Windows Live
Facebook
Twitter
Linkedin
Digg it
Yahoo
Delicious
StumbleUpon
Yammer
Reddit
Technorati
FriendFeed
Email文章編號: 299444 - 上次校閱: 2007年1月23日 - 版次: 10.1 Windows NT 4.0 Service Pack 6a 之後的安全性彙總套件 (SRP)
本文曾發行於 CHT299444 在此頁中結論 Microsoft 已經發行 Windows NT 4.0 的「安全性彙總套件」(SRP)，其中包含 Windows
NT 4.0 Service Pack 6a (SP6a) 之後發行的所有 Windows NT 4.0 安全性補充程式的功能。這個小型、完整、SP6a
之後的修正程式彙總提供了更簡易的機制，可以用來管理安全性修正程式的展示。套用 SRP 並不會變更您電腦的加密層級。 Compaq Array Controller 使用者如果您已經從 Compaq 網站、Compaq FTP 站台或 Compaq SmartStart 安裝 Compaq Array Controller 驅動程式 (Cpqarray.sys)，請參閱下列有關 Compaq Array Controller 和 Windows NT 4.0 SRP 的「Microsoft 知識庫」文件：305228?
(http://support.microsoft.com/kb/305228/
)
"STOP 0xA" occurs after applying Windows NT 4.0 Security Rollup Package
數位簽章問題如果您執行 Internet Explorer 5.5 Service Pack 2 (SP2) 或 Internet Explorer 5.01 Service Pack 2 (SP2)，並且存取任何使用「安全通訊端層」(SSL) 的安全網站 (https://)，請參閱下列「Microsoft 知識庫」文件：305929?
(http://support.microsoft.com/kb/305929/
)
"This certificate has an invalid digital signature" error message after you install the Windows NT 4.0 Security Rollup Package
Microsoft IntelliPoint 使用者如果您使用 Microsoft IntelliPoint 2.2 以前的版本，請在安裝 SRP 之前，先參閱下列「Microsoft 知識庫」文件：305462?
(http://support.microsoft.com/kb/305462/
)
Mouse and keyboard stop working after you install the Windows NT 4.0 Security Rollup Package
HP NTLock 使用者如果您使用 HP NTLock，請參閱下列「Microsoft 知識庫」文件：311860?
(http://support.microsoft.com/kb/311860/
)
The Hewlett-Packard NTLock services do not start after you install the Windows NT 4.0 Security Rollup Package
如果您新增選擇性服務，則必須重新套用 Windows NT 4.0 Service
Pack，然後再安裝 SRP。
如需詳細資訊，請按一下下面的文件編號，檢視「Microsoft 知識庫」中的文件：196269?
(http://support.microsoft.com/kb/196269/
)
When to reinstall a service pack
如果您需要新增選擇性服務，請依照下列步驟執行：
http://www.microsoft.com/ntserver/nts/downloads/critical/q299444/default.asp
(http://www.microsoft.com/ntserver/nts/downloads/critical/q299444/default.asp)
其他相關資訊 下列 Microsoft 網站提供可用的補充程式 (如果沒有列出您的語言，請查看以往記錄)： 摺疊此圖像  摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 摺疊此圖像 注意：此補充程式需要 Windows NT 4.0 SP6a。如需詳細資訊，請至下列 Microsoft 網站： http://www.microsoft.com/downloads/details.aspx?displaylang=zh-tw&FamilyID=e396d059-e402-46ef-b095-a74399e25737
(http://www.microsoft.com/downloads/details.aspx?displaylang=zh-tw&FamilyID=e396d059-e402-46ef-b095-a74399e25737)
發行日期：2001 年 7 月 26 日 如需有關如何下載 Microsoft 支援檔案的詳細資訊，請按一下下面的文件編號，檢視「Microsoft 知識庫」中的文件： 119591?
(http://support.microsoft.com/kb/119591/
)
如何從線上服務取得 Microsoft 支援檔案
Microsoft 已對這個檔案做過病毒掃描。Microsoft
是利用發佈當日的最新病毒偵測軟體來掃描檔案，看看有沒有病毒感染。檔案會儲存在安全的伺服器上，以避免任何未經授權的更改。
注意：當您套用 Windows NT 4.0 SP6a 之後的 SRP (其中包含佈告欄 MS01-026 中提及的安全性補充程式)
時，請注意 Windows NT 4.0 SP6a 之後的 SRP 可能會引發新的問題。如果要修正這些新問題，請安裝下列「Microsoft
知識庫」文件所述的其他補充程式：
299273?
(http://support.microsoft.com/kb/299273/
)
UPN logon option does not work after you apply fix from MS01-026 security bulletin
269430?
(http://support.microsoft.com/kb/269430/
)
Incorrect error message double-clicking lock icon in SSL-secured connection
SRP 所隨附的修正程式SRP 包括了 SP6a 之後已透過 Microsoft 資訊安全佈告欄 (http://www.microsoft.com/taiwan/technet/Security/default.mspx) 提供的所有修正程式。此外，其中也包含少數先前未討論過的修正程式。由於資訊安全佈告欄對客戶平常的維護程序而言過於凌亂破碎，因此 Microsoft 通常只會在某個安全性問題會立即對系統造成危害時，才發行資訊安全佈告欄。未符合此標準的問題通常都是經由其他傳送媒介來解決，例如 Service Pack，或者這個情況中的 SRP。241041?
(http://support.microsoft.com/kb/241041/
)
Enabling NetBT to open IP ports exclusively
243649?
(http://support.microsoft.com/kb/243649/
)
MS99-047: Unchecked print spooler buffer may expose system vulnerability
243835?
(http://support.microsoft.com/kb/243835/
)
MS99-046: How to prevent predictable TCP/IP initial sequence numbers
244599?
(http://support.microsoft.com/kb/244599/
)
Fixes required in TCSEC C2 security evaluation configuration for Windows NT 4.0 Service Pack 6a
246045?
(http://support.microsoft.com/kb/246045/
)
MS99-055: Malformed resource enumeration arguments may cause named pipes and other system services to fail
247869?
(http://support.microsoft.com/kb/247869/
)
MS00-003: Local Procedure Call May Permit Unauthorized Account Usage
248183?
(http://support.microsoft.com/kb/248183/
)
Syskey tool reuses keystream
248185?
(http://support.microsoft.com/kb/248185/
)
Security Identifier enumeration function in LSA may not handle argument properly
248399?
(http://support.microsoft.com/kb/248399/
)
MS00-007: Shared workstation setup may permit access to Recycle Bin files
249108?
(http://support.microsoft.com/kb/249108/
)
Registry data is viewable by all users during Rdisk repair update
249197?
(http://support.microsoft.com/kb/249197/
)
Internet Explorer does not allow use of single SGC certificate with 128-Bit encryption for virtual sites
249863?
(http://support.microsoft.com/kb/249863/
)
SGC connections may fail from domestic clients
249973?
(http://support.microsoft.com/kb/249973/
)
MS00-005: Default RTF file viewer interrupts normal program processing
250625?
(http://support.microsoft.com/kb/250625/
)
MS00-024: Default registry key permissions may allow privilege elevation
252463?
(http://support.microsoft.com/kb/252463/
)
MS00-006: Index server error message reveals physical location of Web folders
257870?
(http://support.microsoft.com/kb/257870/
)
Malformed print request may stop Windows 2000 TCP/IP Printing service
259042?
(http://support.microsoft.com/kb/259042/
)
Handle Leak in WinLogon after applying Windows NT 4.0 Service Pack 6
259496?
(http://support.microsoft.com/kb/259496/
)
MS00-008: Incorrect registry setting may allow cryptography key compromise
259622?
(http://support.microsoft.com/kb/259622/
)
MS00-027: Command processor may not parse excessive arguments properly
259728?
(http://support.microsoft.com/kb/259728/
)
MS00-029: Windows hangs with fragmented IP datagrams
259773?
(http://support.microsoft.com/kb/259773/
)
MS00-003: Incorrect response to local procedure call causes "Stop" error message
262388?
(http://support.microsoft.com/kb/262388/
)
Denial-of-service attack possible from Linux RPC client
262694?
(http://support.microsoft.com/kb/262694/
)
MS00-036: Malicious user can shut down computer browser service
264684?
(http://support.microsoft.com/kb/264684/
)
MS00-040: Patch for "Remote Registry Access Authentication" Vulnerability
265714?
(http://support.microsoft.com/kb/265714/
)
MS00-095: Windows NT 4.0 SNMP registry entries are readable
266433?
(http://support.microsoft.com/kb/266433/
)
MS00-070: Patch for numerous vulnerabilities in the LPC port system calls
267858?
(http://support.microsoft.com/kb/267858/
)
"Memory could not be read" error message while doing file operation
267861?
(http://support.microsoft.com/kb/267861/
)
MS00-095: RAS registry modification allowed without administrative rights
267864?
(http://support.microsoft.com/kb/267864/
)
MS00-095: MTS Package Administration Key includes information about users
268082?
(http://support.microsoft.com/kb/268082/
)
DNS SOA record may reveal Administrator account name
269049?
(http://support.microsoft.com/kb/269049/
)
MS00-052: Registry-invoked programs use standard search path
269239?
(http://support.microsoft.com/kb/269239/
)
MS00-047: NetBIOS vulnerability may cause duplicate name on the network conflicts
271216?
(http://support.microsoft.com/kb/271216/
)
Fix for e-mail issues between 128-bit and 56-bit encryption using French regional settings
274835?
(http://support.microsoft.com/kb/274835/
)
MS00-083: Buffer overflow in Network Monitor may cause vulnerability
275567?
(http://support.microsoft.com/kb/275567/
)
MS00-091: Multiple NetBT sessions may hang local host
276575?
(http://support.microsoft.com/kb/276575/
)
MS00-094: Patch available for "Phone Book service buffer overflow" vulnerability
279336?
(http://support.microsoft.com/kb/279336/
)
MS01-003: Patch available for Winsock mutex vulnerability
279843?
(http://support.microsoft.com/kb/279843/
)
Some system named pipes are not created with appropriate permissions
280119?
(http://support.microsoft.com/kb/280119/
)
MS01-008: A patch is available for the NTLMSSP privilege elevation vulnerability
283001?
(http://support.microsoft.com/kb/283001/
)
MS01-009: Patch available for malformed PPTP packet stream vulnerability
293818?
(http://support.microsoft.com/kb/293818/
)
MS01-017: Erroneous VeriSign-issued digital certificates pose spoofing hazard
294472?
(http://support.microsoft.com/kb/294472/
)
MS99-057: Index Server search function contains unchecked buffer
296185?
(http://support.microsoft.com/kb/296185/
)
MS01-025: Patch available for new variant of the "Malformed Hit-Highlighting" vulnerability
298012?
(http://support.microsoft.com/kb/298012/
)
MS01-041：格式錯誤的 RPC 要求可能會造成服務發生問題
300972?
(http://support.microsoft.com/kb/300972/
)
MS01-033: Unchecked buffer in Index Server ISAPI extension can enable Web server compromise
303628?
(http://support.microsoft.com/kb/303628/
)
Relative path issue can allow program to be run under the System context
SRP 所隨附的 IIS 修正程式188348?
(http://support.microsoft.com/kb/188348/
)
Specially-malformed FTP requests may create Denial of Service
233335?
(http://support.microsoft.com/kb/233335/
)
Page contents visible when certain characters are at end of URL
234905?
(http://support.microsoft.com/kb/234905/
)
Improperly formatted HTTP request may cause INETINFO process to fail
238349?
(http://support.microsoft.com/kb/238349/
)
Specially-malformed header in GET request creates Denial of Service
238606?
(http://support.microsoft.com/kb/238606/
)
Page contents visible when certain dot extensions present in the virtual directory name
241805?
(http://support.microsoft.com/kb/241805/
)
Combined FTP and domain restriction security patch for IIS 4.0
244613?
(http://support.microsoft.com/kb/244613/
)
IIS 4.0 SSL ISAPI filter can leak single buffer of plaintext
246401?
(http://support.microsoft.com/kb/246401/
)
MS99-061: IIS may improperly parse specific escape characters
249599?
(http://support.microsoft.com/kb/249599/
)
Virtual directory mapped to UNC returns server-side script code when URL contains additional characters at the end of the request
252693?
(http://support.microsoft.com/kb/252693/
)
不包含資料的編碼要求區塊造成 IIS 記憶體流失
254142?
(http://support.microsoft.com/kb/254142/
)
傳送大量 Escape 控制字元組時發生 100% CPU 被佔用的狀況
260205?
(http://support.microsoft.com/kb/260205/
)
MS00-030:HTTP request with a large number of dots or dot-slashes causes high CPU utilization
260347?
(http://support.microsoft.com/kb/260347/
)
MS00-060: IIS 4: fix for Cross-Site Scripting issues
260838?
(http://support.microsoft.com/kb/260838/
)
MS00-031: IIS stops servicing HTR requests
267559?
(http://support.microsoft.com/kb/267559/
)
MS00-044: GET on HTR file cancCause a "Denial of Service" or enable directory browsing
269862?
(http://support.microsoft.com/kb/269862/
)
MS00-057: Patch released for canonicalization error issue
271652?
(http://support.microsoft.com/kb/271652/
)
MS00-063: Patch released for malformed URL vulnerability that disables Web server response
274149?
(http://support.microsoft.com/kb/274149/
)
Cookies are not marked as SSL-secured in IIS
277873?
(http://support.microsoft.com/kb/277873/
)
MS00-086: Patch Available for "Web Server File Request Parsing" vulnerability
280322?
(http://support.microsoft.com/kb/280322/
)
FP2000: MS00-100: Patch for Malformed Web Form Submission Security Vulnerability
285985?
(http://support.microsoft.com/kb/285985/
)
MS01-004: Patch available for new variant of File Fragment Reading via .HTR vulnerability
295534?
(http://support.microsoft.com/kb/295534/
)
Superfluous decoding operation can allow command execution through IIS
下列「Microsoft 知識庫」文件中＜May 14, 2001＞一節所列的修正程式，也會隨附於
Windows NT 4.0 SP6a 之後的 SRP 中：
297860?
(http://support.microsoft.com/kb/297860/
)
MS01-044: IIS 5.0 Security and post-Windows NT 4.0 SP5 IIS 4.0 patch rollup
這篇文章中的資訊適用於:
Microsoft及(或)其供應商不就任何在本伺服器上發表的文字資料及其相關圖表資訊的恰當性作任何承諾。所有文字資料及其相關圖表均以「現狀」供應，不負任何擔保責任。Microsoft及(或)其供應商謹此聲明，不負任何對與此資訊有關之擔保責任，包括關於適售性、適用於某一特定用途、權利或不侵權的明示或默示擔保責任。Microsoft及(或)其供應商無論如何不對因或與使用本伺服器上資訊或與資訊的實行有關而引起的契約、過失或其他侵權行為之訴訟中的特別的、間接的、衍生性的損害或任何因使用而喪失所導致的之損害、資料或利潤負任何責任。 | 其他資源 其他支援網站社群文章翻譯
|
回此頁最上方
