Just as predicted, news media this week seems to be covering the MSIE gopher root exploit with a new focus on Microsoft and their real problems with security, not just the latest hole. One company even goes as far to say that they 'cleaned up Microsoft's mess, once again'. With 18+ un-patched vulnerabilities in line for a fresh MS-fix, this may be the straw that breaks the camel?s back.

Microsoft has once again updated its popular IM program MSN Messenger. As usual its hard to determine what's new in this one, but I assume that the latest security fixes have been applied to it. Download from the links below:

MSN Messenger for Windows XP

MSN Messenger for Windows 9x/Me/2K/NT

This patch addresses the vulnerability discussed in Microsoft Security Bulletin MS02-022
Version - 4.2
Release Date - 11 June 2002
Operating System - Windows 95 & 98, NT 4.0 & 2000, Windows Me, Win XP

Just saw this report @ Theregister.co.uk!

Here we go again? Shortly after the beta of WinXP Service Pack 1 was released, locking out installations using leaked activation keys, a workaround with what appears to be a replacement key began circulating on IRC. We can therefore look forward to a repeat of the Windows Product Activation wars that were waged during the original XP beta, as crack and block alternate until the product actually ships.

At which point, barring the invention of an entirely new and uncrackable system, the final crack will be unveiled. At the moment, the SP1 beta won't install on systems using at least one widely-leaked activation key. The workaround circulating appears to include a replacement key, but given that this could be easily blocked by Microsoft in future builds, its main importance is that it explains a procedure for deactivating the system and entering a new corporate key.

.NET Framework ASP.NET Session State Security Hotfix: When working with Microsoft ASP.NET, a component of the Microsoft .NET Framework provides for session state management through a variety of modes. One such mode, called StateServer, stores session state information in a separate running process that can run on either the same machine as the ASP.NET-based application or on a different machine. An unchecked buffer in one of the routines handles the processing of cookies in StateServer mode, resulting in a security vulnerability.

Windows XP Patch: Windows Management Instrumentation Cannot Register Permanent Event Consumer with Dynamic Classes: This update addresses the "Windows Management Instrumentation Cannot Register Permanent Event Consumer with Dynamic Class" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q319322. Download now to allow registration of permanent consumers

Windows XP Patch: WMI AccessCheck Receives Local Administrator's SID: This update addresses the "WMI AccessCheck Receives Local Administrator's SID" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q320678. Download now to avoid using the Administrator SID with WMI AccessCheck Method.

Platform SDK Redistributable: COM+ Java Runtime Support: This download contains the redistributable files for the COM+ Java Runtime support.

Extensiontech.net have snagged 12 screenshots of Windows 2000 Service Pack 3!



I did a fresh install of Windows 2000, and just did the service pack after that. I was relieved not to have 40 updates needed at the Windows Update Site. IE Updates, DirectX 8.1 and Media Player 7 showed as still available for download, and they all downloaded and installed without a hitch. As far as I know, this Service Pack doesn't expire. It also is about 123 megs. I'm sure this is, or will be floating around the net shortly...

The great folks over at irc.BetasOnline.com - #BETAS have created a fully-functioning DirectX9 Beta1 Setup with NO timebomb... vorte[x] from #Betas writes, "Ok after being sick and having GxV shoot over updates to the installers like 3892839238 times, we are happy to release the DirectX 9.0 Beta 1 Prepatched packages for Windows 9x/Me and Windows XP. You can find these files to download on #betas @ irc.betasonline.com. Don't worry the Windows 2000 / .Net packages will be released shortly. We're just touching up some things. Final screenshots and Download Hit Read More:"

Just saw this @ Xp-erience.org:

Yes you heard right. DIVX players were known to be in the works when suddenly an early version appeared, written by d7o3g4q from the Xboxhacker.net BBS. The first version was not bootable on our Xbox but we got an updated version this morning and this one boots fine on our Xtender chipped Xbox. The player is not yet finished, but it shows that the Xbox is perfectly capable of playing back DIVX movies...

Heavy_K's Polygamy Patch will change your Messenger to allow you to use multiple instances. That means that you can log in with 2 different accounts at the same time.

Version 4.7.0031 of MSN Messenger is required. that the latest MSN Messenger Ripped and Leaked from the XP SP1 Beta 1050!

I've just spotted this on on IB Elite :-) This Windows feature notifies you when critical updates are available for your computer. This feature replaces Critical Update Notification if it is already installed. Critical Update Notification will no longer offer critical updates. Download now to receive notifications of critical Windows updates. Press Read More for further info.

Bink @ WindowsXP.nu got his hands on the Service Pack 1 beta build 1050 and gave it to IEXBeta.

While the download is only 1.7 megs, I am sure you will have to download another 100 megs before you have it installed. Hit read more for the download link!

Neowin.net have got their hands on a collection of screenshots regarding the recently released Service Pack 1 (SP1) for Windows XP.

As suspected by many, it deals with some anti-trust issues; they give the option to customize aspects of windows such as the messenging, media and internet elements and my friend bink; he has informed me of a few new developments. On his site, he shows you can install SP1 on the corporate edition or with your dubiously aquired license numbers. Also, he is offering the ripped version of MSN messenger from SP1 - 4.7. It also has lots more screenshots for you to peruse there.

This update addresses the "WMI AccessCheck Receives Local Administrator's SID" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q320678. Download now to avoid using the Administrator SID with WMI AccessCheck Method. Read More. BTW, this is our 5000th news post!!!

This update addresses the "Windows Management Instrumentation Cannot Register Permanent Event Consumer with Dynamic Class" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q319322. Download now to allow registration of permanent consumers. Read More...

When you try to open a file through a network share by using the SMB protocol, the file may take a long time to open. This problem can occur when a Windows XP client also has the file open and owns the oplock to the file. It does not respond to the oplock break request, and because of this, the server waits until the request times out and the other client has to wait for that. Download now to prevent a possible request time out.

After you connect to a Web site, you may receive an error message. After you receive the error message, you cannot use Search Companion to search for files or folders, or to search the Internet. The options to search for files or folders, or to search the Internet, are unavailable. Download now to prevent the error message from occurring.

REDMOND, Wash. -- June 3, 2002 -- Microsoft Corp. today announced the availability of Microsoft® Office v. X Service Release 1 (Office v. X SR 1) and MSN® Messenger 3.0 for Mac. The performance improvements, updates, new features and fixes featured across the entire suite of Office v. X SR 1 applications -- including Word X, Excel X, PowerPoint® X and Entourage? X -- make them must-have downloads for all users of Office v. X who want the best and most seamless computing experience possible. MSN Messenger 3.0 for Mac is a greatly improved version of Microsoft's popular instant messaging application developed for Mac OS X, with several new features and improved reliability and performance. Also announced today, Microsoft will provide, in a separate but related offering, a component to enable synchronization between Palm operating system-based handheld devices and Entourage X as a free* download starting July 15.

I saw this @ Neowin and this is what they said: This is much smaller than the previous leak, which weighed in at approx 30mb, the installer is just 205kb, and the total download is normally 9mb or under. Update: Added 2 new download links Click on Read More... for a download link

It looks like SP1 XP has been released internally. Beta testing is said to start today. And english and german versions are scheduled for a release on August 14th, 2002. We thank Steven Bink, a Windows 2000 MCSE from Amsterdam, The Netherlands for the heads up. Read more... (but take it with a grain of salt)

New beta of Service Pack 3 of Windows 2000 is available for download. This version corrects many bugs and brings in more: "Configure Programs". Update: Someone submitted news and this is what he said:
I just managed to log onto the swamped ftp server containing the latest SP3 package for Win2K, and guess what - it's empty Click on Read More... for a download link to the Service Pack.