Here's our Windows NT Tip for.. June 22, 1999
Click Here to see a complete list of all of our previously released Tips!
More SP5 Fixes
Since the release of NT 4.0 Service Pack 5 we told you about the first Service Pack 5 Hotfix a short time later. As always, the list of hotfixes continues to grow. There are now five hotfixes available including:

  • NetDDE-fix - When a remote client in a DDE conversation with a server running on Windows NT4.0 Service Pack 4 sends WM_DDE_TERMINATE to the server, Netdde.exe fails to relay the server's WM_DDE_TERMINATE response back to the remote client. In addition to causing the client to never receive WM_DDE_TERMINATE, this also has the undesirable effect of leaving child windows orphaned.

  • RAS-fix - A specially malformed phonebook entry may be used to exploit a security vulnerability on a computer that has the Microsoft Remote Access Service (RAS) client software installed. A user with the proper permissions can abuse this vulnerability to run a program and cause a denial of service attack or privilege escalation attack on the RAS client computer.

  • RASPassword-fix - When you use the Dial-Up Networking client software for Microsoft RAS to connect to a server, a dialogue box requests the user's User ID and password for the server. In the same dialogue box is the Save Password check box, which is intended to provide the user with the option to cache their security credentials if desired. However, the implemented client functionality actually caches the user's credentials regardless of whether the check box is selected or not.

  • RRASPassword-fix - When you have Routing and Remote Access Service for Windows NT 4.0 installed on your computer and you are using the Dial-Up Networking client software to connect to a server, a dialogue box requests the user's User ID and password for the server. In the same dialogue box is the Save Password check box, which is intended to provide the user with the option to cache their security credentials if desired. However, the implemented client functionality actually caches the user's credentials regardless of whether the check box is selected or not.

  • Winhlp32-fix - the first hot-fix for Windows NT 4.0 Service Pack 5 (SP5), which apparently fixes a problem with WinHelp, though there is no online documentation as of yet. See our previous tip, the first Service Pack 5 Hotfix.

You can find all of the Post-SP5 hotfixes on the Microsoft FTP server at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/.