hadrian@40whyspamxs.com> wrote:

>Hello after applying Microsoft Security Bulletin MS03-001 Unchecked
>Buffer in Locator Service Could Lead to Code Execution (810833) gives
>some problems on this dual processor NT4 - Sp6A system.
>
>** The information
>at
>http://support.microsoft.com/?kbid=810833
>looks about the same as my pdf file made at 26 January 2003 **
>
>Since applying the patch to this system I have some trouble starting
>up which might take two or three tries.
>Since I have installed the patch for a part the first time (forgot to
>switch off the NOd 32 AV) and later I installed completely I can't
>roll the patch back. I can't find what files are involved in this
>patch but I would be happy if someone could tell what files were
>installed so I could take them off and replace them if possible.
>I remember, if not mistaken, trouble about this same patch some years
>ago but can't remember exactly a date.
>I would be very happy if someone would help me out.
>
>Best regards,
>
>it's Hadrian
>
>hadrian@40whyspamxs.com

Btw It's a workstation.
Thanks a lot.

it's Hadrian

hadrian@40whyspamxs.com

 

[Calvin]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 givesproblems

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 givesproblems

Hi Hadrian,

it's Hadrian wrote:
>>Since applying the patch to this system I have some trouble starting
>>up which might take two or three tries.
>>Since I have installed the patch for a part the first time (forgot to
>>switch off the NOd 32 AV) and later I installed completely I can't
>>roll the patch back. I can't find what files are involved in this
>>patch but I would be happy if someone could tell what files were
>>installed so I could take them off and replace them if possible.
>>I remember, if not mistaken, trouble about this same patch some years
>>ago but can't remember exactly a date.
>>I would be very happy if someone would help me out.

Patch KB810833 changes only 1 file - namely locator.exe - it's full
version information (after the patch) is V4.0.1381.7202

I'd suggest manually rolling this file back to the version supplied in
the "Post SP6a Security Rollup" - file details: locator.exe V4.0.1381.7097

I'm not sure if any other hotfixes after the security rollup has changed
this file. (prior to KB810833 doing it last)

To be absolutely sure you are rolling back "only 1 step", you could
manually go through and open each of the hotfixes post the SRP with
Winzip and check to see if any of them contain a copy of locator.exe -
but that's a fair bit of work !

Calvin.

 

[it's Hadrian]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

On Thu, 04 Oct 2007 19:54:56 +1000, Calvin <nospam@spamcop.net> wrote:

>Hi Hadrian,
>
>it's Hadrian wrote:
>>>Since applying the patch to this system I have some trouble starting
>>>up which might take two or three tries.
>>>Since I have installed the patch for a part the first time (forgot to
>>>switch off the NOd 32 AV) and later I installed completely I can't
>>>roll the patch back. I can't find what files are involved in this
>>>patch but I would be happy if someone could tell what files were
>>>installed so I could take them off and replace them if possible.
>>>I remember, if not mistaken, trouble about this same patch some years
>>>ago but can't remember exactly a date.
>>>I would be very happy if someone would help me out.
>
>Patch KB810833 changes only 1 file - namely locator.exe - it's full
>version information (after the patch) is V4.0.1381.7202
>
>I'd suggest manually rolling this file back to the version supplied in
>the "Post SP6a Security Rollup" - file details: locator.exe V4.0.1381.7097
>
>I'm not sure if any other hotfixes after the security rollup has changed
>this file. (prior to KB810833 doing it last)
>
>To be absolutely sure you are rolling back "only 1 step", you could
>manually go through and open each of the hotfixes post the SRP with
>Winzip and check to see if any of them contain a copy of locator.exe -
>but that's a fair bit of work !
>
>Calvin.

Hello Calvin,
The file I have put in place is locator.exe (date 16/07/01) from the:
Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP),
file name Q299444i.exe (http://support.microsoft.com/kb/q299444/)
so
the fix directly after the release of Windows NT 4.0 Service Pack 6a.
It seems to work so far.
I have a log in which i write down what I install of hotfixes and
patches and the trouble started after installing Patch KB810833.

Thanks for your help.

it's Hadrian

hadrian@40whyspamxs.com