I think within the reading of Microsoft's link: http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS 03-007.asp there is an area where they state that all Windows 2000 Datacenter Server, Advanced Server, Server and Professional computers need the patch.
Those are the ones affected, yes, because they include IIS (which includes WebDAV). So anyone running those OS's needs to investigate the patch. But, I have yet to see anything but FUD ("Fear, Uncertainty, Doubt") saying that it is needed for people who do not have IIS running on the server. Just http://www.ntbugtraq.com/default.asp?sid=1&pid=47&aid=74 , which is from an authoritative source, but doesn't say anything other than "Please believe me, really, lots of people are going to want this patch!".
Although it would be great if everyone running Windows 2000 installs this patch, it would also be great to know *why* it is needed. Right now, there is just a rumor that it goes beyond IIS/WebDAV.
Also I believe there are undisclosed, as yet, further problems with the ntdll.dll library.
That's the rumor, but it's just rumor right now. Earlier this week, the U.S. Government was telling its citizens not to give credence to rumors. :)
A rumor of a problem with the ntdll.dll library does nothing to say *why* all Windows 2000 servers need to upgrade. The underlying assumption is that there is a TCP/IP flaw, but nobody is even rumoring that (except me, I guess, by suggesting it).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
