MS05-006: Vulnerability in Windows SharePoint Services and SharePoint Team Services could allow cross-site scripting and spoofing attacks

SharePoint Team Services from Microsoft

Microsoft has released an update to SharePoint Team Services from Microsoft that resolves the issues that are described in MS05-006. The issues that are described in MS05-006 are resolved on computers that have SharePoint Team Services from Microsoft installed. For more information about this update, click the following article number to view the article in the Microsoft Knowledge Base:

Known issues

Known issues that may occur after the security update is installed

When you connect to your Microsoft Windows SharePoint Services Web site after you install the SharePoint Team Services security update, you may receive an error message. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Special considerations for Turkish-language customers

Microsoft Windows SharePoint Services displays the value of the Turkish Lira only in TL format. When you add a Currency column in Windows SharePoint Services, there is no option to configure the column so that the value of the Turkish Lira is displayed in the old TL format and in the new YTL format.

Note This update resolves the Turkish Lira issue for only the Turkish-language version and English-language version of Windows SharePoint Services.

To resolve the Turkish Lira issue, you must do the following:

• Install the Security Update for Windows SharePoint Services (KB887981) on the computer that is running Windows SharePoint Services.
• Install the Update for Office 2003 (KB887980) on the computer that is running Microsoft Office FrontPage 2003.

For more information about the update for Office 2003 (KB887980), click the following article number to view the article in the Microsoft Knowledge Base:

Issues that the security update fixes

Besides the issues that are described in the security bulletin, the Security Update for Windows SharePoint Services (KB887981) addresses the issues that are described in the following Microsoft Knowledge Base articles:

• 886676  (http://support.microsoft.com/kb/886676/ ) Description of the Windows SharePoint Services post-Service Pack 1 hotfix package: October 12, 2004
  
  
  
  
  
  
  
  
  
  
  
• 867811  (http://support.microsoft.com/kb/867811/ ) Description of the Windows SharePoint Services post-Service Pack 1 hotfix package: September 16, 2004
  
  
  
  
• 887810  (http://support.microsoft.com/kb/887810/ ) Description of the Windows SharePoint Services post-Service Pack 1 hotfix package: October 19, 2004
  
  
• 888505  (http://support.microsoft.com/kb/888505/ ) Description of the Windows SharePoint Services post-Service Pack 1 hotfix package: November 13, 2004
  
  
• 827930  (http://support.microsoft.com/kb/827930/ ) Error messages when you delete or rename large folders or sites in Windows SharePoint Services
  
  
• 890337  (http://support.microsoft.com/kb/890337/ ) Description of the Microsoft Office FrontPage 2003 post-Service Pack 1 hotfix package: December 3, 2004

Besides the issues that are described in the security bulletin, the Security Update for Windows SharePoint Services (KB887981) addresses the following Windows SharePoint Services issues that were not previously documented in a Microsoft Knowledge Base article:

• After you uninstall Windows SharePoint Services, the WMSDE SQL Service (MSSQL$SHAREPOINT service) continues to run. Additionally, its Startup type is set to Automatic.
• You receive the following error message when you try to enable a full-text search in the SearchAdmin.aspx Web page:
  Thread was being aborted
• Users without permissions to a Windows SharePoint Web site can upload files by using the PUT method with the "If-None-Match" clause.
  
• You receive the following error message:
  The content databases in this cluster have exceeded the warning Web site count. Either change the content database Web site capacity settings or add more content databases.
  Note This error message occurs when you restore a site even if the content databases in the cluster have not exceeded the maximum limit.
  
• When a restore operation fails, an entry for the site that you want to restore is added in the config database.
  

Error signature details

The following table contains error signatures. You can use this table to assess your needs of applying the security update.