Microsoft Windows NT Server Home   All Products  |   Support  |   Search  |   microsoft.com Home  
Microsoft
  Windows Home Pages  |   Downloads  |   Support  |   Sitemap  |
 
Enter a search phrase:
 
Windows NT Server 4.0 | Downloads

Security Update, February 7, 2001

Select your language from the drop-down list below, and click Next.

      



Read Me First

This update resolves the "NTLMSSP Privilege Elevation" security vulnerability present in Windows NT® 4.0, and is discussed in Microsoft Security Bulletin MS01-008. Download now to prevent a malicious user from gaining administrative access to your computer.

This vulnerability exists because the NTLM Security Support Provider (NTLMSSP), which handles authentication requests associated with the NTLM Protocol, allows local user accounts to initiate a specially formed request to execute code by using LocalSystem security privileges. (These security privileges are equal to or greater than those of a local administrator account.) With these privileges, a malicious user with the ability to log on to a computer by using valid user credentials could exploit the vulnerability and send a request to the NTLMSSP that contains specially formatted commands to gain complete control over the computer.

For more information about this vulnerability, please read Microsoft Security Bulletin MS01-008.

System Requirements

This update applies to:

  • Microsoft Windows NT 4.0 Workstation
  • Microsoft Windows NT 4.0 Server
  • Microsoft Windows NT 4.0 Server, Enterprise Edition

How to download and install

  1. Select your language from the drop-down list above.
  2. Click Next.
  3. On the following page, click Download Now.
  4. Do one of the following:
    • To start the installation immediately, select Run this Program from its Current Location.
    • To copy the download to your computer for installation at a later time, select Save this Program to Disk.
  5. Click OK.

How to use

Restart your computer to complete the installation.

How to uninstall

  1. Click Start, point to Settings and click Control Panel.
  2. Double-click Add/Remove Programs.
  3. Select Windows NT 4.0 Hotfix (Pre-SP7) [See Q280119 for more information], and click Add/Remove to uninstall.


 Last Updated: Wednesday, February 28, 2001
 © 2001 Microsoft Corporation. All rights reserved. Terms of Use.