INTRODUCTION

Microsoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update


Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

Known issues with this security update

Issue with ICMPv6 packets in Windows Server 2003

After you install this security update, Windows Server 2003 may not set the value of the icmp6_cksum field in the icmp6_hdr structure for ICMPv6 packets. To resolve this issue, install hotfix 974927.

For more information about hotfix 974927, click the following article number to view the article in the Microsoft Knowledge Base:

974927Windows Server 2003 does not set the value of the icmp6_cksum field in the icmp6_hdr structure for ICMPv6 packets after you install security update 953230 (MS08-037)

Resource Consumption Issues

Windows DNS server systems may see an increase in memory and file handles resource consumption for systems on which the security update that is described in MS08-037 is installed. This is expected behavior because of the SocketPool randomization feature that was implemented to address this security vulnerability on Windows-based servers. The implementation of the DNS server security update reserves a set of ports. One of the ports is selected randomly for each outgoing DNS query. This design decision was made to address performance concerns for DNS servers that handle and originate a significantly larger number of queries than Windows-based clients. The set of reserved ports that the DNS server reserves is known as a "socket pool."

By default, the size of the socket pool on Windows-based servers is 2,500 sockets. To configure this size, change the SocketPoolSize registry entry in the following subkey in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\SocketPoolSize
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956188You experience issues with UDP-dependent network services after you install DNS Server service security update 953230 (MS08-037)

For more information, visit the following Microsoft Web page:

http://blogs.technet.com/sseshad/archive/2008/12/03/windows-dns-and-the-kaminsky-bug.aspx

Port conflict and connection issues

After you install this security update, and then you restart the computer, you may experience issues with User Datagram Protocol (UDP) dependent network services. After you install this security update, a service that depends on a UDP port may not start on a computer that is running Windows 2000, Windows Server 2003, or Windows Server 2008. This issue occurs if the service is allocated to the DNS service after security update 953230 is installed.

For more information about this issue, click the following article numbers to view the articles in the Microsoft Knowledge Base:

956188 You experience issues with UDP-dependent network services after you install DNS Server service security update 953230 (MS08-037)

977512 The DNS Server service binds to all ports in the Windows Deployment Services port range on a server that is running Windows Server 2008 R2 or Windows Server 2008

Service issues on SBS-based systems

After you install this security update, and then you restart a computer that is running Microsoft Windows Small Business Server 2003 (Windows SBS), you may experience many network-related problems.


For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956189 Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 (MS08-037)

Perimeter firewall devices and NAT issues

After you install this security update on a Microsoft Windows-based computer, you may find that the DNS queries that are sent across a firewall from the computer do not use random source ports.



For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

956190 DNS queries that are sent across a firewall do not use random source ports after you install security update 953230 (MS08-037)

Issue with ZoneAlarm

After you install this security update on a Windows XP-based computer, on a Windows 2000-based computer, or on a Windows Server 2003-based computer that is running ZoneAlarm, you may be unable to connect to the Internet.

Note This issue does not affect Windows Vista-based computers.



This issue may occur when you run the ZoneAlarm versions that are listed in the following table.

Application

Version number range

Zone Alarm Internet Security Suite

6.5.645.000–7.0.482.000

Zone Alarm Pro

6.5.645.000–7.0.482.000

Zone Alarm Anti Virus

6.5.645.000–7.0.482.000

Zone Alarm Anti-Spyware

6.5.645.000–7.0.482.000

Zone Alarm Basic Firewall

6.5.645.000–7.0.482.000

EndPoint Security

6.5.645.000–7.0.865.000 (excluding 7.0.843.0007 and 7.0.866.000)

To resolve this issue, install update 958752. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

958752The version of AFD.SYS that is released together with security update 953230 (MS08-037) and security update 956803 (MS08-066) has an application compatibility issue

For more information about how to resolve this issue, visit the following ZoneAlarm Web site:

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.htmlMicrosoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Uninstall issues

Systems that are running supported editions of Windows 2000 Server and Windows Server 2003 will receive the DNS server updates in addition to the DNS client updates. The DNS server updates and the DNS client updates share binaries. Therefore, they must be uninstalled in the reverse order that they were installed to avoid regressing the shared binaries to earlier versions.

Consider the following scenario:

  • You install the DNS client security update (951748) that is described in security bulletin MS08-037.

  • You install the DNS server security update (951746) that is described in security bulletin MS08-037.

  • You uninstall the DNS client security update (951748) that is described in security bulletin MS08-037.

In this scenario, the DNS server security update (951746) that is described in security bulletin MS08-037 may revert to the vulnerable version. This behavior causes the DNS server security update (951746) that is described in security bulletin MS08-037 to be reoffered to the vulnerable system. Therefore, you must reinstall the DNS server security update (951746) that is described in security bulletin MS08-037.

For more information about this security update and for information about any known issues with specific releases of this software, click the following article number to view the article in the Microsoft Knowledge Base:

823836Removing Windows software updates in the wrong order may cause the operating system to stop functioning

Socket connection issues

The updates that are offered in bulletin MS08-037 prevent the DNS service from conflicting with the reserved ports that other services may be listening on.

DNS Source Port randomization

As a part of DNS Source Port randomization, Microsoft has reserved ports to reduce the source port randomization risk. The default size of the Socket Pool on Windows Server 2003 and down-level platforms is 2500. This size is configurable by modifying the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\SocketPoolSize registry subkey.

When the value of the SocketPoolSize registry entry is changed, the DNS service must restart for the changes go into effect. On DNS servers that have other services listening on UDP ports, it is helpful to prevent the DNS service from conflicting with the reserved ports of other services.


For more information about ReservedPorts keys, click the following article number to view the article in the Microsoft Knowledge Base:

812873 How to reserve a range of ephemeral ports on a computer that is running Windows Server 2003 or Windows 2000 Server

MaxUserPort

On Windows Server 2003 and Windows 2000 Server, the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\MaxUserPort registry subkey is defined as the maximum port up to which ports may be allocated for wildcard binds. The value of the MaxUserPort registry entry defines the dynamic port range.

For more information about the MaxUserPort registry entry, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/library/cc938196.aspxWhat is the effective port range when the value of the MaxUserPort registry entry is set explicitly?

In Windows Server 2003 or Windows 2000 Server, the value of the MaxUserPort registry entry defines the dynamic port range. The range starts from 1024 to MaxUserPort.

Modifying the ephemeral port in Windows Server 2008 or later

To adjust the ephemeral port in Windows Server 2008 or later, run the following command:

netsh int <ipv4|ipv6> set dynamic <tcp|udp> start=number num=rangeTo view the current ephemeral port range, run the following command:

netsh int <ipv4|ipv6> show dynamicport <tcp|udp> For more information, click the following article number to view the article in the Microsoft Knowledge Base:

929851 The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008

The following is the fix behavior on Windows Server 2003 and down-level platforms after you install the MS08-037 DNS update:

  • If the value of the MaxUserPort registry entry is set, allocate ports randomly from the [1024, MaxUserPort] range.

  • If the value of the MaxUserPort registry entry is not set, allocate ports randomly from the [49152, 65535] range.

More information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

951748 MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

951746 MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (server-side): July 8, 2008

File information (client side)

The English (United States) version of this software update installs files with the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Note that dates and times for these files on your local computer are displayed in your local time and with your current daylight savings time bias. The dates and times may also change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

File name

File version

File size

Date

Time

Platform

Afd.sys

5.0.2195.7204

119,152

18-Oct-2008

00:08

x86

Dnsapi.dll

5.0.2195.7280

139,024

21-Apr-2009

10:00

x86

Dnsrslvr.dll

5.0.2195.7280

98,064

21-Apr-2009

10:00

x86

Msafd.dll

5.0.2195.7158

105,744

21-Apr-2009

10:00

x86

Mswsock.dll

5.0.2195.7158

64,784

14-Oct-2009

00:47

x86

Tcpip.sys

5.0.2195.7162

320,528

19-Jun-2008

12:05

x86

Windows XP and Windows Server 2003 file information notes

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.

  • GDR service branches contain only fixes that are broadly released to address widespread, critical issues. QFE service branches contain hotfixes in addition to broadly released fixes.

  • In addition to the files listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.1.2600.2975

100,352

16-Aug-2006

11:58

x86

SP2

SP2GDR

Afd.sys

5.1.2600.3394

138,368

20-Jun-2008

10:44

x86

SP2

SP2GDR

Dnsapi.dll

5.1.2600.3394

148,992

20-Jun-2008

15:11

x86

SP2

SP2GDR

Mswsock.dll

5.1.2600.3394

245,248

20-Jun-2008

17:41

x86

SP2

SP2GDR

Tcpip.sys

5.1.2600.3394

360,320

20-Jun-2008

10:45

x86

SP2

SP2GDR

Tcpip6.sys

5.1.2600.3394

225,920

20-Jun-2008

07:22

x86

SP2

SP2GDR

6to4svc.dll

5.1.2600.2975

100,352

16-Aug-2006

12:08

x86

SP2

SP2QFE

Afd.sys

5.1.2600.3394

138,368

20-Jun-2008

10:44

x86

SP2

SP2QFE

Dnsapi.dll

5.1.2600.3394

147,968

20-Jun-2008

17:36

x86

SP2

SP2QFE

Mswsock.dll

5.1.2600.3394

245,248

20-Jun-2008

17:36

x86

SP2

SP2QFE

Tcpip.sys

5.1.2600.3394

360,960

20-Jun-2008

10:44

x86

SP2

SP2QFE

Tcpip6.sys

5.1.2600.3394

225,920

20-Jun-2008

09:32

x86

SP2

SP2QFE

Afd.sys

5.1.2600.5625

138,496

20-Jun-2008

11:40

x86

SP3

SP3GDR

Dnsapi.dll

5.1.2600.5625

147,968

20-Jun-2008

17:46

x86

SP3

SP3GDR

Mswsock.dll

5.1.2600.5625

245,248

20-Jun-2008

17:46

x86

SP3

SP3GDR

Tcpip.sys

5.1.2600.5625

361,600

20-Jun-2008

11:51

x86

SP3

SP3GDR

Tcpip6.sys

5.1.2600.5625

225,856

20-Jun-2008

11:08

x86

SP3

SP3GDR

Afd.sys

5.1.2600.5625

138,496

20-Jun-2008

11:48

x86

SP3

SP3QFE

Dnsapi.dll

5.1.2600.5625

147,968

20-Jun-2008

17:43

x86

SP3

SP3QFE

Mswsock.dll

5.1.2600.5625

245,248

20-Jun-2008

17:43

x86

SP3

SP3QFE

Tcpip.sys

5.1.2600.5625

361,600

20-Jun-2008

11:59

x86

SP3

SP3QFE

Tcpip6.sys

5.1.2600.5625

225,856

20-Jun-2008

11:16

x86

SP3

SP3QFE

For all supported x86-based versions of Windows Server 2003

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

99,840

16-Aug-2006

13:52

x86

SP1

SP1GDR

Afd.sys

5.2.3790.3161

150,528

20-Jun-2008

15:59

x86

SP1

SP1GDR

Dnsapi.dll

5.2.3790.3161

158,208

20-Jun-2008

19:39

x86

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

256,512

20-Jun-2008

19:39

x86

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

333,824

20-Jun-2008

15:59

x86

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

225,856

20-Jun-2008

10:13

Not applicable

SP1

SP1GDR

6to4svc.dll

5.2.3790.2771

99,840

16-Aug-2006

14:01

x86

SP1

SP1QFE

Afd.sys

5.2.3790.3161

152,576

20-Jun-2008

10:38

x86

SP1

SP1QFE

Dnsapi.dll

5.2.3790.3161

158,720

20-Jun-2008

18:52

x86

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

258,048

20-Jun-2008

18:52

x86

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

394,752

20-Jun-2008

10:38

x86

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

225,984

20-Jun-2008

10:04

Not applicable

SP1

SP1QFE

Afd.sys

5.2.3790.4318

150,528

20-Jun-2008

14:22

x86

SP2

SP2GDR

Dnsapi.dll

5.2.3790.4318

160,768

20-Jun-2008

18:19

x86

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

256,000

20-Jun-2008

18:19

x86

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

384,000

20-Jun-2008

14:22

x86

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

234,368

20-Jun-2008

13:55

Not applicable

SP2

SP2GDR

Afd.sys

5.2.3790.4318

150,528

20-Jun-2008

11:02

x86

SP2

SP2QFE

Dnsapi.dll

5.2.3790.4318

160,768

20-Jun-2008

19:39

x86

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

257,024

20-Jun-2008

18:07

x86

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

390,656

20-Jun-2008

11:01

x86

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

234,496

20-Jun-2008

10:19

Not applicable

SP2

SP2QFE

For all supported x64-based versions of Windows Server 2003 and Windows XP Professional x64 edition

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

124,416

20-Jun-2008

18:28

x64

SP1

SP1GDR

Afd.sys

5.2.3790.3161

299,008

20-Jun-2008

18:28

x64

SP1

SP1GDR

Dnsapi.dll

5.2.3790.3161

306,688

20-Jun-2008

18:28

x64

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

490,496

20-Jun-2008

18:28

x64

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

703,488

20-Jun-2008

18:28

x64

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

362,752

20-Jun-2008

18:29

x64

SP1

SP1GDR

W6to4svc.dll

5.2.3790.2771

99,840

20-Jun-2008

18:29

x86

SP1

SP1GDR\WOW

Wdnsapi.dll

5.2.3790.3161

158,208

20-Jun-2008

18:29

x86

SP1

SP1GDR\WOW

Wmswsock.dll

5.2.3790.3161

232,448

20-Jun-2008

18:29

x86

SP1

SP1GDR\WOW

6to4svc.dll

5.2.3790.2771

124,416

20-Jun-2008

18:28

x64

SP1

SP1QFE

Afd.sys

5.2.3790.3161

299,520

20-Jun-2008

18:28

x64

SP1

SP1QFE

Dnsapi.dll

5.2.3790.3161

306,688

20-Jun-2008

18:28

x64

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

491,520

20-Jun-2008

18:28

x64

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

829,952

20-Jun-2008

18:29

x64

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

363,136

20-Jun-2008

18:29

x64

SP1

SP1QFE

W6to4svc.dll

5.2.3790.2771

99,840

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Wdnsapi.dll

5.2.3790.3161

158,720

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Wmswsock.dll

5.2.3790.3161

233,472

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Afd.sys

5.2.3790.4318

291,840

21-Jun-2008

07:07

x64

SP2

SP2GDR

Dnsapi.dll

5.2.3790.4318

306,176

21-Jun-2008

07:07

x64

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

492,544

21-Jun-2008

07:07

x64

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

768,512

21-Jun-2008

07:07

x64

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

375,680

21-Jun-2008

07:07

x64

SP2

SP2GDR

Wdnsapi.dll

5.2.3790.4318

160,768

21-Jun-2008

07:07

x86

SP2

SP2GDR\WOW

Wmswsock.dll

5.2.3790.4318

233,472

21-Jun-2008

07:07

x86

SP2

SP2GDR\WOW

Afd.sys

5.2.3790.4318

292,352

20-Jun-2008

18:29

x64

SP2

SP2QFE

Dnsapi.dll

5.2.3790.4318

306,688

20-Jun-2008

18:29

x64

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

493,056

20-Jun-2008

18:29

x64

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

784,896

20-Jun-2008

18:29

x64

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

375,808

20-Jun-2008

18:29

x64

SP2

SP2QFE

Wdnsapi.dll

5.2.3790.4318

160,768

20-Jun-2008

18:30

x86

SP2

SP2QFE\WOW

Wmswsock.dll

5.2.3790.4318

234,496

20-Jun-2008

18:30

x86

SP2

SP2QFE\WOW

For all supported Itanium-based versions of Windows Server 2003

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

362,496

20-Jun-2008

18:34

IA-64

SP1

SP1GDR

Afd.sys

5.2.3790.3161

582,144

20-Jun-2008

18:34

IA-64

SP1

SP1GDR

Dnsapi.dll

5.2.3790.3161

438,272

20-Jun-2008

18:34

IA-64

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

780,800

20-Jun-2008

18:34

IA-64

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

1,116,672

20-Jun-2008

18:34

IA-64

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

736,384

20-Jun-2008

18:35

Not applicable

SP1

SP1GDR

W6to4svc.dll

5.2.3790.2771

99,840

20-Jun-2008

18:35

x86

SP1

SP1GDR\WOW

Wdnsapi.dll

5.2.3790.3161

158,208

20-Jun-2008

18:35

x86

SP1

SP1GDR\WOW

Wmswsock.dll

5.2.3790.3161

232,448

20-Jun-2008

18:35

x86

SP1

SP1GDR\WOW

6to4svc.dll

5.2.3790.2771

362,496

20-Jun-2008

18:29

IA-64

SP1

SP1QFE

Afd.sys

5.2.3790.3161

584,192

20-Jun-2008

18:29

IA-64

SP1

SP1QFE

Dnsapi.dll

5.2.3790.3161

438,272

20-Jun-2008

18:29

IA-64

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

784,896

20-Jun-2008

18:29

IA-64

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

1,308,672

20-Jun-2008

18:29

IA-64

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

737,024

20-Jun-2008

18:29

Not applicable

SP1

SP1QFE

W6to4svc.dll

5.2.3790.2771

99,840

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Wdnsapi.dll

5.2.3790.3161

158,720

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Wmswsock.dll

5.2.3790.3161

233,472

20-Jun-2008

18:29

x86

SP1

SP1QFE\WOW

Afd.sys

5.2.3790.4318

583,680

21-Jun-2008

07:04

IA-64

SP2

SP2GDR

Dnsapi.dll

5.2.3790.4318

438,272

21-Jun-2008

07:04

IA-64

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

785,408

21-Jun-2008

07:04

IA-64

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

1,287,168

21-Jun-2008

07:04

IA-64

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

763,776

21-Jun-2008

07:04

Not applicable

SP2

SP2GDR

Wdnsapi.dll

5.2.3790.4318

160,768

21-Jun-2008

07:04

x86

SP2

SP2GDR\WOW

Wmswsock.dll

5.2.3790.4318

233,472

21-Jun-2008

07:04

x86

SP2

SP2GDR\WOW

Afd.sys

5.2.3790.4318

584,192

20-Jun-2008

18:33

IA-64

SP2

SP2QFE

Dnsapi.dll

5.2.3790.4318

438,272

20-Jun-2008

18:33

IA-64

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

789,504

20-Jun-2008

18:33

IA-64

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

1,310,208

20-Jun-2008

18:34

IA-64

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

764,416

20-Jun-2008

18:34

Not applicable

SP2

SP2QFE

Wdnsapi.dll

5.2.3790.4318

160,768

20-Jun-2008

18:34

x86

SP2

SP2QFE\WOW

Wmswsock.dll

5.2.3790.4318

234,496

20-Jun-2008

18:34

x86

SP2

SP2QFE\WOW

File information (server side)

The English (United States) version of this software update installs files with the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Note that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

File name

File version

File size

Date

Time

Platform

Afd.sys

5.0.2195.7158

119,152

08-May-2008

06:08

x86

Dns.exe

5.0.2195.7162

332,048

12-Jun-2008

09:21

x86

Dnsperf.dll

5.0.2195.7157

33,552

25-Jun-2008

07:14

x86

Dnsperf.h

Not applicable

6,642

30-Apr-2008

07:49

Not applicable

Dnsperf.ini

Not applicable

11,597

30-Apr-2008

07:49

Not applicable

Msafd.dll

5.0.2195.7158

105,744

25-Jun-2008

07:14

x86

Tcpip.sys

5.0.2195.7162

320,528

18-Jun-2008

07:35

x86

Windows XP and Windows Server 2003 file information notes

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.

  • GDR service branches contain only fixes that are broadly released to address widespread, critical issues. QFE service branches contain hotfixes in addition to broadly released fixes.

  • In addition to the files listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2003

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

99,840

16-Aug-2006

13:52

x86

SP1

SP1GDR

Afd.sys

5.2.3790.3161

150,528

20-Jun-2008

15:59

x86

SP1

SP1GDR

Dns.exe

5.2.3790.3161

446,976

20-Jun-2008

09:57

x86

SP1

SP1GDR

Dnsperf.dll

5.2.3790.3161

11,776

21-Jun-2008

14:45

x86

SP1

SP1GDR

Dnsperf.h

Not applicable

6,642

26-Apr-2008

04:36

Not applicable

SP1

SP1GDR

Dnsperf.ini

Not applicable

11,597

26-Apr-2008

04:33

Not applicable

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

256,512

21-Jun-2008

14:45

x86

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

333,824

20-Jun-2008

15:59

x86

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

225,856

20-Jun-2008

10:13

Not applicable

SP1

SP1GDR

6to4svc.dll

5.2.3790.2771

99,840

16-Aug-2006

14:01

x86

SP1

SP1QFE

Afd.sys

5.2.3790.3161

152,576

20-Jun-2008

10:38

x86

SP1

SP1QFE

Dns.exe

5.2.3790.3161

448,000

20-Jun-2008

10:02

x86

SP1

SP1QFE

Dnsperf.dll

5.2.3790.3161

11,776

21-Jun-2008

14:37

x86

SP1

SP1QFE

Dnsperf.h

Not applicable

6,642

26-Apr-2008

04:36

Not applicable

SP1

SP1QFE

Dnsperf.ini

Not applicable

11,597

26-Apr-2008

04:33

Not applicable

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

258,048

21-Jun-2008

14:37

x86

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

394,752

20-Jun-2008

10:38

x86

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

225,984

20-Jun-2008

10:04

Not applicable

SP1

SP1QFE

W03a2409.dll

5.2.3790.3161

30,208

20-Jun-2008

09:56

x86

SP1

SP1QFE

Afd.sys

5.2.3790.4318

150,528

20-Jun-2008

14:22

x86

SP2

SP2GDR

Dns.exe

5.2.3790.4318

447,488

20-Jun-2008

13:38

x86

SP2

SP2GDR

Dnsperf.dll

5.2.3790.4318

11,776

21-Jun-2008

14:06

x86

SP2

SP2GDR

Dnsperf.h

Not applicable

6,642

26-Apr-2008

04:36

Not applicable

SP2

SP2GDR

Dnsperf.ini

Not applicable

11,597

26-Apr-2008

04:33

Not applicable

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

256,000

21-Jun-2008

14:06

x86

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

384,000

20-Jun-2008

14:22

x86

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

234,368

20-Jun-2008

13:55

Not applicable

SP2

SP2GDR

Afd.sys

5.2.3790.4318

150,528

20-Jun-2008

11:02

x86

SP2

SP2QFE

Dns.exe

5.2.3790.4318

448,000

20-Jun-2008

10:20

x86

SP2

SP2QFE

Dnsperf.dll

5.2.3790.4318

11,776

21-Jun-2008

14:14

x86

SP2

SP2QFE

Dnsperf.h

Not applicable

6,642

26-Apr-2008

04:36

Not applicable

SP2

SP2QFE

Dnsperf.ini

Not applicable

11,597

26-Apr-2008

04:33

Not applicable

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

257,024

21-Jun-2008

14:14

x86

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

390,656

20-Jun-2008

11:01

x86

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

234,496

20-Jun-2008

10:19

Not applicable

SP2

SP2QFE

For all supported x64-based versions of Windows Server 2003

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

124,416

21-Jun-2008

12:55

x64

SP1

SP1GDR

Afd.sys

5.2.3790.3161

299,008

21-Jun-2008

12:55

x64

SP1

SP1GDR

Dns.exe

5.2.3790.3161

767,488

21-Jun-2008

12:55

x64

SP1

SP1GDR

Dnsperf.dll

5.2.3790.3161

14,336

21-Jun-2008

12:55

x64

SP1

SP1GDR

Dnsperf.h

Not applicable

6,642

21-Jun-2008

12:55

Not applicable

SP1

SP1GDR

Dnsperf.ini

Not applicable

11,597

21-Jun-2008

12:55

Not applicable

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

490,496

21-Jun-2008

12:55

x64

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

703,488

21-Jun-2008

12:55

x64

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

362,752

21-Jun-2008

12:55

x64

SP1

SP1GDR

W6to4svc.dll

5.2.3790.2771

99,840

21-Jun-2008

12:55

x86

SP1

SP1GDR\WOW

Wdns.exe

5.2.3790.3161

446,976

21-Jun-2008

12:55

x86

SP1

SP1GDR\WOW

Wdnsperf.dll

5.2.3790.3161

11,776

21-Jun-2008

12:55

x86

SP1

SP1GDR\WOW

Wmswsock.dll

5.2.3790.3161

232,448

21-Jun-2008

12:55

x86

SP1

SP1GDR\WOW

6to4svc.dll

5.2.3790.2771

124,416

22-Jun-2008

04:55

x64

SP1

SP1QFE

Afd.sys

5.2.3790.3161

299,520

22-Jun-2008

04:55

x64

SP1

SP1QFE

Dns.exe

5.2.3790.3161

770,560

22-Jun-2008

04:55

x64

SP1

SP1QFE

Dnsperf.dll

5.2.3790.3161

14,336

22-Jun-2008

04:55

x64

SP1

SP1QFE

Dnsperf.h

Not applicable

6,642

22-Jun-2008

04:55

Not applicable

SP1

SP1QFE

Dnsperf.ini

Not applicable

11,597

22-Jun-2008

04:55

Not applicable

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

491,520

22-Jun-2008

04:55

x64

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

829,952

22-Jun-2008

04:55

x64

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

363,136

22-Jun-2008

04:55

x64

SP1

SP1QFE

W03a2409.dll

5.2.3790.3161

30,720

22-Jun-2008

04:55

x64

SP1

SP1QFE

W6to4svc.dll

5.2.3790.2771

99,840

22-Jun-2008

04:55

x86

SP1

SP1QFE\WOW

Wdns.exe

5.2.3790.3161

448,000

22-Jun-2008

04:55

x86

SP1

SP1QFE\WOW

Wdnsperf.dll

5.2.3790.3161

11,776

22-Jun-2008

04:55

x86

SP1

SP1QFE\WOW

Wmswsock.dll

5.2.3790.3161

233,472

22-Jun-2008

04:55

x86

SP1

SP1QFE\WOW

Ww03a2409.dll

5.2.3790.3161

30,208

22-Jun-2008

04:55

x86

SP1

SP1QFE\WOW

Afd.sys

5.2.3790.4318

291,840

22-Jun-2008

05:16

x64

SP2

SP2GDR

Dns.exe

5.2.3790.4318

768,512

22-Jun-2008

05:16

x64

SP2

SP2GDR

Dnsperf.dll

5.2.3790.4318

14,336

22-Jun-2008

05:16

x64

SP2

SP2GDR

Dnsperf.h

Not applicable

6,642

22-Jun-2008

05:16

Not applicable

SP2

SP2GDR

Dnsperf.ini

Not applicable

11,597

22-Jun-2008

05:16

Not applicable

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

492,544

22-Jun-2008

05:16

x64

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

768,512

22-Jun-2008

05:16

x64

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

375,680

22-Jun-2008

05:16

x64

SP2

SP2GDR

Wdnsperf.dll

5.2.3790.4318

11,776

22-Jun-2008

05:16

x86

SP2

SP2GDR\WOW

Wmswsock.dll

5.2.3790.4318

233,472

22-Jun-2008

05:16

x86

SP2

SP2GDR\WOW

Afd.sys

5.2.3790.4318

292,352

22-Jun-2008

05:16

x64

SP2

SP2QFE

Dns.exe

5.2.3790.4318

771,072

22-Jun-2008

05:16

x64

SP2

SP2QFE

Dnsperf.dll

5.2.3790.4318

14,336

22-Jun-2008

05:16

x64

SP2

SP2QFE

Dnsperf.h

Not applicable

6,642

22-Jun-2008

05:16

Not applicable

SP2

SP2QFE

Dnsperf.ini

Not applicable

11,597

22-Jun-2008

05:16

Not applicable

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

493,056

22-Jun-2008

05:16

x64

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

784,896

22-Jun-2008

05:16

x64

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

375,808

22-Jun-2008

05:16

x64

SP2

SP2QFE

Wdnsperf.dll

5.2.3790.4318

11,776

22-Jun-2008

05:16

x86

SP2

SP2QFE\WOW

Wmswsock.dll

5.2.3790.4318

234,496

22-Jun-2008

05:16

x86

SP2

SP2QFE\WOW

For all supported Itanium-based versions of Windows Server 2003

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

6to4svc.dll

5.2.3790.2771

362,496

21-Jun-2008

12:53

IA-64

SP1

SP1GDR

Afd.sys

5.2.3790.3161

582,144

21-Jun-2008

12:53

IA-64

SP1

SP1GDR

Dns.exe

5.2.3790.3161

1,136,640

21-Jun-2008

12:53

IA-64

SP1

SP1GDR

Dnsperf.dll

5.2.3790.3161

26,624

21-Jun-2008

12:54

IA-64

SP1

SP1GDR

Dnsperf.h

Not applicable

6,642

21-Jun-2008

12:54

Not applicable

SP1

SP1GDR

Dnsperf.ini

Not applicable

11,597

21-Jun-2008

12:54

Not applicable

SP1

SP1GDR

Mswsock.dll

5.2.3790.3161

780,800

21-Jun-2008

12:54

IA-64

SP1

SP1GDR

Tcpip.sys

5.2.3790.3161

1,116,672

21-Jun-2008

12:54

IA-64

SP1

SP1GDR

Tcpip6.sys

5.2.3790.3161

736,384

21-Jun-2008

12:54

Not applicable

SP1

SP1GDR

W6to4svc.dll

5.2.3790.2771

99,840

21-Jun-2008

12:54

x86

SP1

SP1GDR\WOW

Wdns.exe

5.2.3790.3161

446,976

21-Jun-2008

12:54

x86

SP1

SP1GDR\WOW

Wdnsperf.dll

5.2.3790.3161

11,776

21-Jun-2008

12:54

x86

SP1

SP1GDR\WOW

Wmswsock.dll

5.2.3790.3161

232,448

21-Jun-2008

12:54

x86

SP1

SP1GDR\WOW

6to4svc.dll

5.2.3790.2771

362,496

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Afd.sys

5.2.3790.3161

584,192

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Dns.exe

5.2.3790.3161

1,140,736

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Dnsperf.dll

5.2.3790.3161

26,624

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Dnsperf.h

Not applicable

6,642

21-Jun-2008

12:55

Not applicable

SP1

SP1QFE

Dnsperf.ini

Not applicable

11,597

21-Jun-2008

12:55

Not applicable

SP1

SP1QFE

Mswsock.dll

5.2.3790.3161

784,896

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Tcpip.sys

5.2.3790.3161

1,308,672

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

Tcpip6.sys

5.2.3790.3161

737,024

21-Jun-2008

12:55

Not applicable

SP1

SP1QFE

W03a2409.dll

5.2.3790.3161

29,184

21-Jun-2008

12:55

IA-64

SP1

SP1QFE

W6to4svc.dll

5.2.3790.2771

99,840

21-Jun-2008

12:55

x86

SP1

SP1QFE\WOW

Wdns.exe

5.2.3790.3161

448,000

21-Jun-2008

12:55

x86

SP1

SP1QFE\WOW

Wdnsperf.dll

5.2.3790.3161

11,776

21-Jun-2008

12:55

x86

SP1

SP1QFE\WOW

Wmswsock.dll

5.2.3790.3161

233,472

21-Jun-2008

12:55

x86

SP1

SP1QFE\WOW

Ww03a2409.dll

5.2.3790.3161

30,208

21-Jun-2008

12:55

x86

SP1

SP1QFE\WOW

Afd.sys

5.2.3790.4318

583,680

22-Jun-2008

05:01

IA-64

SP2

SP2GDR

Dns.exe

5.2.3790.4318

1,139,200

22-Jun-2008

05:01

IA-64

SP2

SP2GDR

Dnsperf.dll

5.2.3790.4318

26,624

22-Jun-2008

05:01

IA-64

SP2

SP2GDR

Dnsperf.h

Not applicable

6,642

22-Jun-2008

05:01

Not applicable

SP2

SP2GDR

Dnsperf.ini

Not applicable

11,597

22-Jun-2008

05:01

Not applicable

SP2

SP2GDR

Mswsock.dll

5.2.3790.4318

785,408

22-Jun-2008

05:01

IA-64

SP2

SP2GDR

Tcpip.sys

5.2.3790.4318

1,287,168

22-Jun-2008

05:01

IA-64

SP2

SP2GDR

Tcpip6.sys

5.2.3790.4318

763,776

22-Jun-2008

05:01

Not applicable

SP2

SP2GDR

Wdnsperf.dll

5.2.3790.4318

11,776

22-Jun-2008

05:01

x86

SP2

SP2GDR\WOW

Wmswsock.dll

5.2.3790.4318

233,472

22-Jun-2008

05:01

x86

SP2

SP2GDR\WOW

Afd.sys

5.2.3790.4318

584,192

21-Jun-2008

12:53

IA-64

SP2

SP2QFE

Dns.exe

5.2.3790.4318

1,140,736

21-Jun-2008

12:53

IA-64

SP2

SP2QFE

Dnsperf.dll

5.2.3790.4318

26,624

21-Jun-2008

12:53

IA-64

SP2

SP2QFE

Dnsperf.h

Not applicable

6,642

21-Jun-2008

12:53

Not applicable

SP2

SP2QFE

Dnsperf.ini

Not applicable

11,597

21-Jun-2008

12:53

Not applicable

SP2

SP2QFE

Mswsock.dll

5.2.3790.4318

789,504

21-Jun-2008

12:53

IA-64

SP2

SP2QFE

Tcpip.sys

5.2.3790.4318

1,310,208

21-Jun-2008

12:53

IA-64

SP2

SP2QFE

Tcpip6.sys

5.2.3790.4318

764,416

21-Jun-2008

12:53

Not applicable

SP2

SP2QFE

Wdnsperf.dll

5.2.3790.4318

11,776

21-Jun-2008

12:53

x86

SP2

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×