Re: Networking Bug in Hotfix KBB885250

From: Steve Winograd [MVP] (winograd_at_pobox.com)
Date: 02/23/05 

Date: Tue, 22 Feb 2005 20:36:53 -0700

In article <A83B5DCA-9106-4CCF-953A-AFC34F8E2AF9@microsoft.com>,
"James" <James@discussions.microsoft.com> wrote:
>I discovered the fix to my problem on an XP networked system: uninstall
>Hotfix KBB88520. If you are experiencing a networked XP Pro & Home system
>where all was well with the network and you could see all files, etc. on the
>XP Pro system until you installed XP SP2 & the 13 "critical" hotfixes, then
>you MUST uninstall KBB885250. NOTHING ELSE WORKS AT ALL - period. I am an
>expert computer user with 15 years networking experience and no matter what
>you try there is no other solution. Thx Mr. Gates.

Wow, I'm sorry that the hotfix gave you so much trouble. I've seen
another report saying that it caused problems between Windows
networking and SAMBA. However, that report said that XP SP2 clients
seem unaffected and that the problem is only on XP SP1 clients.

KB885250 is installed on my four XP computers as of 2/11/2005, and
networking is working fine on all of them. I wonder why we got such
different results from it.

The hotfix patches a Server Message Block (SMB) vulnerability. By
default, Windows XP use NetBIOS over TCP/IP for file and printer
sharing Have you disabled NetBIOS over TCP/IP, which would make the
system use SMB instead?

The "Vulnerability Details" section of this web page gives some ways
to get protection from the vulnerability without using the hotfix:

Microsoft Security Bulletin MS05-011
Vulnerability in Server Message Block Could Allow Remote Code
Execution (885250)
http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx 

-- 
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)
Please post any reply as a follow-up message in the news group
for everyone to see.  I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.
Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com