MS12-017: Vulnerability in DNS Server could allow denial of service: March 13, 2012

Applies To
Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Standard Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Standard Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Datacenter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Microsoft Windows Server 2003 Service Pack 2

INTRODUCTION

Microsoft has released security bulletin MS12-017. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update

            
Help protect your PC from viruses and from malware:

Virus Solution and Security Center Help installing updates:

Support for Microsoft Update Security solutions for IT professionals:

TechNet Security Troubleshooting and Support Local support according to your country:

International Support

More Information

Known issues with this security update

  • Symptoms
    After you install this security update, the DNS Server service may not start, or you may receive an access violation error message shortly after the service starts, or after the operating system starts.

    Cause
    This issue may occur if DNS is configured to have a CNAME and a SOA record that both exist for the "@" record. The "@" record identifies the root of a DNS zone. This can frequently be identified in the DNS Manager as a record with the "(same as parent folder)" name. The SOA and NS records are allowed in this folder. RFC 2181 describes name uniqueness checks for CNAME records. According to RFC 2181, the CNAME may not exist in the “same as parent folder" ("@") of a zone.

    Workaround
    To avoid this issue, identify and remove the "@" CNAME record that is causing the issue from the misconfigured zone before you install security update 2647170.

     To help identify problematic zones, run the following sample PowerShell script. PowerShell is installed by default in Windows Server 2008 R2. PowerShell must be installed as a feature in Windows Server 2008 and must be manually installed in Windows Server 2003.

    $count = 0
    $var = get-wmiobject -query "select * from win32_service where name = 'dns'"
    if ($var -ne $null)
    {
      if ($var.state.tolower() -eq "running")
      {
        [array] $global:badcnamedomains = $null
        $var = get-wmiobject -namespace "root\microsoftdns" -query "select * from microsoftdns_zone"
        if ($var -ne $null)
        {
          foreach ($var2 in $var)
          {
            $query = "select * from microsoftdns_cnametype where containername = '" + $var2.name + "'"
            $var3 = get-wmiobject -namespace "root\microsoftdns" -query $query | where {$_.ownername -eq $var2.name}
            if ($var3 -ne $null)
            {
              $count += 1
              $global:badcnamedomains += $var3.domainname
            }
          }
        }
        else
        {
          write-host "No zones returned"
        }
      }
    }
    if ($count -gt 0)
    {
      write-host "Total number of zones found: $count"
      write-host "The zones are:"
      write-host $global:badcnamedomains
    }
    elseif ($count -eq 0)
    {
      write-host "No zones found with the issue"
    }
    $count = $null
    $global:badcnamedomains = $null

    Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure. However, they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.

    To run the sample PowerShell script, copy the text, and then paste it into a PowerShell Command Prompt window that is running with administrative permissions. The script will identify CNAME records that conflict with SOA records in locally held DNS zones. To delete the CNAME records that do not comply with RFC 2181, type the following command at command prompt, and then press Enter:
    DNSCMD /recorddelete DNS zone name @ cname
    To resolve the problem if the access violation error has already occurred
    If you already have installed security update 2647170 before removing the offending CNAME record, you may have to roll back to the previously installed version of DNS. Then, remove the conflicting @ CNAME record from the misconfigured zone, and then reinstall security update 2647170.

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Server 2003 file information

  • The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2003

File name File version File size Date Time Hashes Platform SP requirement Service branch
Afd.sys 5.2.3790.4949 291,840 10-Feb-2012 20:15 MD5: 886C37D055020D0D02C35AC5B84E76AB
SHA1: A523C54235D964DA17513338BDC9A0E6E3AAD5F5
x64 SP2 SP2GDR
Dns.exe 5.2.3790.4957 779,264 10-Feb-2012 20:15 MD5: AF2785422B498345592CBD768DE0FE76
SHA1: C813D869F25AE37500CECE289286E85F8DFC8E88
x64 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4460 14,336 10-Feb-2012 20:15 MD5: 979DEE0E02C3E5301F80429DAC3ECFE9
SHA1: F48FB903280F8715EF277B9AF39AEED77242F1C7
x64 SP2 SP2GDR
Dnsperf.h Not Applicable 6,642 10-Feb-2012 20:15 Not Applicable Not Applicable SP2 SP2GDR
Dnsperf.ini Not Applicable 11,597 10-Feb-2012 20:15 Not Applicable Not Applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 492,544 10-Feb-2012 20:15 MD5: BA13C3C32A69DC37653C9543E065950E
SHA1: A8663E473C9C4C754CB82FF5D1CBBC07223158CC
x64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4573 781,824 10-Feb-2012 20:15 MD5: 63BDEDB15B038C45B94079CEF3147A8D
SHA1: F7C02B7137E9F8D83963C99AB522D40BB00D895A
x64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4662 394,112 10-Feb-2012 20:15 MD5: 52CE5A6707C29DF8662B6067C217B557
SHA1: 0B5EB48A0BDCA7B1A2523F67814B5B0492731F24
x64 SP2 SP2GDR
W03a3409.dll 5.2.3790.4715 45,056 10-Feb-2012 20:15 MD5: E8C2109974C72B40EE2402DD312FA9B0
SHA1: FD28493D4AA13846095B25CBCA840C211F742E6E
x64 SP2 SP2GDR
Wdnsperf.dll 5.2.3790.4460 11,776 10-Feb-2012 20:15 MD5: FE7CC7555D1573CBD17DDFB1B7084FE9
SHA1: C3F89ACA67E10327AABEB1B9343EEEAFDB64C9E3
x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 10-Feb-2012 20:15 MD5: 8CFB662B5EECFABBFBC7F554B55CE82C
SHA1: 493311AC0E943E3A69A28E1EAD66EAA9E3CFA0C9
x86 SP2 SP2GDR\WOW
Ww03a3409.dll 5.2.3790.4715 44,544 10-Feb-2012 20:15 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4949 292,352 10-Feb-2012 20:10 MD5: E01A5EFA2ADA5F3ACFE877DCA449D34D
SHA1: 97B98444FE1283328362ACA990D0F234775A7748
x64 SP2 SP2QFE
Dns.exe 5.2.3790.4957 782,336 10-Feb-2012 20:10 MD5: AEAC83CF6419464CB7799B61542EC3C4
SHA1: F9A5E7DED7E87447E48E750009C4853EB151F6EF
x64 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4460 14,336 10-Feb-2012 20:10 MD5: 1D6AB3D2ED7DB4642758C2406E7032A6
SHA1: 986E526D42A6D6FB54117D43AD124C2329F5ADB6
x64 SP2 SP2QFE
Dnsperf.h Not Applicable 6,642 10-Feb-2012 20:10 Not Applicable Not Applicable SP2 SP2QFE
Dnsperf.ini Not Applicable 11,597 10-Feb-2012 20:10 Not Applicable Not Applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 493,056 10-Feb-2012 20:10 MD5: E3978EF56F355B258DE579477D253C88
SHA1: F74D927AC447C140A08102DD10C196F44C582198
x64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4573 798,208 10-Feb-2012 20:10 MD5: 1FA5687AF73447576A8A4F1EBD932B92
SHA1: 343589A99E949F660809C94DB29C664A80C453C5
x64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4662 396,032 10-Feb-2012 20:10 MD5: 56E8B54E82FA4DBD6565AE3254D8F0C8
SHA1: 9F80EEBC70AAA6326DFCFC22F8E0EE69664231D2
x64 SP2 SP2QFE
W03a3409.dll 5.2.3790.4715 45,056 10-Feb-2012 20:10 MD5: E8C2109974C72B40EE2402DD312FA9B0
SHA1: FD28493D4AA13846095B25CBCA840C211F742E6E
x64 SP2 SP2QFE
Wdnsperf.dll 5.2.3790.4460 11,776 10-Feb-2012 20:10 MD5: 766A9B6BAB60DD9C40EEDC900F41AEED
SHA1: 754E2781FC65BFB7298D78E2EADE8E98F52C8B29
x86 SP2 SP2QFE\WOW
Wmswsock.dll 5.2.3790.4318 234,496 10-Feb-2012 20:10 MD5: 39596C2F33818F3AC1154F4D0BF0C06B
SHA1: 5CDCAF86A3C6FC904144459D7A9B6E1077FF7BAA
x86 SP2 SP2QFE\WOW
Ww03a3409.dll 5.2.3790.4715 44,544 10-Feb-2012 20:10 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2QFE\WOW

For all supported x86-based versions of Windows Server 2003

File name File version File size Date Time Hashes Platform SP requirement Service branch
Afd.sys 5.2.3790.4949 150,528 27-Dec-2011 14:13 MD5: 317E75D96065AC6AF5EF8857CE2E399B
SHA1: AF1521D181ADBBB398E1482FE75C6F56E2CF1245
x86 SP2 SP2GDR
Dns.exe 5.2.3790.4957 450,560 30-Jan-2012 12:39 MD5: A2023CCDF44AFDB476AD310A42444DEC
SHA1: 350A6878451BAEDDFFD31CEBCD9EE7F385D343BF
x86 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4460 11,776 17-Feb-2009 08:26 MD5: FE7CC7555D1573CBD17DDFB1B7084FE9
SHA1: C3F89ACA67E10327AABEB1B9343EEEAFDB64C9E3
x86 SP2 SP2GDR
Dnsperf.h Not Applicable 6,642 07-Jul-2010 18:42 Not Applicable Not Applicable SP2 SP2GDR
Dnsperf.ini Not Applicable 11,597 07-Jul-2010 18:42 Not Applicable Not Applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 256,000 20-Jun-2008 18:32 MD5: 9C0BF64484E9D297CB3E96DC22765A82
SHA1: 123AEB783FE74088BF8A5B3FA72E7A6AD054D73F
x86 SP2 SP2GDR
Tcpip.sys 5.2.3790.4573 393,216 15-Aug-2009 09:57 MD5: 238DC2B879D1B37B91F8D5D44F3815D3
SHA1: A4ED2B54B9EA2456EFAEFC0AD564BC28E3BEE8B1
x86 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4662 247,360 10-Feb-2010 12:48 Not Applicable Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4715 44,544 09-Jul-2010 04:25 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2GDR
Afd.sys 5.2.3790.4949 150,528 27-Dec-2011 14:27 MD5: 1352E45B12732172655C445A57E20991
SHA1: 842BFF2F6464B5D18198B372C19F8FB6C045D74B
x86 SP2 SP2QFE
Dns.exe 5.2.3790.4957 451,584 30-Jan-2012 12:39 MD5: 2A1614828BE1E1558D06D3B2D6BEAF9B
SHA1: 2BA440EC64C85765AEF74E0A08792653C75990DE
x86 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4460 11,776 17-Feb-2009 08:12 MD5: 766A9B6BAB60DD9C40EEDC900F41AEED
SHA1: 754E2781FC65BFB7298D78E2EADE8E98F52C8B29
x86 SP2 SP2QFE
Dnsperf.h Not Applicable 6,642 07-Jul-2010 18:42 Not Applicable Not Applicable SP2 SP2QFE
Dnsperf.ini Not Applicable 11,597 07-Jul-2010 18:42 Not Applicable Not Applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 257,024 20-Jun-2008 19:01 MD5: 2FCC6D31B7CED67E659B7C629CEC89D4
SHA1: F1A304F0C3879C1DC070D0316E6DC47DDAC8D9AD
x86 SP2 SP2QFE
Tcpip.sys 5.2.3790.4573 400,896 15-Aug-2009 08:27 MD5: 2617E35A208F1570D6928C13E63019FF
SHA1: FECA0DAD34273FB61E21FB0473977BD1CB5264CF
x86 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4662 248,640 10-Feb-2010 15:51 Not Applicable Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4715 44,544 09-Jul-2010 04:25 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2QFE

For all supported IA-64-based versions of Windows Server 2003

File name File version File size Date Time Hashes Platform SP requirement Service branch
Afd.sys 5.2.3790.4949 584,192 10-Feb-2012 20:13 MD5: 158E1519BF9D46AE74163609EE542946
SHA1: 7D658C4005F60C5B51CF454ACB4AAAE71A14C8F4
IA-64 SP2 SP2GDR
Dns.exe 5.2.3790.4957 1,147,904 10-Feb-2012 20:13 MD5: 618F313EF216D7545B2174AEBEA41089
SHA1: 0508EB70A2B7F99F7D627AD1E5A32F0D3B903223
IA-64 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4460 26,624 10-Feb-2012 20:13 MD5: C703A18E1DE106387EAF04C79FA8ECBC
SHA1: 6C75FA6F962296536C7A1F25376C17BD53388DAF
IA-64 SP2 SP2GDR
Dnsperf.h Not Applicable 6,642 10-Feb-2012 20:13 Not Applicable Not Applicable SP2 SP2GDR
Dnsperf.ini Not Applicable 11,597 10-Feb-2012 20:13 Not Applicable Not Applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 785,408 10-Feb-2012 20:13 MD5: 2D2663ECA310A3C5FF762643B9A1BD21
SHA1: 47A2F0DBD43CAC24ED68803E1FCE3F41330C3D61
IA-64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4573 1,313,280 10-Feb-2012 20:13 MD5: F17E7A33B3BE16B83D1FED0620F771B9
SHA1: A2431105DAD5BA752D1E6135765BDB217D18BC57
IA-64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4662 798,976 10-Feb-2012 20:13 Not Applicable Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4715 43,520 10-Feb-2012 20:13 MD5: 9D115CCF9F48E7E82DDA9EB9C5E7C51C
SHA1: AFFBCBEF7EE61A4E542C39D65DA0407625C129DA
IA-64 SP2 SP2GDR
Wdnsperf.dll 5.2.3790.4460 11,776 10-Feb-2012 20:13 MD5: FE7CC7555D1573CBD17DDFB1B7084FE9
SHA1: C3F89ACA67E10327AABEB1B9343EEEAFDB64C9E3
x86 SP2 SP2GDR\WOW
Wmswsock.dll 5.2.3790.4318 233,472 10-Feb-2012 20:13 MD5: 8CFB662B5EECFABBFBC7F554B55CE82C
SHA1: 493311AC0E943E3A69A28E1EAD66EAA9E3CFA0C9
x86 SP2 SP2GDR\WOW
Ww03a3409.dll 5.2.3790.4715 44,544 10-Feb-2012 20:13 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2GDR\WOW
Afd.sys 5.2.3790.4949 584,192 10-Feb-2012 20:10 MD5: DD7E66790C721D39010698636CB2CAD3
SHA1: 0CCDB5C578E9D2A0EC9427128F1AD831866FD98E
IA-64 SP2 SP2QFE
Dns.exe 5.2.3790.4957 1,152,512 10-Feb-2012 20:10 MD5: 9914DC97A4358A861A0B19A85C61B0FB
SHA1: 02CFF0E4EC0A5F14A13E6CD4D1968E8F1256FE93
IA-64 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4460 26,624 10-Feb-2012 20:10 MD5: FE872DEA4A532540FB6F68465E196F1F
SHA1: DE9C79342E2BFD5517419E81A024AE6340420392
IA-64 SP2 SP2QFE
Dnsperf.h Not Applicable 6,642 10-Feb-2012 20:10 Not Applicable Not Applicable SP2 SP2QFE
Dnsperf.ini Not Applicable 11,597 10-Feb-2012 20:10 Not Applicable Not Applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 789,504 10-Feb-2012 20:10 MD5: F810367C167505F0AE0009155E330A8E
SHA1: E8DB0D4D8A3548932BBC3F49456476DE3683B635
IA-64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4573 1,336,320 10-Feb-2012 20:10 MD5: EB2560367D0027D53CCA314AA202FC47
SHA1: 2562786897D6CEB56D7BD863557C2587863FE0C8
IA-64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4662 802,688 10-Feb-2012 20:10 Not Applicable Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4715 43,520 10-Feb-2012 20:10 MD5: 9D115CCF9F48E7E82DDA9EB9C5E7C51C
SHA1: AFFBCBEF7EE61A4E542C39D65DA0407625C129DA
IA-64 SP2 SP2QFE
Wdnsperf.dll 5.2.3790.4460 11,776 10-Feb-2012 20:10 MD5: 766A9B6BAB60DD9C40EEDC900F41AEED
SHA1: 754E2781FC65BFB7298D78E2EADE8E98F52C8B29
x86 SP2 SP2QFE\WOW
Wmswsock.dll 5.2.3790.4318 234,496 10-Feb-2012 20:10 MD5: 39596C2F33818F3AC1154F4D0BF0C06B
SHA1: 5CDCAF86A3C6FC904144459D7A9B6E1077FF7BAA
x86 SP2 SP2QFE\WOW
Ww03a3409.dll 5.2.3790.4715 44,544 10-Feb-2012 20:10 MD5: BF65F758647A0E356ED93B5CE316E657
SHA1: 0EC7C16D19C10475815F40B6C4DD5378B11B095B
x86 SP2 SP2QFE\WOW

Windows Server 2008 file information

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.0.6002.18xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 GDR
    6.0.6002.22xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008

File name File version File size Date Time Hashes Platform
Cache.dns Not Applicable 3,179 16-Apr-2008 00:31 Not Applicable Not Applicable
Dns.exe 6.0.6002.18557 510,976 23-Dec-2011 13:41 MD5: 8319D91CFE1157CAE9831AA74A7CA43F
SHA1: 8FDB59398F23D25CD37D89148CC4E409B0AE449C
x86
Dnsserver.events.xml Not Applicable 609 16-Apr-2008 00:31 Not Applicable Not Applicable
Cache.dns Not Applicable 3,179 09-Sep-2011 11:25 Not Applicable Not Applicable
Dns.exe 6.0.6002.22763 511,488 26-Dec-2011 15:33 MD5: 3A9821172FCB425A9BF17327EAC69CF1
SHA1: A7FCA712175903DEB8DDBAA0EF048357664BE594
x86
Dnsserver.events.xml Not Applicable 609 09-Sep-2011 11:25 Not Applicable Not Applicable

For all supported x64-based versions of Windows Server 2008

File name File version File size Date Time Hashes Platform
Cache.dns Not Applicable 3,179 03-Sep-2008 18:33 Not Applicable Not Applicable
Dns.exe 6.0.6002.18557 639,488 23-Dec-2011 14:03 MD5: E79BD15D16ABBE5CE575B5ACC5B0B979
SHA1: 171822DC92907D8DE0302DA31AF06E77D8537B71
x64
Dnsserver.events.xml Not Applicable 609 03-Sep-2008 18:33 Not Applicable Not Applicable
Cache.dns Not Applicable 3,179 15-Nov-2011 15:04 Not Applicable Not Applicable
Dns.exe 6.0.6002.22763 639,488 26-Dec-2011 14:36 MD5: 0B78950171728CA83B0E6C048B994792
SHA1: 0F2F7519043E2274985A325C32FB29B6FFB59429
x64
Dnsserver.events.xml Not Applicable 609 15-Nov-2011 15:04 Not Applicable Not Applicable

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

File name Package_1_for_kb2647170_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 2,069
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_1_for_kb2647170~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 2,790
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 2,069
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 2,790
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,519
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,542
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,418
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,437
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,523
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,546
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,426
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File version Not Applicable
File size 1,445
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Update-bf.mum
File version Not Applicable
File size 2,192
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name X86_612da3469bca4913862d3fa1c1346a20_31bf3856ad364e35_6.0.6002.22763_none_67e944b575237e27.manifest
File version Not Applicable
File size 706
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name X86_70dad00520638f5f4cc9bdae1ce9cb18_31bf3856ad364e35_6.0.6002.18557_none_b0dd66634205941d.manifest
File version Not Applicable
File size 706
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name X86_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6002.18557_none_4fbd58f7d3dd147d.manifest
File version Not Applicable
File size 163,376
Date (UTC) 23-Dec-2011
Time (UTC) 16:18
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name X86_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6002.22763_none_50382694ed066803.manifest
File version Not Applicable
File size 163,376
Date (UTC) 26-Dec-2011
Time (UTC) 17:50
SHA-1 hash Not Applicable
MD5 hash Not Applicable

Additional files for all supported x64-based versions of Windows Server 2008

File name Amd64_aa83d15ae1c29eeaa605478385849b72_31bf3856ad364e35_6.0.6002.18557_none_ec1f85f3b610aa65.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_fb2930fabf35143695111953225a1444_31bf3856ad364e35_6.0.6002.22763_none_7d7b24661726689f.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6002.18557_none_abdbf47b8c3a85b3.manifest
File version Not Applicable
File size 163,418
Date (UTC) 23-Dec-2011
Time (UTC) 16:34
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6002.22763_none_ac56c218a563d939.manifest
File version Not Applicable
File size 163,418
Date (UTC) 26-Dec-2011
Time (UTC) 20:02
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_1_for_kb2647170_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 2,083
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_1_for_kb2647170~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 2,808
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 2,083
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 2,808
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,529
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,552
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,426
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sc~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,445
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,533
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,556
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,434
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
File version Not Applicable
File size 1,453
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Update-bf.mum
File version Not Applicable
File size 2,208
Date (UTC) 27-Dec-2011
Time (UTC) 12:52
SHA-1 hash Not Applicable
MD5 hash Not Applicable

Windows Server 2008 R2 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.7600.16xxx Windows Server 2008 R2 RTM GDR
    6.1.7600.20xxx Windows Server 2008 R2 RTM LDR
    6.1.7601.17xxx Windows Server 2008 R2 SP1 GDR
    6.1.7601.21xxx Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2008 R2

File name File version File size Date Time Hashes Platform
Cache.dns Not Applicable 3,198 10-Jun-2009 20:31 Not Applicable Not Applicable
Dns.exe 6.1.7600.16936 696,320 27-Dec-2011 02:12 MD5: 0B678FF3EA556F50408E6AEA0D7D4FB1
SHA1: C75A11430EE05CB9022AF0801CC44D54904EB7FA
x64
Dnsserver.events.xml Not Applicable 609 10-Jun-2009 20:31 Not Applicable Not Applicable
Cache.dns Not Applicable 3,198 10-Jun-2009 20:31 Not Applicable Not Applicable
Dns.exe 6.1.7600.21114 697,856 27-Dec-2011 02:26 MD5: 7427B8AE06D3CCA3855F0A4C7D4F6F29
SHA1: 897FF3FFCAF5725BC5BA600A66EEA212CD40D611
x64
Dnsserver.events.xml Not Applicable 609 10-Jun-2009 20:31 Not Applicable Not Applicable
Cache.dns Not Applicable 3,198 05-Nov-2010 01:52 Not Applicable Not Applicable
Dns.exe 6.1.7601.17750 696,832 26-Dec-2011 06:45 MD5: AAAF242737F26627774A4CD55CD85FCE
SHA1: 929EB11CFA2294ABAE1EA219576569DA19F638ED
x64
Dnsserver.events.xml Not Applicable 609 05-Nov-2010 01:52 Not Applicable Not Applicable
Cache.dns Not Applicable 3,198 05-Nov-2010 01:52 Not Applicable Not Applicable
Dns.exe 6.1.7601.21885 698,368 27-Dec-2011 02:00 MD5: 715AC4616955EB08B8647B3A3676398F
SHA1: B02ED9F9B656EC5B4E381B5549B3C00EBEE85B43
x64
Dnsserver.events.xml Not Applicable 609 05-Nov-2010 01:52 Not Applicable Not Applicable

Additional file information for Windows Server 2008 R2

Additional files for all supported x64-based versions of Windows Server 2008 R2

File name Amd64_0418a9e851f2e8355558119424223cde_31bf3856ad364e35_6.1.7601.21885_none_0c6904fa38783dfe.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_1ff69a9d0b7604b47b79d6cce2553c11_31bf3856ad364e35_6.1.7600.16936_none_a8f688d7cc7d7db1.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_22d8117e0675b08ba77d9276fc5befea_31bf3856ad364e35_6.1.7601.17750_none_2fbd693859aa2518.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_6902a3cc40fca6f5f3704a43de83d553_31bf3856ad364e35_6.1.7600.21114_none_045293e7e2801ca3.manifest
File version Not Applicable
File size 710
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.1.7600.16936_none_aa31f266f01c1c3e.manifest
File version Not Applicable
File size 158,131
Date (UTC) 27-Dec-2011
Time (UTC) 02:38
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.1.7600.21114_none_aacf0698092b84ba.manifest
File version Not Applicable
File size 158,131
Date (UTC) 27-Dec-2011
Time (UTC) 02:58
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.1.7601.17750_none_abfcadd8ed582802.manifest
File version Not Applicable
File size 158,131
Date (UTC) 26-Dec-2011
Time (UTC) 07:18
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.1.7601.21885_none_ac6adc5206899a52.manifest
File version Not Applicable
File size 158,131
Date (UTC) 27-Dec-2011
Time (UTC) 02:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_1_for_kb2647170_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 2,005
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_1_for_kb2647170~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 3,146
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 2,417
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_2_for_kb2647170~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 2,726
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_rtm_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 1,656
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_rtm~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 1,679
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sp1_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 1,656
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Package_for_kb2647170_sp1~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not Applicable
File size 1,679
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable
File name Update-bf.mum
File version Not Applicable
File size 2,334
Date (UTC) 27-Dec-2011
Time (UTC) 12:25
SHA-1 hash Not Applicable
MD5 hash Not Applicable