标题: [注意]Exchange Server 中的漏洞可能允许远程执行代码 [打印本页] 作者: 钉子 时间: 2005-4-25 15:14 标题: [注意]Exchange Server 中的漏洞可能允许远程执行代码 4月18日，微软安全中心发布了2005年4月漏洞安全公告：MS05-021危害等级为“严重”，请广大用户尽快到微软官方网站下载微软最新补丁。<br>
<br>
编号：MS05-021<br>
名称：Exchange Server 中的漏洞可能允许远程执行代码<br>
KB编号： 894549<br>
等级：严重<br>
<br>
Exchange Server 漏洞描述：<br>
<br>
Microsoft Exchange Server 中存在远程代码执行漏洞，该漏洞使攻击者能够连接至 Exchange 服务器的 SMTP 端口并发出特制的命令，该命令可能导致拒绝服务或使攻击者可以在 SMTP 服务的安全上下文中肆意运行*意程序。<br>
<br>
我们建议用户立即安装此更新。<br>
<br>
详细介绍：<br>
<a target=_blank href=http://www.5dmail.net/html/2005-4-25/2005425111400.htm>http://www.5dmail.net/html/2005-4-25/2005425111400.htm</a>作者: 5dszj 时间: 2005-5-9 10:57 标题: re:谢谢钉子提醒，可是我下载了此补丁，也安装... 谢谢钉子提醒，可是我下载了此补丁，也安装了SP3 和 Exchange 2000 Post-Service Pack 3 (SP3) 汇总修补程序， 在安装此补丁时提醒我不能继续安装，因为她需要的一些补丁没有安装， LOG 的提示如下：<br>
0.141: ================================================================================<br>
0.141: 2005/05/09 10:10:10.765 (local)<br>
0.141: d:\39ee81ffcb3d09278940\update\update.exe (version 6.1.22.4)<br>
0.156: DoInstallation: GetProcAddress(InitializeCustomizationDLL) Returned: 0x7f <br>
0.172: Hotfix started with following command line: <br>
0.203: CreateUserInterface: GetProcAddress for DefineInstallCustomUI failed: 0x7f<br>
0.203: Exec Rollup.AndOp.Section: Result ValueName RollupMajorVersion Not Found For Key SOFTWARE\Microsoft\Exchange\Setup<br>
0.203: Fist Condition in Rollup.AndOp.Section Failed<br>
0.203: Condition Check for Line 1 of PreRequisite returned FALSE <br>
0.203: Setup encountered an error: Setup cannot continue because one or more pre-requisites required to install Security Update for Exchange 2000 Server (KB894549) failed. For More details check the Log File KB894549.log<br>
0.203: Setup cannot continue because one or more pre-requisites required to install Security Update for Exchange 2000 Server (KB894549) failed. For More details check the Log File KB894549.log<br>
17.375: Message displayed to the user: Setup cannot continue because one or more pre-requisites required to install Security Update for Exchange 2000 Server (KB894549) failed. For More details check the Log File KB894549.log<br>
17.375: User Input: OK<br>
17.375: Update.exe extended error code = 0xf0f4<br>
17.375: Update.exe return code was masked to 0x643 for MSI custom action compliance.<br>