Re: Q811114 and Q815021

Q811114 is an IIS patch (MS03-018)
details here (files included in patch, as well as affected products): http://www.shavlik.com/bulletin_details.aspx?bltid=MS03-018

Q815021 is an OS patch (MS03-007)
http://www.shavlik.com/bulletin_details.aspx?bltid=MS03-007

MS03-007 was originally released and thought to be important only for webservers, however it is indeed an OS level patch (ntdll.dll) and the issue can be exploited whether or not IIS is installed - the bulletin has since been updated to reflect that all NT4 machines are potentially affected by this issue.

MS03-018 and MS03-007 are not related - they contain different sets of files, so there is no supersedence involved here - you should install both patches in order to be up to date.

At 01:54 PM 7/3/2003 -0500, Floyd Russell wrote:
>I'm confused by Windows Update ( not suprising ). According to Windows