Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Information-Security-News
[Top] [All Lists]

[ISN] Microsoft Ships Last-Minute Windows 2000 Update Rollup

Subject: [ISN] Microsoft Ships Last-Minute Windows 2000 Update Rollup
Date: Wed, 29 Jun 2005 00:04:22 -0500 (CDT)
http://www.eweek.com/article2/0,1895,1832574,00.asp

By Ryan Naraine 
June 28, 2005 

With just two days to go before the expiration of mainstream support
for Microsoft's Windows 2000 operating system, the software giant has
provided an update rollup with more than 50 security patches and
system reliability fixes.

The update rollup, which replaces Windows 2000 SP5 (Service Pack 5),
ships as a high-priority update on the Windows Update site [1], where
it will be listed in the "Critical and Service Packs" category.

In a security advisory [2] posted Tuesday, Microsoft Corp. said the
rollup is applicable to Windows 2000 client and server releases and
requires the prior installation of SP4.

"[It] contains additional important fixes in files that have not
previously been part of individual security updates [and] additional
enhancements that increase system security, reliability, reduce
support costs and support the current generation of PC hardware," the
company said.

But the company said the rollup initially will not be distributed over
Automatic Updates because Windows 2000 customers are being
transitioned to a new version of Windows Update. "Once the transition
is complete, which is expected in early July, Automatic Updates will
be enabled for the update rollup." [3]

Microsoft said the rollup contains all security updates produced for
Windows 2000 between the time SP4 was released and April 30, 2005, the
time when the code was "locked down for final testing."

Windows 2000 remains the most dominant operating system used in the
enterprise, but once mainstream support ends June 30, analysts expect
corporate migration to Windows XP to speed up.

Microsoft divides its support life cycle into two phases: mainstream
and extended. Once a product enters the extended support period,
Microsoft charges for support.

But the company still will provide Windows 2000 security patches for
free through June 10, 2010.

Microsoft has posted a Knowledge Base article [4] that describes the
contents of the Windows 2000 update rollup.

[1] http://windowsupdate.microsoft.com/
[2] http://www.microsoft.com/technet/security/advisory/891861.mspx
[3] http://www.eweek.com/article2/0,1759,1822852,00.asp
[4] 
http://support.microsoft.com/default.aspx/kb/891861?#XSLTH3185121123120121120120



_________________________________________
Attend the Black Hat Briefings and
Training, Las Vegas July 23-28 - 
2,000+ international security experts, 
10 tracks, no vendor pitches.
www.blackhat.com 

<Prev in Thread] Current Thread [Next in Thread>
  • [ISN] Microsoft Ships Last-Minute Windows 2000 Update Rollup, InfoSec News <=