Microsoft Windows NT Server Home   All Products  |   Support  |   Search  | Home  
  Windows Home Pages  |   Downloads  |   Support  |   Sitemap  |
Enter a search phrase:
Windows NT Server 4.0 | Downloads

Security Update, July 17, 2000

Read Me First

This update resolves two security vulnerabilities in Internet Information Server (IIS) 4.0, the "Absent Directory Browser Argument" vulnerability and the "File Fragment Reading via .HTR" vulnerability. Installing this update will prevent a malicious user from exploiting these vulnerabilities to slow performance on an affected Web server or, under very specific conditions, obtain the source code of certain types of files on a Web server. The referenced .HTR files are scripts that Windows NT® users can employ to change passwords, and that administrators can use to perform a variety of password administration functions. Neither of these vulnerabilities allows data to be changed, added, or deleted on the server, nor do they allow administrative control over the affected computer.

For more information on this vulnerability, please visit Microsoft Security Bulletin MS00-044.

Note This update also resolves the vulnerabilities addressed in Microsoft Security Bulletin MS00-031.

How to download and install
Note Please save your work and close all open programs before installing.

Note If a Compaq DIGITAL Alpha download is not available on this page, it can be requested from Product Support Services. Please see the Microsoft Knowledge Base (KB) Article q267559.

  1. Click the x86 (Intel) or Compaq DIGITAL Alpha link above to download the version of the update that applies to your computer.
  2. Select your language from the drop-down list provided on the following page and click Next.
  3. On the last page, click Download Now and follow the instructions on your screen.

Note Some languages also include a symbols package for this update. Recommended for system administrators and other advanced users, the symbols package is used for diagnosing Windows NT 4.0 system problems and is not required for proper operation of your computer.

How to use
Restart your computer to complete the installation.

How to uninstall

  1. Click Start, point to Settings and click Control Panel.
  2. Double-click Add/Remove Programs.
  3. Select Windows 4.0 Hotfix [See q267559 for more information] and click Add/Remove to uninstall.

 Last Updated: Monday, February 12, 2001
 © 2001 Microsoft Corporation. All rights reserved. Terms of Use.