Re: Q811114 and Q815021

On Thu, Jul 03, 2003, Floyd Russell wrote:

> I'm confused by Windows Update ( not suprising ). According to Windows

Q811114 does not contain the updated ntdll.dll patch found in Q815021.

The WebDAV/ntdll.dll patch (815021) was not built for NT back in March... Even though the original attack vector for the vulnerability, WebDAV, which prompted the patch, is not available for NT, the core vulnerability in ntdll.dll still exists in NT and as they found out also in XP.

The revised 815021 which came out a little later than the 811114 cumulative IIS patch addresses these issues.

http://support.microsoft.com/?kbid=815021