Microsoft has released a security patch to Microsoft
FrontPage 2002 Server Extensions from Microsoft. This security patch offers the
highest level of stability and the highest level of enhanced security that is
available for FrontPage 2002 Server Extensions. This security patch fixes an
issue in FrontPage 2002 Server Extensions that could allow an attacker to send
a specially-formed request that could cause a temporary denial of
service.
This article describes how to download and how to install the
FrontPage 2002 Server Extensions Security Patch: KB813380.
This
security patch was first included in Office XP Service Pack 3 (SP3) for
SharePoint Team Services.
For more information about the latest
service pack for Office XP Service Pack 3 (SP3) for SharePoint Team
Services, click the following article number to view the article in the Microsoft Knowledge Base:
833845Â
(http://kbalertz.com/Feedback.aspx?kbNumber=833845/
)
Overview of Office XP Service Pack 3 for SharePoint Team Services
How to download and how to install the security patch
Note Before you install the security patch, make sure that you meet
both of the following conditions:
- Log on to your computer with an account that has
administrative permissions.
- Stop all services that are related to FrontPage 2002 Server
Extensions.
Note If you do not stop all services that are related to the FrontPage
2002 Server Extensions, or if the file that you want to update is in use, you
are prompted to restart your computer after you install the security
patch.
The
following file is available for download from the Microsoft Download
Center:
Collapse this imageExpand this image
Release Date: November 11, 2003
For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591Â
(http://kbalertz.com/Feedback.aspx?kbNumber=119591/
)
How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
When you are prompted to download or to save
the file, click
Save this Program to Disk, and then save the
file to your desktop. To install the security patch, double-click the file that
you downloaded to your desktop, and then follow the instructions for the
installation.
Note After you install the security patch, you cannot remove it.
How to determine whether the security patch is installed
The security patch contains updated versions of the following
files:
File name Version
-------------------------------
Eula.txt 0.00.00.0000
Fp30reg.dll 10.00.4205.0000
FPcheck1003.exe 0.00.00.0000
Fp5amsft.dll 10.00.4803.0000
Fp5Areg.dll 10.00.4205.0000
Fp5Awel.dll 10.00.4803.0000
List of issues that are fixed by the security patch
The FrontPage 2002 Server Extensions Security Patch: KB813380
fixes the following issues:
- Specially-formed request could cause a temporary denial of
service.
- Pagehits XML file is not generated on the server that has
usage analysis configured.
- Application error when you upgrade to Windows Server 2003
if SharePoint Team Server is pre-installed.
- List tag attribute is removed when a page is an included
page.
- File with no relevance to any Office product
exists.
Specially-formed request could cause a temporary denial of service
An attacker may be able to send a specially formed request that
could cause a temporary denial of service.
Note This fix is also included in Microsoft Office XP Service Pack 2
(SP-2). The steps that are described in this article permit users to install
this fix without having to install Office XP SP-2.
Pagehits XML file is not generated on the server that has Usage Analysis configured
When you set up Usage Analysis on your server, and when you run
the command-line tool to generate the report, the _x_pagehits.xml file may not
be generated as you expect.
Application error when you upgrade to Windows Server 2003 if SharePoint Team Server is pre-installed
You install SharePoint Team Server on Windows Server 2003, or you
install upgrades from Windows 2000 Server with SharePoint Team Server, and then
you install FrontPage 2002 Server Extensions from Windows Server 2003. As a
result, the baseline of the Fp5awel.dll file is not correct, and the SharePoint
Team Server functionality is disrupted.
List tag attribute is removed when a page is an Included Page
When you include a page that contains attributes inside the
<LI> tag, and the page is inserted as an Included Page in another Web
page, FrontPage may remove all the attributes in the <LI> tags.
File with no relevance to any Office product exists
The Fp5areg.dll file exists in the 50\bin directory. The
Fp5areg.dll file has no relevance to any Office product.