Potential Patch Problem with MS06-025

FYI…

- http://isc.sans.org/diary.php?storyid=1419
Last Updated: 2006-06-15 18:59:11 UTC
"We have received some reports of a potential issue with MS06-025. Here is a snippet of what appears to be the problem as it was reported to us:

"We received couple of calls that users are not able to dial up after applying MS06-025* (KB911280). I verified this on a test machine and it looks like it breaks dial up. We have some scripts that need to be run in order to authenticate the user properly after the dial up connection is established.
It looks like the patch prevents scripts from running at all. Even when I turned on the terminal window (in interactive logon and scripting) I can't log in manually at all. After the connection is established I can see the Username prompt in the terminal window but I can't enter any data. Uninstalling the patch fixes this."

Microsoft has confirmed they are getting some reports of this and have established a case number. If you are having similar problems, call Microsoft for free support, 1-(866) PC-SAFETY, and reference case number SOX060615700008."

* http://www.microsoft.com/technet/security/…n/MS06-025.mspx

FYI…

- http://isc.sans.org/diary.php?compare=1&storyid;=1423
Last Updated: 2006-06-17 20:55:03 UTC
"…UPDATE: We received an email from one of our readers today indicating that the MS06-025 update is causing problems with the iPassConnect program. I would recommend if you are using the iPassConnect program then test with the update before rolling the update out."

- http://blogs.technet.com/msrc/archive/2006/06/17/436882.aspx

- http://support.microsoft.com/kb/911280
Last Review: June 17, 2006
Revision: 1.1 …
"Known Issues
• An issue has been confirmed involving dial-up connections which use the terminal window or dial-up scripting. Dial-up terminal windows or scripting is an older technology rarely used by most modern dial-up connections. If dial-up scripting is used in a connection, the connection may stop responding. This does not affect any dial-up connections that do not use dial-up scripting. This issue may affect direct dial connections to a corporate or university network or to some ISPs (Internet Service Providers). Microsoft is working on developing and testing a revision to this update which will address this issue. If you need to use these dial-up scripting or terminal window features do not install security update MS06-025 (KB911280) until the revised version is available. More information on dial-up scripting can be found at http://www.microsoft.com/technet/archive/w…work/xns10.mspx . Virtual private network (VPN) connections are not affected by this issue; dial-up scripting is not supported in VPN scenarios…"

FYI…

- http://www.microsoft.com/technet/security/…n/ms06-025.mspx
"Updated: June 19, 2006 …
V1.1 (June 19, 2006): FAQ and Vulnerability Details sections updated to provide clarification on affected RASMAN component. Caveats section updated to include known issues."

- http://support.microsoft.com/kb/911280
Last Review: June 20, 2006
Revision: 3.0
"…If you must use dial-up scripting or terminal window features, do not install security update 911280 (MS06-025) until the revised version is available*…"

*(Currently still -un-available.)

FYI…

MS06-025 updated
- http://www.techweb.com/article/printableAr…_section=700028
June 28, 2006
"…re-released late Tuesday with refreshed patches. Not everyone will need to install this updated update…"

> http://www.microsoft.com/technet/security/…n/ms06-025.mspx
Updated: June 27, 2006
"…V2.0 (June 27, 2006): Microsoft updated this bulletin and the associated security updates to address the issues affecting customers identified in Microsoft Knowledge Base Article 911280* …"
* http://support.microsoft.com/kb/911280

EDIT/ADD:
>>> http://www.microsoft.com/downloads/results…&DisplayLang;=en