MS11-030: Vulnerability in DNS Resolution could allow remote code execution: April 12, 2011
A user enters their username by using the user principal name (UPN) format to establish a VPN connection to the RAS. For example, the user enters username@example.microsoft.com as their username.
In this situation, the RAS encounters a deadlock situation, and the user cannot establish the VPN connection. To recover from this issue, you have to restart the server.
Issue 2
After you install the update that is described in Microsoft Knowledge Base (KB) article 2509553 on a Windows Server 2003-based server, users experience slow network performance. This issue is caused by slow DNS name resolution.
To resolve this issue, install the following hotfix on the computer that is running Windows Server 2003.
Hotfix information
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
Prerequisites
To apply this hotfix, you must be running Windows Server 2003 Service Pack 2 (SP2).
For more information about how to obtain a Windows Server 2003 service pack or a Windows XP Professional x64 Edition service pack, click the following article number to view the article in the Microsoft Knowledge Base:
How to obtain the latest service pack for Windows Server 2003
Registry information
To apply the hotfix, you do not have to make any change to the registry.
Restart requirement
You must restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace a previously released hotfix.
File information
The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows Server 2003 file information notes
In addition to the files that are listed in these tables, this hotfix also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2003
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
SP requirement
Service branch
Afd.sys
5.2.3790.4898
150,528
17-Aug-2011
15:41
x86
SP2
SP2GDR
Dnsapi.dll
5.2.3790.4955
161,792
27-Jan-2012
08:30
x86
SP2
SP2GDR
Dnsrslvr.dll
5.2.3790.4498
45,568
20-Apr-2009
18:38
x86
SP2
SP2GDR
Mswsock.dll
5.2.3790.4318
256,000
20-Jun-2008
18:32
x86
SP2
SP2GDR
System.adm
Not Applicable
1,772,184
07-Jul-2010
19:15
Not Applicable
SP2
SP2GDR
Tcpip.sys
5.2.3790.4573
393,216
15-Aug-2009
09:57
x86
SP2
SP2GDR
Tcpip6.sys
5.2.3790.4662
247,360
10-Feb-2010
12:48
Not Applicable
SP2
SP2GDR
W03a3409.dll
5.2.3790.4715
44,544
09-Jul-2010
04:25
x86
SP2
SP2GDR
Afd.sys
5.2.3790.4898
150,528
17-Aug-2011
15:38
x86
SP2
SP2QFE
Dnsapi.dll
5.2.3790.4955
162,304
27-Jan-2012
08:23
x86
SP2
SP2QFE
Dnsrslvr.dll
5.2.3790.4498
45,568
20-Apr-2009
18:30
x86
SP2
SP2QFE
Mswsock.dll
5.2.3790.4318
257,024
20-Jun-2008
19:01
x86
SP2
SP2QFE
System.adm
Not Applicable
1,772,184
07-Jul-2010
19:15
Not Applicable
SP2
SP2QFE
Tcpip.sys
5.2.3790.4573
400,896
15-Aug-2009
08:27
x86
SP2
SP2QFE
Tcpip6.sys
5.2.3790.4662
248,640
10-Feb-2010
15:51
Not Applicable
SP2
SP2QFE
W03a3409.dll
5.2.3790.4715
44,544
09-Jul-2010
04:25
x86
SP2
SP2QFE
For all supported x64-based versions of Windows Server 2003
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
SP requirement
Service branch
Afd.sys
5.2.3790.4898
291,840
27-Jan-2012
06:10
x64
SP2
SP2GDR
Dnsapi.dll
5.2.3790.4955
308,224
27-Jan-2012
06:10
x64
SP2
SP2GDR
Dnsrslvr.dll
5.2.3790.4498
79,360
27-Jan-2012
06:10
x64
SP2
SP2GDR
Mswsock.dll
5.2.3790.4318
492,544
27-Jan-2012
06:10
x64
SP2
SP2GDR
System.adm
Not Applicable
1,772,184
27-Jan-2012
06:10
Not Applicable
SP2
SP2GDR
Tcpip.sys
5.2.3790.4573
781,824
27-Jan-2012
06:10
x64
SP2
SP2GDR
Tcpip6.sys
5.2.3790.4662
394,112
27-Jan-2012
06:10
x64
SP2
SP2GDR
W03a3409.dll
5.2.3790.4715
45,056
27-Jan-2012
06:10
x64
SP2
SP2GDR
Wdnsapi.dll
5.2.3790.4955
161,792
27-Jan-2012
06:10
x86
SP2
WOW
Wdnsrslvr.dll
5.2.3790.4498
45,568
27-Jan-2012
06:10
x86
SP2
WOW
Wmswsock.dll
5.2.3790.4318
233,472
27-Jan-2012
06:10
x86
SP2
WOW
Ww03a3409.dll
5.2.3790.4715
44,544
27-Jan-2012
06:10
x86
SP2
WOW
Afd.sys
5.2.3790.4898
292,352
27-Jan-2012
06:07
x64
SP2
SP2QFE
Dnsapi.dll
5.2.3790.4955
308,224
27-Jan-2012
06:07
x64
SP2
SP2QFE
Dnsrslvr.dll
5.2.3790.4498
79,360
27-Jan-2012
06:07
x64
SP2
SP2QFE
Mswsock.dll
5.2.3790.4318
493,056
27-Jan-2012
06:07
x64
SP2
SP2QFE
System.adm
Not Applicable
1,772,184
27-Jan-2012
06:07
Not Applicable
SP2
SP2QFE
Tcpip.sys
5.2.3790.4573
798,208
27-Jan-2012
06:07
x64
SP2
SP2QFE
Tcpip6.sys
5.2.3790.4662
396,032
27-Jan-2012
06:07
x64
SP2
SP2QFE
W03a3409.dll
5.2.3790.4715
45,056
27-Jan-2012
06:07
x64
SP2
SP2QFE
Wdnsapi.dll
5.2.3790.4955
162,304
27-Jan-2012
06:07
x86
SP2
WOW
Wdnsrslvr.dll
5.2.3790.4498
45,568
27-Jan-2012
06:07
x86
SP2
WOW
Wmswsock.dll
5.2.3790.4318
234,496
27-Jan-2012
06:07
x86
SP2
WOW
Ww03a3409.dll
5.2.3790.4715
44,544
27-Jan-2012
06:07
x86
SP2
WOW
For all supported IA-64-based versions of Windows Server 2003