Eigenartiges bezüglich des IIS5-Updates...

[q3wert]

Im Artikel zum neuen IIS5-Cumulative Update ( http://www.microsoft.com/technet/sec...n/MS03-018.asp )steht:

Superseded patches:
This patch supersedes the ones provided in the following Microsoft Security Bulletins:

MS02-062.
MS02-028.
MS02-018. (This is a cumulative patch, and supersedes additional patches)

Lässt man auf einem frischen System nun MS02-062 (Das ist der vorhergehende IIS5-Cumulative Patch) WEG, dann vermisst sowohl shavlik's Tool HFnetCHK als auch Windows-Update selbigen!!!

Output von HFnetCHK:

* INTERNET INFORMATION SERVICES 5.0 SP3

Patch NOT Installed MS02-062 Q327696
File C:\WINNT\system32\adsiis.dll has a file version [5.0.2195.6628]
that is greater than what is expected [5.0.2195.6048]. - File
C:\WINNT\system32\inetsrv\asp.dll has a file version [5.0.2195.6672]
that is greater than what is expected [5.0.2195.6048]. - File
C:\WINNT\system32\inetsrv\ftpsvc2.dll has a file version
[5.0.2195.6628] that is greater than what is expected
[5.0.2195.5675]. - File C:\WINNT\system32\inetsrv\httpext.dll has a
file version [5.0.2195.6692] that is greater than what is expected
[5.0.2195.6035]. - File C:\WINNT\system32\inetsrv\httpodbc.dll has a
file version [5.0.2195.6667] that is greater than what is expected
[5.0.2195.5663]. - File C:\WINNT\system32\idq.dll has a file version
[5.0.2195.6664] that is greater than what is expected
[5.0.2195.5617]. - File C:\WINNT\system32\inetsrv\IISLOG.DLL has a
file version [5.0.2195.6666] that is greater than what is expected
[5.0.2195.5991]. - File C:\WINNT\system32\iisrtl.dll has a file
version [5.0.2195.6620] that is greater than what is expected
[5.0.2195.5255]. - File C:\WINNT\system32\INFOADMN.DLL has a file
version [5.0.2195.5437] that is less than what is expected
[5.0.2195.5991].

DA SOLL SICH NOCH EINER AUSKENNEN!

Man achte vor allem auf folgende Zeile:

[5.0.2195.5255]. - File C:\WINNT\system32\INFOADMN.DLL has a file
version [5.0.2195.5437] that is less than what is expected
[5.0.2195.5991]

[q3wert]

Wenn ihr mich fragt, wird ms03-018 bald revised...

[q3wert]

...und das kommt raus, wenn man beide cumulative-updates (ms03-018 NACH ms02-062) laufen lässt:

* INTERNET INFORMATION SERVICES 5.0 SP3

Warning MS02-062 Q327696
File C:\WINNT\system32\adsiis.dll has a file version [5.0.2195.6628]
that is greater than what is expected [5.0.2195.6048]. - File
C:\WINNT\system32\inetsrv\asp.dll has a file version [5.0.2195.6672]
that is greater than what is expected [5.0.2195.6048]. - File
C:\WINNT\system32\inetsrv\ftpsvc2.dll has a file version
[5.0.2195.6628] that is greater than what is expected
[5.0.2195.5675]. - File C:\WINNT\system32\inetsrv\httpext.dll has a
file version [5.0.2195.6692] that is greater than what is expected
[5.0.2195.6035]. - File C:\WINNT\system32\inetsrv\httpodbc.dll has a
file version [5.0.2195.6667] that is greater than what is expected
[5.0.2195.5663]. - File C:\WINNT\system32\idq.dll has a file version
[5.0.2195.6664] that is greater than what is expected
[5.0.2195.5617]. - File C:\WINNT\system32\inetsrv\IISLOG.DLL has a
file version [5.0.2195.6666] that is greater than what is expected
[5.0.2195.5991]. - File C:\WINNT\system32\iisrtl.dll has a file
version [5.0.2195.6620] that is greater than what is expected
[5.0.2195.5255]. - File C:\WINNT\system32\inetsrv\infocomm.dll has a
file version [5.0.2195.6666] that is greater than what is expected
[5.0.2195.5991]. - File C:\WINNT\system32\inetsrv\ISATQ.DLL has a
file version [5.0.2195.6666] that is greater than what is expected
[5.0.2195.6036]. - File C:\WINNT\system32\inetsrv\ism.dll has a file
version [5.0.2195.6620] that is greater than what is expected
[5.0.2195.5671]. - File C:\WINNT\system32\inetsrv\mdsync.dll has a
file version [5.0.2195.6620] that is greater than what is expected
[5.0.2195.5255]. - File C:\WINNT\system32\perfvd.exe has a file
version [5.0.2195.6607] that is greater than what is expected
[5.0.2195.5247]. - File C:\WINNT\system32\inetsrv\ssinc.dll has a
file version [5.0.2195.6624] that is greater than what is expected
[5.0.2195.5255]. - File C:\WINNT\system32\inetsrv\w3svc.dll has a
file version [5.0.2195.6672] that is greater than what is expected
[5.0.2195.5995]. - File C:\WINNT\system32\inetsrv\wam.dll has a file
version [5.0.2195.6620] that is greater than what is expected
[5.0.2195.5995].

[q3wert]

UPDATE:
shavlik hat (evtl. wegen einer mail von mir?) seine xml-datei aktualisiert:

* INTERNET INFORMATION SERVICES 5.0 SP3

Information
All necessary hotfixes have been applied.

Microsoft aber offensichtlich noch nicht

[q3wert]

Bis heute keine Neuigkeiten.
Habe mal Shavlik gebeten, Microsoft zu informieren.

[q3wert]

Es ist immernoch so, dass WU ein fehlendes MS02-062 Q327696 anzeigt, obwohl gleichzeitig behauptet wird, dass das update für SP2 (nicht SP3) gedacht ist UND der aktuelle IIS-Cumulative-Patch laut Bulletin den alten ersetzt.

Bei Microsoft wird offensichtlich geschlafen oder das "Anzeigeproblem" liegengelassen, bis das SP4 jetzt erscheint.