full-disclosure - MS03-031 rollup missing a patch?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.55.0307240954160.2134@mail.securityfocus.com>
From: jroculan at securityfocus.com (Jensenne Roculan)
Subject: MS03-031 rollup missing a patch?

Taken straight from the Security Bulletin MS03-031:

Superseded patches: This patch supersedes the SQL 2000 SP2 and SQL 7.0 SP
4 version of the patch provided in Microsoft Security Bulletin MS02-061,
which was itself a cumulative patch. MS02-061 fixes are already included
in SQL 2000 SP3 and SP3a.

Jensenne

On Thu, 24 Jul 2003, Geo. wrote:

> > http://www.microsoft.com/technet/security/bulletin/MS03-031.asp
>
> it says:
>
> "This is a cumulative patch that includes the functionality of all
> previously released patches for SQL Server 7.0, SQL Server 2000, MSDE 1.0,
> and MSDE 2000. In addition, it eliminates three newly discovered
> vulnerabilities. "
>
> except it appears not to contain the patch MS02-061 at least according to
> hfnetchk.