After you install the Microsoft Security Update MS04-039 on a computer that is running Microsoft Internet Security and Acceleration (ISA) Server 2000, you experience the following symptoms:
| • | 100% CPU utilization by the Web Proxy or Firewall service |
| • | Web Proxy or Firewall services do not start. |
| • | Web Proxy or Firewall services unexpectedly quit. |
Additionally, you may not be able to install Microsoft Security Update MS04-039 on computers that are running Microsoft Windows 2000 Server Service Pack 3 (SP3).
Back to the top
This issue occurs because the original Microsoft Security Update MS04-039 package was built to run on computers with ISA Server 2000 Service Pack 2 (SP2). However, files that are required for the package to install correctly on ISA Server 2000 Service Pack 1 (SP1) are missing. Additionally, the installer package included a setting that limited installation to Windows 2000 Service Pack 4 (SP4) only.
Back to the top
On November 16, 2004, Microsoft re-released Microsoft Security Update MS04-039 to address these issues. To resolve this issue, install the re-released version of Microsoft Security Update MS04-039.
For additional information about how to install the re-released version of Microsoft Security Update MS04-039, click the following article numbers to view the articles in the Microsoft Knowledge Base:
888258 (http://support.microsoft.com/kb/888258/)
MS04-039: Vulnerability in ISA Server 2000 and Proxy Server 2.0 could allow Internet content spoofing
889189 (http://support.microsoft.com/kb/889189/) How to work around the ISA Server 2000 and Proxy Server 2.0 DNS spoofing vulnerability described in Microsoft Security Bulletin MS04-039
Back to the top
To validate that you have the correct package, view the timestamp of the package as follows:
| 1. | Right-click the package, and then click Properties. |
| 2. | Click the Digital Signatures tab. |
| 3. | In the Timestamp column, notice the date. If the date is November 11, 2004, then you have the correct package. |
Back to the top