ITSD Computing and Communications Services News
December, 2002
  Windows Users - Current Security Patches and Hot Fixes Now Available

If you have a Windows NT, Windows 2000, or Windows XP system, it needs to be running the most recent Service Pack (SP) if it is to be secure. Go to the Run Menu and enter "winver" to determine what Service Pack (SP) "fix level" you are running. Your system needs to be running the most recent SP (plus any cumulative post-SP hot fixes -- see below) if it is to be secure. Here are the most recent Service Packs:

Windows NT - SP6a (Note: you will usually not see the "a" when you do a "winver')
Windows 2000 - SP3
Windows XP - SP1

Go to Lab's software download page and scroll down to the "Security" section to download the most recent SP for your system. When you are through doing this, download the post-SP hot fixes for your particular system. You can obtain them from the same section of the download page. The only possible complication are the Windows 2000 post-SP hot fixes -- there is one for the server version of Windows 2000, another for the workstation version and you will need to download the appropriate version. Opening the menu that appears when you go to Start will also tell you whether you have a server or a workstation.

Once you download an SP, double click on the icon, and follow the instructions. It doesn't take long to install an SP. The same is true of post-SP hot fixes.

Note: W9X and WMe systems have few built-in security mechanisms, and there are no SPs for these systems. The Computer Protection Program recommends that if you want better security, you should upgrade to Windows XP Professional.

However, users of Windows 95, 98 and Me users should install a Microsoft hot fix that prevents people from being able to enter only part of a share password to gain access to a share, attackers may be able to connect to your system's hard drive and read or possibly even modify or erase your files. Download and install the appropriate hot fix for your system so that your system is not vulnerable to this serious threat.

Microsoft Windows 95

Microsoft Windows 98 and 98 Second Edition

Microsoft Windows Me