|
|
Forum Thread: Access 2000, FrontPage 2000 and Outlook 2000 still being incorrec...
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Secunia PSI - Feedback and Questions
| erwaxman
| Access 2000, FrontPage 2000 and Outlook 2000 still being incorrec...
|
|
|
by erwaxman on 12th Dec, 2008 01:59
|
Posts: 39
User Since: 23rd Dec, 2007
Secunia System Score: 97%
Location: York, PA, US |
Every time I boot up my computer I get a warning from PSI that Access 2000, FrontPage 2000 and Outlook 2000 are insecure and need to be patched. The patches that allegedly need to be installed are KB946986 and KB947361. Both patches were installed on 03/10/2008 and are still installed. When I try to reinstall them, I can't, because they're already installed. PSI is detecting that all three programs are version 9.0.0.3821, but none of them is that version.
This problem has gone unresolved for many weeks now. When is Secunia going to address it? |
|
|
| baumgrenze
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by baumgrenze on 15th Dec, 2008 18:15
|
Posts: 14
User Since: 10th Jul, 2008
Secunia System Score: N/A
Location: N/A |
Of these 3 applications, I have only Outlook 2000 installed as part of Office 2000. I have encountered the essentially the same problem for this application.
I tried downloading the patch "office2000-KB946986" and was told that the path to which I wanted to send it already contained a copy of the patch. I overwrote that file with a new download from MS. I opened the patch exe in download manager and attempted to install the patch. An error message tells me that office2000-KB946986 has already been applied. I went back to Secunia Personal Software Inspector and rescanned my machine. I was again told that my copy of Office 2000 Outlook needs critical patching.
Could it be that there is an earlier patch that is missing? That it is a critical step in successfully applying this patch? That it somehow gets detected as a failure to apply this patch instead of an earlier one?
I do not use Outlook (or IE any more than is absolutely necessary) because I prefer Mozilla SeaMonkey. Should I be concerned that this application is detected by Secunia as 'not secure?'
I saved screen dumps of the attempt to install the patch and the subsequent detection by Secunia that the program is not yet patched. I can forward them to a Secunia expert via email if that is desirable.
Thanks,
baumgrenze |
|
|
| erwaxman
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by erwaxman on 15th Dec, 2008 18:31, last edited on 15th Dec, 2008 18:31
|
Posts: 39
User Since: 23rd Dec, 2007
Secunia System Score: 97%
Location: York, PA, US |
baumgrenze:
For you the simplest solution would be to uninstall Outlook 2000, as you don't use it. But if you don't want to uninstall it, you needn't worry, it's not insecure. The problem lies with PSI, not with Outlook 2000 or the other Office programs that are affected.
You are not missing an earlier patch. My system is fully patched, and so are the systems of others whose Office programs are being flagged as insecure. |
|
|
| BigDave_39
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by BigDave_39 on 15th Dec, 2008 20:58
|
Posts: 175
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: Washington, DC, US |
I really don't think this is a psi problem, my outlook is correctly presented as being patched.
My version according to the psi is "9.0.0.8968" which according to this Microsoft bulletin is correct:
http://www.microsoft.com/technet/security/Bulletin...
See "Update Information" - "Security Update Deployment" - "Outlook 2000 (all editions)" - "File Information" -- mine matches "Outllib.dll"
I hope this can help put the blame on ms where it belongs IMHO.
--
Big Dave |
|
|
| erwaxman
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by erwaxman on 15th Dec, 2008 21:58, last edited on 15th Dec, 2008 21:58
|
Posts: 39
User Since: 23rd Dec, 2007
Secunia System Score: 97%
Location: York, PA, US |
Big Dave:
PSI is detecting all three Office 2000 programs as 9.0.0.3821, even though none of them is 9.0.0.3821. Outlook 2000 is 9.0.0.8968, just like yours. Access 2000 is 9.0.8968. FrontPage 2000 is 4.0.2.6625. Outllib.dll is also 9.0.0.8968.
PSI is detecting the versions of my other Office 2000 programs correctly.
From other posts that I've seen, PSI is also incorrectly identifying various Office 2003 and Office 2007 programs.
Microsoft does not seem to be responsible for causing this problem. |
|
|
| baumgrenze
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by baumgrenze on 16th Dec, 2008 06:40
|
Posts: 14
User Since: 10th Jul, 2008
Secunia System Score: N/A
Location: N/A |
Thank you all for your input.
PSI shows that it finds Outlook 2000 9.0.0.6627. I tried to follow through on the suggestion that I uninstall Outlook 2000. I am running under XP Pro SP2. When I go to Add/Remove Programs I find only an entry for MS Office 2000. I opened that and found the options to Repair, Add/Remove Features, and Remove Office. I chose Add/Remove and found myself in a menu where I could 'update' Office 2000. There seems to be no option to remove an installed feature!
A check with Belarc shows only that I have Microsoft Office 2000 Version 9.0.8974 installed.
I don't think I have the patience to uninstall Office 2000 and then reinstall it using the option to pick and choose. I don't think I should have to, yet this appears to be the only way to remove Outlook (if, in fact, I can.) I seem to remember being told that it is an integral part of the OS, or at least of IE.
I have to confess that I'm totally confused about the Service Pack status of my XP Pro. My machine is fairly new, March 2008, and came, at my request, with XP Pro installed. Belarc shows about 2.5 pages of hotfixes and updates to XP Pro, including some marked SP3 and SP4. I've tried to control the update process, but every few months, one evening when I shut down there is an annoying shield next to the shut down process and shutting down takes a while as MS updates my OS.
Thanks again,
baumgrenze. |
|
|
| erwaxman
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by erwaxman on 16th Dec, 2008 07:24, last edited on 16th Dec, 2008 07:24
|
Posts: 39
User Since: 23rd Dec, 2007
Secunia System Score: 97%
Location: York, PA, US |
on 16th Dec, 2008 06:40, baumgrenze wrote:
When I go to Add/Remove Programs I find only an entry for MS Office 2000. I opened that and found the options to Repair, Add/Remove Features, and Remove Office. I chose Add/Remove and found myself in a menu where I could 'update' Office 2000. There seems to be no option to remove an installed feature!
If you want to use Office programs other than Outlook, you should choose "Add/Remove" and then "update" Office by uninstalling Outlook. It's not that difficult to do. Simply change the Outlook entries to make them unavailable.
If you want to uninstall all of the Office programs, you should choose "Remove Office."
Outlook is an Office program. It is not part of the Windows OS, nor is it part of IE. Outlook Express IS a part of IE, but it is not the same program as Outlook. |
|
|
| baumgrenze
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by baumgrenze on 16th Dec, 2008 18:54
|
Posts: 14
User Since: 10th Jul, 2008
Secunia System Score: N/A
Location: N/A |
Thank you erwaxman!
I don't need to tell you that the process worked. I can only observe that "not available" seems like remarkably arcane newspeak for "remove this item from service."
Thanks again,
baumgrenze |
|
|
| erwaxman
| RE: Access 2000, FrontPage 2000 and Outlook 2000 still being inco...
|
|
|
by erwaxman on 16th Dec, 2008 20:32
|
Posts: 39
User Since: 23rd Dec, 2007
Secunia System Score: 97%
Location: York, PA, US |
on 16th Dec, 2008 18:54, baumgrenze wrote:
Thank you erwaxman!
I don't need to tell you that the process worked. I can only observe that "not available" seems like remarkably arcane newspeak for "remove this item from service."
Thanks again,
baumgrenze
You're quite welcome. In Microspeak, "not available" also means "don't put this item into service in the first place." The intention is to give the user maximum flexibility as to which elements of Office are enabled and which aren't. The wording may be a bit arcane, but, as you noted, the process works. |
|
|
|
