bugtraq - RE: After Ms patches last Wed ...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <40977F62.26900.C3B10F2B@localhost>
Date: Tue, 04 May 2004 11:32:50 +1200
From: Nick FitzGerald <nick@...us-l.demon.co.uk>
To: bugtraq@...urityfocus.com
Subject: RE: After Ms patches last Wed ...

InfoSec@...a.com wrote:

> I read in a article on this patch that the instability is only present if
> the "Nortel Networks VPN client is installed and the IPSec Policy Agent is
> set to manual or automatic startup type", does anyone have any further
> input on MS04-011? Stable on a standard Win2k server install or not?

I suspect you mis-read, or the article was badly written/edited.  That 
combination _is_ specifically mentioned by Microsoft as a configuration 
known to exhibit problems post-MS04-011:

   http://support.microsoft.com/default.aspx?scid=kb;EN-US;841382

However, my reading of that KB article is not that that is the only 
configuration that may cause trouble.  In particular:

   Note This problem may occur if other drivers or services do not
   load successfully. This workaround is specific to the Nortel
   Networks VPN client drivers.

Also, as the hotfix that is now available to address this issue 
replaces these core files:

   Mountmgr.sys
   Ntkrnlmp.exe
   Ntkrnlpa.exe
   Ntkrpamp.exe
   Ntoskrnl.exe   

it seems quite unlikely that this problem would be specific to just one 
common VPN client configuration...

Regards,

Nick FitzGerald