|
|
|
 Commerce Server 2000 Q322273 Security FixBrief DescriptionMicrosoft has released patches for Commerce Server 2002 and Commerce Server 2000 that include updates for the following security vulnerabilities: Profile Service Buffer Overrun OWC Package Buffer OverrunOWC Package Command ExecutionNew Variant of the ISAPI Filter Buffer On This PageQuick Details
OverviewMicrosoft has released patches for Commerce Server 2002 and Commerce Server 2000 that include updates for the following security vulnerabilities: Profile Service Buffer Overrun OWC Package Buffer Overrun OWC Package Command Execution New Variant of the ISAPI Filter Buffer Overrun System Requirements
Microsoft Commerce Server 2000 This patch is also available for other languages: * French * German * Japanese Required: Commerce Server 2000 SP2 InstructionsAfter you click on the Download Link, you will see a dialog with the question "What would you like to do with this file?" If you choose to "Run this program from it's current location" it will automatically install the program to your computer. If you choose "Save this program to a disk" you will be prompted for a location to save the file to. Once saved you will need to open the Q322273_EN.exe. file to run the program. Additional InformationMuch more detailed information regarding these vulnerabilities is located in the Microsoft Knowledge Base Article located in the related link section. A small recap on each vulnerability is listed here:
Profile Service Buffer Overrun: This vulnerability results because the Profile Service contains an unchecked buffer in a section of code that handles certain types of API calls.
OWC Package Buffer Overrun: This is a buffer overrun : Although Commerce Server does rely on Internet Information Services (IIS) for its base Web services, the AuthFilter ISAPI filter is only available as part of Commerce Server. Customers using IIS are at no risk from this vulnerability. in the Office Web Components (OWC) package installer that is used by Commerce Server.
OWC Package Command Execution: This is a vulnerability in the Office Web Components (OWC) package installer that is used by Commerce Server.
New Variant of the ISAPI Filter Buffer Overrun: Although Commerce Server does rely on Internet Information Services (IIS) for its base Web services, the AuthFilter ISAPI filter is only available as part of Commerce Server. Customers using IIS are at no risk from this vulnerability. |
||||||||||||||||||
