MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (DNS server-side): July 8, 2008

Microsoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200807.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/200807.mspx)
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/ (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx (http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx)

Note You should install this DNS server-side variant of security update 953230 (MS08-037) only on Windows-based DNS servers. For all other client-side Windows-based systems, including Windows Server 2003, install the following variant of security update 953230:

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site: North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site: For enterprise customers, support for security updates is available through your usual support contacts.

Known issues with this security update

Issue with ZoneAlarm

After you install this security update on a Windows XP-based computer or on a Windows 2000-based computer that is running ZoneAlarm, you may be unable to connect to the Internet.

Note This issue does not affect Windows Vista-based computers.

For more information about how to resolve this issue, visit the following ZoneAlarm Web site: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

The dates and times for these files are listed in Coordinated Universal Time (UTC). Dates and times for these files are displayed on your local computer in your local time and with your current daylight saving time setting. The dates and times may change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Server Service Pack 4

Windows XP and Windows Server 2003 file information notes

• The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
• GDR service branches contain only fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
• In addition to the files that are listed in these tables, this software update installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003

For all supported IA-64-based versions of Windows Server 2003

Windows Vista and Windows Server 2008 file information notes

• You can identify the files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) by examining the file version numbers as shown in the table at the end of this list.
• Windows Vista Service Pack 1 (SP1) is integrated into Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a version number that resembles the following number:
  6.0.0000. xxxxxx
• GDR service branches contain only fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files and the associated security catalog (.cat) files are very important to maintain the state of the updated component. The security catalog files are signed with a Microsoft digital signature. (The attributes of these files are not listed.)

For all supported x86-based versions of Windows Server 2008

For all supported x64-based versions of Windows Server 2008

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

Additional files for all supported x64-based versions of Windows Server 2008