MS10-014 977290 Security Update for Kerberos

[Richard Berg]

I have successfully deployed MS10-014 977290 Security Update for Kerberos to
Windows 2K devices. It still shows up as a vulnerability. What is it
checking for?

Richard Berg
Information & Telecommunication Systems Director
Catholic Charities
of the Archdiocese of Milwaukee, Inc.
(414) 769-3534

_____________________________________________________________

[Shaun Pond]

Richard,

for W2kSP4, it's system32\kdcsvc.dll version (not file version) >=
5.00.2195.7361

--

Shaun Pond

[Richard Berg]

Shaun,

Thank you for the reply.

That file is not currently in the system32 directory. In fact it is not on
the c: drive at all, other than I find 5.00.2195.7053 in
$NtUninstallKB977290$ and an older version in another NtUninstall file.

Did this patch intend to uninstall the old and replace it with
5.00.2195.7361?

What was the way to force a download for manual patch install?

Rick Berg

[Richard Berg]

I am re-caching it. Will see if that makes a difference.

Rick Berg

[Richard Berg]

Shaun,

The successful deployment after re-cache had no effect. kdcsvc.dll is still
not in system32.

[Shaun Pond]

Richard,

I confirm (just tested it myself) - ticket 100216-000010 raised (quoted
here to enable me to tie the ticket to this thread)

--

Shaun Pond

[Richard Berg]

Thank you.

Rick

[Shaun Pond]

Richard,

it's not supposed to apply to W2K _Professional_ - Lumension will be
updating this, and it will then disappear as a vulnerability for these
machines.

--

Shaun Pond

[Richard Berg]

Ok,

I will disable.

Thanks

Rick Berg

[Shaun Pond]

Richard,

OK, I'll let you know when they tell me it's been fixed...

--

Shaun Pond

[Richard Berg]

Thanks