This article has been archived. It is offered "as is" and will no longer be updated.
After you install the Microsoft Security Update MS04-039 on a computer that is running Microsoft Internet Security and Acceleration (ISA) Server 2000, you experience the following symptoms:
100% CPU utilization by the Web Proxy or Firewall service
Web Proxy or Firewall services do not start.
Web Proxy or Firewall services unexpectedly quit.
Additionally, you may not be able to install Microsoft Security Update MS04-039 on computers that are running Microsoft Windows 2000 Server Service Pack 3 (SP3).
This issue occurs because the original Microsoft Security Update MS04-039 package was built to run on computers with ISA Server 2000 Service Pack 2 (SP2). However, files that are required for the package to install correctly on ISA Server 2000 Service Pack 1 (SP1) are missing. Additionally, the installer package included a setting that limited installation to Windows 2000 Service Pack 4 (SP4) only.
On November 16, 2004, Microsoft re-released Microsoft Security Update MS04-039 to address these issues. To resolve this issue, install the re-released version of Microsoft Security Update MS04-039.
For additional information about how to install the re-released version of Microsoft Security Update MS04-039, click the following article numbers to view the articles in the Microsoft Knowledge Base:
888258 MS04-039: Vulnerability in ISA Server 2000 and Proxy Server 2.0 could allow Internet content spoofing
889189 How to work around the ISA Server 2000 and Proxy Server 2.0 DNS spoofing vulnerability described in Microsoft Security Bulletin MS04-039
To validate that you have the correct package, view the timestamp of the package as follows:
Right-click the package, and then click Properties.
Click the Digital Signatures tab.
In the Timestamp column, notice the date. If the date is November 11, 2004, then you have the correct package.