MS08-037: Vulnerabilities in DNS could allow spoofing

Applies To
Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003 Service Pack 2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Media Center Edition 2005 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Service Pack 3 Microsoft Windows XP Home Edition Microsoft Windows XP Professional Microsoft Windows XP Service Pack 2 Microsoft Windows XP Home Edition Microsoft Windows XP Professional Windows Server 2008 for Itanium-Based Systems Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition

INTRODUCTION

Microsoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

Known issues with this security update

Issue with ICMPv6 packets in Windows Server 2003

After you install this security update, Windows Server 2003 may not set the value of the icmp6_cksum field in the icmp6_hdr structure for ICMPv6 packets. To resolve this issue, install hotfix 974927.

For more information about hotfix 974927, click the following article number to view the article in the Microsoft Knowledge Base:

974927 Windows Server 2003 does not set the value of the icmp6_cksum field in the icmp6_hdr structure for ICMPv6 packets after you install security update 953230 (MS08-037)

Resource Consumption Issues

Windows DNS server systems may see an increase in memory and file handles resource consumption for systems on which the security update that is described in MS08-037 is installed. This is expected behavior because of the SocketPool randomization feature that was implemented to address this security vulnerability on Windows-based servers. The implementation of the DNS server security update reserves a set of ports. One of the ports is selected randomly for each outgoing DNS query. This design decision was made to address performance concerns for DNS servers that handle and originate a significantly larger number of queries than Windows-based clients. The set of reserved ports that the DNS server reserves is known as a "socket pool."

By default, the size of the socket pool on Windows-based servers is 2,500 sockets. To configure this size, change the SocketPoolSize registry entry in the following subkey in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\SocketPoolSize
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956188 You experience issues with UDP-dependent network services after you install DNS Server service security update 953230 (MS08-037)

For more information, visit the following Microsoft Web page:

http:⁠//blogs.technet.com/sseshad/archive/2008/12/03/windows-dns-and-the-kaminsky-bug.aspx

Port conflict and connection issues

After you install this security update, and then you restart the computer, you may experience issues with User Datagram Protocol (UDP) dependent network services. After you install this security update, a service that depends on a UDP port may not start on a computer that is running Windows 2000, Windows Server 2003, or Windows Server 2008. This issue occurs if the service is allocated to the DNS service after security update 953230 is installed.

For more information about this issue, click the following article numbers to view the articles in the Microsoft Knowledge Base:

956188 You experience issues with UDP-dependent network services after you install DNS Server service security update 953230 (MS08-037)

977512 The DNS Server service binds to all ports in the Windows Deployment Services port range on a server that is running Windows Server 2008 R2 or Windows Server 2008

Service issues on SBS-based systems

After you install this security update, and then you restart a computer that is running Microsoft Windows Small Business Server 2003 (Windows SBS), you may experience many network-related problems.

For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956189 Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 (MS08-037)

Perimeter firewall devices and NAT issues

After you install this security update on a Microsoft Windows-based computer, you may find that the DNS queries that are sent across a firewall from the computer do not use random source ports.

For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956190 DNS queries that are sent across a firewall do not use random source ports after you install security update 953230 (MS08-037)

Issue with ZoneAlarm

After you install this security update on a Windows XP-based computer, on a Windows 2000-based computer, or on a Windows Server 2003-based computer that is running ZoneAlarm, you may be unable to connect to the Internet.

Note This issue does not affect Windows Vista-based computers.

This issue may occur when you run the ZoneAlarm versions that are listed in the following table.

Application Version number range
Zone Alarm Internet Security Suite 6.5.645.000–7.0.482.000
Zone Alarm Pro 6.5.645.000–7.0.482.000
Zone Alarm Anti Virus 6.5.645.000–7.0.482.000
Zone Alarm Anti-Spyware 6.5.645.000–7.0.482.000
Zone Alarm Basic Firewall 6.5.645.000–7.0.482.000
EndPoint Security 6.5.645.000–7.0.865.000 (excluding 7.0.843.0007 and 7.0.866.000)

To resolve this issue, install update 958752. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

958752 The version of AFD.SYS that is released together with security update 953230 (MS08-037) and security update 956803 (MS08-066) has an application compatibility issue

For more information about how to resolve this issue, visit the following ZoneAlarm Web site:

http:⁠//download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Uninstall issues

Systems that are running supported editions of Windows 2000 Server and Windows Server 2003 will receive the DNS server updates in addition to the DNS client updates. The DNS server updates and the DNS client updates share binaries. Therefore, they must be uninstalled in the reverse order that they were installed to avoid regressing the shared binaries to earlier versions.

Consider the following scenario:

  • You install the DNS client security update (951748) that is described in security bulletin MS08-037.
  • You install the DNS server security update (951746) that is described in security bulletin MS08-037.
  • You uninstall the DNS client security update (951748) that is described in security bulletin MS08-037.

In this scenario, the DNS server security update (951746) that is described in security bulletin MS08-037 may revert to the vulnerable version. This behavior causes the DNS server security update (951746) that is described in security bulletin MS08-037 to be reoffered to the vulnerable system. Therefore, you must reinstall the DNS server security update (951746) that is described in security bulletin MS08-037.

 For more information about this security update and for information about any known issues with specific releases of this software, click the following article number to view the article in the Microsoft Knowledge Base:

823836 Removing Windows software updates in the wrong order may cause the operating system to stop functioning

Socket connection issues

The updates that are offered in bulletin MS08-037 prevent the DNS service from conflicting with the reserved ports that other services may be listening on.

DNS Source Port randomization

As a part of DNS Source Port randomization, Microsoft has reserved ports to reduce the source port randomization risk. The default size of the Socket Pool on Windows Server 2003 and down-level platforms is 2500. This size is configurable by modifying the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\SocketPoolSize registry subkey.

When the value of the SocketPoolSize registry entry is changed, the DNS service must restart for the changes go into effect. On DNS servers that have other services listening on UDP ports, it is helpful to prevent the DNS service from conflicting with the reserved ports of other services.

 For more information about ReservedPorts keys, click the following article number to view the article in the Microsoft Knowledge Base:

812873 How to reserve a range of ephemeral ports on a computer that is running Windows Server 2003 or Windows 2000 Server

MaxUserPort

On Windows Server 2003 and Windows 2000 Server, the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\MaxUserPort registry subkey is defined as the maximum port up to which ports may be allocated for wildcard binds. The value of the MaxUserPort registry entry defines the dynamic port range.

For more information about the MaxUserPort registry entry, visit the following Microsoft Web site:

http:⁠//technet.microsoft.com/en-us/library/cc938196.aspx What is the effective port range when the value of the MaxUserPort registry entry is set explicitly?

In Windows Server 2003 or Windows 2000 Server, the value of the MaxUserPort registry entry defines the dynamic port range. The range starts from 1024 to MaxUserPort.

Modifying the ephemeral port in Windows Server 2008 or later

To adjust the ephemeral port in Windows Server 2008 or later, run the following command:

netsh int <ipv4|ipv6> set dynamic <tcp|udp> start=number num=rangeTo view the current ephemeral port range, run the following command:

netsh int <ipv4|ipv6> show dynamicport <tcp|udp> For more information, click the following article number to view the article in the Microsoft Knowledge Base:

929851 The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008

The following is the fix behavior on Windows Server 2003 and down-level platforms after you install the MS08-037 DNS update:

  • If the value of the MaxUserPort registry entry is set, allocate ports randomly from the [1024, MaxUserPort] range.
  • If the value of the MaxUserPort registry entry is not set, allocate ports randomly from the [49152, 65535] range.

More information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

951748 MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

951746 MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (server-side): July 8, 2008

File information (client side)

The English (United States) version of this software update installs files with the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Note that dates and times for these files on your local computer are displayed in your local time and with your current daylight savings time bias. The dates and times may also change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

File name File version File size Date Time Platform
Afd.sys 5.0.2195.7204 119,152 18-Oct-2008 00:08 x86
Dnsapi.dll 5.0.2195.7280 139,024 21-Apr-2009 10:00 x86
Dnsrslvr.dll 5.0.2195.7280 98,064 21-Apr-2009 10:00 x86
Msafd.dll 5.0.2195.7158 105,744 21-Apr-2009 10:00 x86
Mswsock.dll 5.0.2195.7158 64,784 14-Oct-2009 00:47 x86
Tcpip.sys 5.0.2195.7162 320,528 19-Jun-2008 12:05 x86

Windows XP and Windows Server 2003 file information notes

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only fixes that are broadly released to address widespread, critical issues. QFE service branches contain hotfixes in addition to broadly released fixes.
  • In addition to the files listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.1.2600.2975 100,352 16-Aug-2006 11:58 x86 SP2 SP2GDR
Afd.sys 5.1.2600.3394 138,368 20-Jun-2008 10:44 x86 SP2 SP2GDR
Dnsapi.dll 5.1.2600.3394 148,992 20-Jun-2008 15:11 x86 SP2 SP2GDR
Mswsock.dll 5.1.2600.3394 245,248 20-Jun-2008 17:41 x86 SP2 SP2GDR
Tcpip.sys 5.1.2600.3394 360,320 20-Jun-2008 10:45 x86 SP2 SP2GDR
Tcpip6.sys 5.1.2600.3394 225,920 20-Jun-2008 07:22 x86 SP2 SP2GDR
6to4svc.dll 5.1.2600.2975 100,352 16-Aug-2006 12:08 x86 SP2 SP2QFE
Afd.sys 5.1.2600.3394 138,368 20-Jun-2008 10:44 x86 SP2 SP2QFE
Dnsapi.dll 5.1.2600.3394 147,968 20-Jun-2008 17:36 x86 SP2 SP2QFE
Mswsock.dll 5.1.2600.3394 245,248 20-Jun-2008 17:36 x86 SP2 SP2QFE
Tcpip.sys 5.1.2600.3394 360,960 20-Jun-2008 10:44 x86 SP2 SP2QFE
Tcpip6.sys 5.1.2600.3394 225,920 20-Jun-2008 09:32 x86 SP2 SP2QFE
Afd.sys 5.1.2600.5625 138,496 20-Jun-2008 11:40 x86 SP3 SP3GDR
Dnsapi.dll 5.1.2600.5625 147,968 20-Jun-2008 17:46 x86 SP3 SP3GDR
Mswsock.dll 5.1.2600.5625 245,248 20-Jun-2008 17:46 x86 SP3 SP3GDR
Tcpip.sys 5.1.2600.5625 361,600 20-Jun-2008 11:51 x86 SP3 SP3GDR
Tcpip6.sys 5.1.2600.5625 225,856 20-Jun-2008 11:08 x86 SP3 SP3GDR
Afd.sys 5.1.2600.5625 138,496 20-Jun-2008 11:48 x86 SP3 SP3QFE
Dnsapi.dll 5.1.2600.5625 147,968 20-Jun-2008 17:43 x86 SP3 SP3QFE
Mswsock.dll 5.1.2600.5625 245,248 20-Jun-2008 17:43 x86 SP3 SP3QFE
Tcpip.sys 5.1.2600.5625 361,600 20-Jun-2008 11:59 x86 SP3 SP3QFE
Tcpip6.sys 5.1.2600.5625 225,856 20-Jun-2008 11:16 x86 SP3 SP3QFE

For all supported x86-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 13:52 x86 SP1 SP1GDR
Afd.sys 5.2.3790.3161 150,528 20-Jun-2008 15:59 x86 SP1 SP1GDR
Dnsapi.dll 5.2.3790.3161 158,208 20-Jun-2008 19:39 x86 SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 256,512 20-Jun-2008 19:39 x86 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 333,824 20-Jun-2008 15:59 x86 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 225,856 20-Jun-2008 10:13 Not applicable SP1 SP1GDR
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 14:01 x86 SP1 SP1QFE
Afd.sys 5.2.3790.3161 152,576 20-Jun-2008 10:38 x86 SP1 SP1QFE
Dnsapi.dll 5.2.3790.3161 158,720 20-Jun-2008 18:52 x86 SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 258,048 20-Jun-2008 18:52 x86 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 394,752 20-Jun-2008 10:38 x86 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 225,984 20-Jun-2008 10:04 Not applicable SP1 SP1QFE
Afd.sys 5.2.3790.4318 150,528 20-Jun-2008 14:22 x86 SP2 SP2GDR
Dnsapi.dll 5.2.3790.4318 160,768 20-Jun-2008 18:19 x86 SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 256,000 20-Jun-2008 18:19 x86 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 384,000 20-Jun-2008 14:22 x86 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 234,368 20-Jun-2008 13:55 Not applicable SP2 SP2GDR
Afd.sys 5.2.3790.4318 150,528 20-Jun-2008 11:02 x86 SP2 SP2QFE
Dnsapi.dll 5.2.3790.4318 160,768 20-Jun-2008 19:39 x86 SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 257,024 20-Jun-2008 18:07 x86 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 390,656 20-Jun-2008 11:01 x86 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 234,496 20-Jun-2008 10:19 Not applicable SP2 SP2QFE

For all supported x64-based versions of Windows Server 2003 and Windows XP Professional x64 edition

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 124,416 20-Jun-2008 18:28 x64 SP1 SP1GDR
Afd.sys 5.2.3790.3161 299,008 20-Jun-2008 18:28 x64 SP1 SP1GDR
Dnsapi.dll 5.2.3790.3161 306,688 20-Jun-2008 18:28 x64 SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 490,496 20-Jun-2008 18:28 x64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 703,488 20-Jun-2008 18:28 x64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 362,752 20-Jun-2008 18:29 x64 SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 20-Jun-2008 18:29 x86 SP1 SP1GDR\WOW
Wdnsapi.dll 5.2.3790.3161 158,208 20-Jun-2008 18:29 x86 SP1 SP1GDR\WOW
Wmswsock.dll 5.2.3790.3161 232,448 20-Jun-2008 18:29 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 124,416 20-Jun-2008 18:28 x64 SP1 SP1QFE
Afd.sys 5.2.3790.3161 299,520 20-Jun-2008 18:28 x64 SP1 SP1QFE
Dnsapi.dll 5.2.3790.3161 306,688 20-Jun-2008 18:28 x64 SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 491,520 20-Jun-2008 18:28 x64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 829,952 20-Jun-2008 18:29 x64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 363,136 20-Jun-2008 18:29 x64 SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Wdnsapi.dll 5.2.3790.3161 158,720 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Wmswsock.dll 5.2.3790.3161 233,472 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4318 291,840 21-Jun-2008 07:07 x64 SP2 SP2GDR
Dnsapi.dll 5.2.3790.4318 306,176 21-Jun-2008 07:07 x64 SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 492,544 21-Jun-2008 07:07 x64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 768,512 21-Jun-2008 07:07 x64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 375,680 21-Jun-2008 07:07 x64 SP2 SP2GDR
Wdnsapi.dll 5.2.3790.4318 160,768 21-Jun-2008 07:07 x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 21-Jun-2008 07:07 x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4318 292,352 20-Jun-2008 18:29 x64 SP2 SP2QFE
Dnsapi.dll 5.2.3790.4318 306,688 20-Jun-2008 18:29 x64 SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 493,056 20-Jun-2008 18:29 x64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 784,896 20-Jun-2008 18:29 x64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 375,808 20-Jun-2008 18:29 x64 SP2 SP2QFE
Wdnsapi.dll 5.2.3790.4318 160,768 20-Jun-2008 18:30 x86 SP2 SP2QFE\WOW
Wmswsock.dll 5.2.3790.4318 234,496 20-Jun-2008 18:30 x86 SP2 SP2QFE\WOW

For all supported Itanium-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 362,496 20-Jun-2008 18:34 IA-64 SP1 SP1GDR
Afd.sys 5.2.3790.3161 582,144 20-Jun-2008 18:34 IA-64 SP1 SP1GDR
Dnsapi.dll 5.2.3790.3161 438,272 20-Jun-2008 18:34 IA-64 SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 780,800 20-Jun-2008 18:34 IA-64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 1,116,672 20-Jun-2008 18:34 IA-64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 736,384 20-Jun-2008 18:35 Not applicable SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 20-Jun-2008 18:35 x86 SP1 SP1GDR\WOW
Wdnsapi.dll 5.2.3790.3161 158,208 20-Jun-2008 18:35 x86 SP1 SP1GDR\WOW
Wmswsock.dll 5.2.3790.3161 232,448 20-Jun-2008 18:35 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 362,496 20-Jun-2008 18:29 IA-64 SP1 SP1QFE
Afd.sys 5.2.3790.3161 584,192 20-Jun-2008 18:29 IA-64 SP1 SP1QFE
Dnsapi.dll 5.2.3790.3161 438,272 20-Jun-2008 18:29 IA-64 SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 784,896 20-Jun-2008 18:29 IA-64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 1,308,672 20-Jun-2008 18:29 IA-64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 737,024 20-Jun-2008 18:29 Not applicable SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Wdnsapi.dll 5.2.3790.3161 158,720 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Wmswsock.dll 5.2.3790.3161 233,472 20-Jun-2008 18:29 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4318 583,680 21-Jun-2008 07:04 IA-64 SP2 SP2GDR
Dnsapi.dll 5.2.3790.4318 438,272 21-Jun-2008 07:04 IA-64 SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 785,408 21-Jun-2008 07:04 IA-64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 1,287,168 21-Jun-2008 07:04 IA-64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 763,776 21-Jun-2008 07:04 Not applicable SP2 SP2GDR
Wdnsapi.dll 5.2.3790.4318 160,768 21-Jun-2008 07:04 x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 21-Jun-2008 07:04 x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4318 584,192 20-Jun-2008 18:33 IA-64 SP2 SP2QFE
Dnsapi.dll 5.2.3790.4318 438,272 20-Jun-2008 18:33 IA-64 SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 789,504 20-Jun-2008 18:33 IA-64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 1,310,208 20-Jun-2008 18:34 IA-64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 764,416 20-Jun-2008 18:34 Not applicable SP2 SP2QFE
Wdnsapi.dll 5.2.3790.4318 160,768 20-Jun-2008 18:34 x86 SP2 SP2QFE\WOW
Wmswsock.dll 5.2.3790.4318 234,496 20-Jun-2008 18:34 x86 SP2 SP2QFE\WOW

File information (server side)

The English (United States) version of this software update installs files with the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Note that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

File name File version File size Date Time Platform
Afd.sys 5.0.2195.7158 119,152 08-May-2008 06:08 x86
Dns.exe 5.0.2195.7162 332,048 12-Jun-2008 09:21 x86
Dnsperf.dll 5.0.2195.7157 33,552 25-Jun-2008 07:14 x86
Dnsperf.h Not applicable 6,642 30-Apr-2008 07:49 Not applicable
Dnsperf.ini Not applicable 11,597 30-Apr-2008 07:49 Not applicable
Msafd.dll 5.0.2195.7158 105,744 25-Jun-2008 07:14 x86
Tcpip.sys 5.0.2195.7162 320,528 18-Jun-2008 07:35 x86

Windows XP and Windows Server 2003 file information notes

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only fixes that are broadly released to address widespread, critical issues. QFE service branches contain hotfixes in addition to broadly released fixes.
  • In addition to the files listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 13:52 x86 SP1 SP1GDR
Afd.sys 5.2.3790.3161 150,528 20-Jun-2008 15:59 x86 SP1 SP1GDR
Dns.exe 5.2.3790.3161 446,976 20-Jun-2008 09:57 x86 SP1 SP1GDR
Dnsperf.dll 5.2.3790.3161 11,776 21-Jun-2008 14:45 x86 SP1 SP1GDR
Dnsperf.h Not applicable 6,642 26-Apr-2008 04:36 Not applicable SP1 SP1GDR
Dnsperf.ini Not applicable 11,597 26-Apr-2008 04:33 Not applicable SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 256,512 21-Jun-2008 14:45 x86 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 333,824 20-Jun-2008 15:59 x86 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 225,856 20-Jun-2008 10:13 Not applicable SP1 SP1GDR
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 14:01 x86 SP1 SP1QFE
Afd.sys 5.2.3790.3161 152,576 20-Jun-2008 10:38 x86 SP1 SP1QFE
Dns.exe 5.2.3790.3161 448,000 20-Jun-2008 10:02 x86 SP1 SP1QFE
Dnsperf.dll 5.2.3790.3161 11,776 21-Jun-2008 14:37 x86 SP1 SP1QFE
Dnsperf.h Not applicable 6,642 26-Apr-2008 04:36 Not applicable SP1 SP1QFE
Dnsperf.ini Not applicable 11,597 26-Apr-2008 04:33 Not applicable SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 258,048 21-Jun-2008 14:37 x86 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 394,752 20-Jun-2008 10:38 x86 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 225,984 20-Jun-2008 10:04 Not applicable SP1 SP1QFE
W03a2409.dll 5.2.3790.3161 30,208 20-Jun-2008 09:56 x86 SP1 SP1QFE
Afd.sys 5.2.3790.4318 150,528 20-Jun-2008 14:22 x86 SP2 SP2GDR
Dns.exe 5.2.3790.4318 447,488 20-Jun-2008 13:38 x86 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4318 11,776 21-Jun-2008 14:06 x86 SP2 SP2GDR
Dnsperf.h Not applicable 6,642 26-Apr-2008 04:36 Not applicable SP2 SP2GDR
Dnsperf.ini Not applicable 11,597 26-Apr-2008 04:33 Not applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 256,000 21-Jun-2008 14:06 x86 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 384,000 20-Jun-2008 14:22 x86 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 234,368 20-Jun-2008 13:55 Not applicable SP2 SP2GDR
Afd.sys 5.2.3790.4318 150,528 20-Jun-2008 11:02 x86 SP2 SP2QFE
Dns.exe 5.2.3790.4318 448,000 20-Jun-2008 10:20 x86 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4318 11,776 21-Jun-2008 14:14 x86 SP2 SP2QFE
Dnsperf.h Not applicable 6,642 26-Apr-2008 04:36 Not applicable SP2 SP2QFE
Dnsperf.ini Not applicable 11,597 26-Apr-2008 04:33 Not applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 257,024 21-Jun-2008 14:14 x86 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 390,656 20-Jun-2008 11:01 x86 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 234,496 20-Jun-2008 10:19 Not applicable SP2 SP2QFE

For all supported x64-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 124,416 21-Jun-2008 12:55 x64 SP1 SP1GDR
Afd.sys 5.2.3790.3161 299,008 21-Jun-2008 12:55 x64 SP1 SP1GDR
Dns.exe 5.2.3790.3161 767,488 21-Jun-2008 12:55 x64 SP1 SP1GDR
Dnsperf.dll 5.2.3790.3161 14,336 21-Jun-2008 12:55 x64 SP1 SP1GDR
Dnsperf.h Not applicable 6,642 21-Jun-2008 12:55 Not applicable SP1 SP1GDR
Dnsperf.ini Not applicable 11,597 21-Jun-2008 12:55 Not applicable SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 490,496 21-Jun-2008 12:55 x64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 703,488 21-Jun-2008 12:55 x64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 362,752 21-Jun-2008 12:55 x64 SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 21-Jun-2008 12:55 x86 SP1 SP1GDR\WOW
Wdns.exe 5.2.3790.3161 446,976 21-Jun-2008 12:55 x86 SP1 SP1GDR\WOW
Wdnsperf.dll 5.2.3790.3161 11,776 21-Jun-2008 12:55 x86 SP1 SP1GDR\WOW
Wmswsock.dll 5.2.3790.3161 232,448 21-Jun-2008 12:55 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 124,416 22-Jun-2008 04:55 x64 SP1 SP1QFE
Afd.sys 5.2.3790.3161 299,520 22-Jun-2008 04:55 x64 SP1 SP1QFE
Dns.exe 5.2.3790.3161 770,560 22-Jun-2008 04:55 x64 SP1 SP1QFE
Dnsperf.dll 5.2.3790.3161 14,336 22-Jun-2008 04:55 x64 SP1 SP1QFE
Dnsperf.h Not applicable 6,642 22-Jun-2008 04:55 Not applicable SP1 SP1QFE
Dnsperf.ini Not applicable 11,597 22-Jun-2008 04:55 Not applicable SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 491,520 22-Jun-2008 04:55 x64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 829,952 22-Jun-2008 04:55 x64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 363,136 22-Jun-2008 04:55 x64 SP1 SP1QFE
W03a2409.dll 5.2.3790.3161 30,720 22-Jun-2008 04:55 x64 SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 22-Jun-2008 04:55 x86 SP1 SP1QFE\WOW
Wdns.exe 5.2.3790.3161 448,000 22-Jun-2008 04:55 x86 SP1 SP1QFE\WOW
Wdnsperf.dll 5.2.3790.3161 11,776 22-Jun-2008 04:55 x86 SP1 SP1QFE\WOW
Wmswsock.dll 5.2.3790.3161 233,472 22-Jun-2008 04:55 x86 SP1 SP1QFE\WOW
Ww03a2409.dll 5.2.3790.3161 30,208 22-Jun-2008 04:55 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4318 291,840 22-Jun-2008 05:16 x64 SP2 SP2GDR
Dns.exe 5.2.3790.4318 768,512 22-Jun-2008 05:16 x64 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4318 14,336 22-Jun-2008 05:16 x64 SP2 SP2GDR
Dnsperf.h Not applicable 6,642 22-Jun-2008 05:16 Not applicable SP2 SP2GDR
Dnsperf.ini Not applicable 11,597 22-Jun-2008 05:16 Not applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 492,544 22-Jun-2008 05:16 x64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 768,512 22-Jun-2008 05:16 x64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 375,680 22-Jun-2008 05:16 x64 SP2 SP2GDR
Wdnsperf.dll 5.2.3790.4318 11,776 22-Jun-2008 05:16 x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 22-Jun-2008 05:16 x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4318 292,352 22-Jun-2008 05:16 x64 SP2 SP2QFE
Dns.exe 5.2.3790.4318 771,072 22-Jun-2008 05:16 x64 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4318 14,336 22-Jun-2008 05:16 x64 SP2 SP2QFE
Dnsperf.h Not applicable 6,642 22-Jun-2008 05:16 Not applicable SP2 SP2QFE
Dnsperf.ini Not applicable 11,597 22-Jun-2008 05:16 Not applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 493,056 22-Jun-2008 05:16 x64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 784,896 22-Jun-2008 05:16 x64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 375,808 22-Jun-2008 05:16 x64 SP2 SP2QFE
Wdnsperf.dll 5.2.3790.4318 11,776 22-Jun-2008 05:16 x86 SP2 SP2QFE\WOW
Wmswsock.dll 5.2.3790.4318 234,496 22-Jun-2008 05:16 x86 SP2 SP2QFE\WOW

For all supported Itanium-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 362,496 21-Jun-2008 12:53 IA-64 SP1 SP1GDR
Afd.sys 5.2.3790.3161 582,144 21-Jun-2008 12:53 IA-64 SP1 SP1GDR
Dns.exe 5.2.3790.3161 1,136,640 21-Jun-2008 12:53 IA-64 SP1 SP1GDR
Dnsperf.dll 5.2.3790.3161 26,624 21-Jun-2008 12:54 IA-64 SP1 SP1GDR
Dnsperf.h Not applicable 6,642 21-Jun-2008 12:54 Not applicable SP1 SP1GDR
Dnsperf.ini Not applicable 11,597 21-Jun-2008 12:54 Not applicable SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 780,800 21-Jun-2008 12:54 IA-64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 1,116,672 21-Jun-2008 12:54 IA-64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 736,384 21-Jun-2008 12:54 Not applicable SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 21-Jun-2008 12:54 x86 SP1 SP1GDR\WOW
Wdns.exe 5.2.3790.3161 446,976 21-Jun-2008 12:54 x86 SP1 SP1GDR\WOW
Wdnsperf.dll 5.2.3790.3161 11,776 21-Jun-2008 12:54 x86 SP1 SP1GDR\WOW
Wmswsock.dll 5.2.3790.3161 232,448 21-Jun-2008 12:54 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 362,496 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Afd.sys 5.2.3790.3161 584,192 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Dns.exe 5.2.3790.3161 1,140,736 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Dnsperf.dll 5.2.3790.3161 26,624 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Dnsperf.h Not applicable 6,642 21-Jun-2008 12:55 Not applicable SP1 SP1QFE
Dnsperf.ini Not applicable 11,597 21-Jun-2008 12:55 Not applicable SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 784,896 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 1,308,672 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 737,024 21-Jun-2008 12:55 Not applicable SP1 SP1QFE
W03a2409.dll 5.2.3790.3161 29,184 21-Jun-2008 12:55 IA-64 SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 21-Jun-2008 12:55 x86 SP1 SP1QFE\WOW
Wdns.exe 5.2.3790.3161 448,000 21-Jun-2008 12:55 x86 SP1 SP1QFE\WOW
Wdnsperf.dll 5.2.3790.3161 11,776 21-Jun-2008 12:55 x86 SP1 SP1QFE\WOW
Wmswsock.dll 5.2.3790.3161 233,472 21-Jun-2008 12:55 x86 SP1 SP1QFE\WOW
Ww03a2409.dll 5.2.3790.3161 30,208 21-Jun-2008 12:55 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4318 583,680 22-Jun-2008 05:01 IA-64 SP2 SP2GDR
Dns.exe 5.2.3790.4318 1,139,200 22-Jun-2008 05:01 IA-64 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4318 26,624 22-Jun-2008 05:01 IA-64 SP2 SP2GDR
Dnsperf.h Not applicable 6,642 22-Jun-2008 05:01 Not applicable SP2 SP2GDR
Dnsperf.ini Not applicable 11,597 22-Jun-2008 05:01 Not applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 785,408 22-Jun-2008 05:01 IA-64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 1,287,168 22-Jun-2008 05:01 IA-64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 763,776 22-Jun-2008 05:01 Not applicable SP2 SP2GDR
Wdnsperf.dll 5.2.3790.4318 11,776 22-Jun-2008 05:01 x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 22-Jun-2008 05:01 x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4318 584,192 21-Jun-2008 12:53 IA-64 SP2 SP2QFE
Dns.exe 5.2.3790.4318 1,140,736 21-Jun-2008 12:53 IA-64 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4318 26,624 21-Jun-2008 12:53 IA-64 SP2 SP2QFE
Dnsperf.h Not applicable 6,642 21-Jun-2008 12:53 Not applicable SP2 SP2QFE
Dnsperf.ini Not applicable 11,597 21-Jun-2008 12:53 Not applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 789,504 21-Jun-2008 12:53 IA-64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 1,310,208 21-Jun-2008 12:53 IA-64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 764,416 21-Jun-2008 12:53 Not applicable SP2 SP2QFE
Wdnsperf.dll 5.2.3790.4318 11,776 21-Jun-2008 12:53 x86 SP2