Select the product you need help with

Description of the FrontPage 2002 Server Extensions Security Patch: November 11, 2003

Article ID: 813380 - View products that this article applies to.

SUMMARY

Microsoft has released a security patch to Microsoft FrontPage 2002 Server Extensions from Microsoft. This security patch offers the highest level of stability and the highest level of enhanced security that is available for FrontPage 2002 Server Extensions. This security patch fixes an issue in FrontPage 2002 Server Extensions that could allow an attacker to send a specially-formed request that could cause a temporary denial of service.

This article describes how to download and how to install the FrontPage 2002 Server Extensions Security Patch: KB813380.

This security patch was first included in Office XP Service Pack 3 (SP3) for SharePoint Team Services.

For more information about the latest service pack for Office XP Service Pack 3 (SP3) for SharePoint Team Services, click the following article number to view the article in the Microsoft Knowledge Base:

833845

(http://support.microsoft.com/kb/833845/ )

Overview of Office XP Service Pack 3 for SharePoint Team Services

Back to the top | Give Feedback

MORE INFORMATION

How to download and how to install the security patch

Note Before you install the security patch, make sure that you meet both of the following conditions:

Log on to your computer with an account that has administrative permissions.
Stop all services that are related to FrontPage 2002 Server Extensions.

Note If you do not stop all services that are related to the FrontPage 2002 Server Extensions, or if the file that you want to update is in use, you are prompted to restart your computer after you install the security patch.

The following file is available for download from the Microsoft Download Center:

Collapse this imageExpand this image

Download the FrontPage 2002 Server Extensions Security Patch: KB813380 package now.

(http://download.microsoft.com/download/a/4/e/a4e8bf96-9daa-41a6-a4d7-e64050eeb9e6/officexp-kb813380-client-eng.exe)

Release Date: November 11, 2003

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591

(http://support.microsoft.com/kb/119591/ )

How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

When you are prompted to download or to save the file, click Save this Program to Disk, and then save the file to your desktop. To install the security patch, double-click the file that you downloaded to your desktop, and then follow the instructions for the installation.

Note After you install the security patch, you cannot remove it.

How to determine whether the security patch is installed

The security patch contains updated versions of the following files:

   File name       Version
   -------------------------------
   Eula.txt           0.00.00.0000
   Fp30reg.dll     10.00.4205.0000
   FPcheck1003.exe    0.00.00.0000
   Fp5amsft.dll    10.00.4803.0000
   Fp5Areg.dll     10.00.4205.0000
   Fp5Awel.dll     10.00.4803.0000

List of issues that are fixed by the security patch

The FrontPage 2002 Server Extensions Security Patch: KB813380 fixes the following issues:

Specially-formed request could cause a temporary denial of service.
Pagehits XML file is not generated on the server that has usage analysis configured.
Application error when you upgrade to Windows Server 2003 if SharePoint Team Server is pre-installed.
List tag attribute is removed when a page is an included page.
File with no relevance to any Office product exists.

Specially-formed request could cause a temporary denial of service

An attacker may be able to send a specially formed request that could cause a temporary denial of service.

Note This fix is also included in Microsoft Office XP Service Pack 2 (SP-2). The steps that are described in this article permit users to install this fix without having to install Office XP SP-2.

Pagehits XML file is not generated on the server that has Usage Analysis configured

When you set up Usage Analysis on your server, and when you run the command-line tool to generate the report, the _x_pagehits.xml file may not be generated as you expect.

Application error when you upgrade to Windows Server 2003 if SharePoint Team Server is pre-installed

You install SharePoint Team Server on Windows Server 2003, or you install upgrades from Windows 2000 Server with SharePoint Team Server, and then you install FrontPage 2002 Server Extensions from Windows Server 2003. As a result, the baseline of the Fp5awel.dll file is not correct, and the SharePoint Team Server functionality is disrupted.

List tag attribute is removed when a page is an Included Page

When you include a page that contains attributes inside the <LI> tag, and the page is inserted as an Included Page in another Web page, FrontPage may remove all the attributes in the <LI> tags.