DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2493987 - Last Review: May 11, 2012 - Revision: 2.0

On This Page

INTRODUCTION

Microsoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update (http://support.microsoft.com/ph/6527)

Security solutions for IT professionals: TechNet Security Troubleshooting and Support (http://technet.microsoft.com/security/bb980617.aspx)

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center (http://support.microsoft.com/contactus/cu_sc_virsec_master)

Local support according to your country: International Support (http://support.microsoft.com/common/international.aspx)

Known issues with this security update

  • Known issue 1

    Symptom
    If the SharePoint Products and Technologies Configuration Wizard does not finish its task, SharePoint may be left in an inconsistent state. You may be unable to browse the Central Administration or SharePoint site, and you may receive one of the following error messages:

    Error message 1

    Server Error: http://go.microsoft.com/fwlink?LinkID=96177

    Error message 2

    HTTP 404 Not Found

    Error message 3

    Cannot connect to the configuration database

    Resolution

    For more information about how to resolve this issue, click the following article number to view the article in the Microsoft Knowledge Base:
    944267  (http://support.microsoft.com/kb/944267/ ) How to troubleshoot common errors that occur when you run the SharePoint Products and Technologies Configuration Wizard on a computer that is running Windows SharePoint Services 3.0 or SharePoint Server 2007
  • Known issue 2

    Symptom

    Users are prompted for authentication when they try to browse a SharePoint site. Windows Server 2003 SP1 and Windows Server 2008 include a loopback check security feature that helps prevent reflection attacks on your computer. Therefore, authentication fails if the fully qualified domain name (FQDN) or the custom host header that you use does not match the local computer name.

    Workaround

    There are two methods to work around this issue. Use one of the following methods, as appropriate for your situation.

    Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
    322756  (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows

    Method 1: Specify host names (the preferred method for NTLM authentication)

    To specify the host names that are mapped to the loopback address and that can connect to websites on your computer, follow these steps:
    1. Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
      281308  (http://support.microsoft.com/kb/281308/ ) Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
    2. Click Start, click Run, type regedit, and then click OK.
    3. In Registry Editor, locate and then click the following registry key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
    4. Right-click MSV1_0, point to New, and then click Multi-String Value.
    5. Type BackConnectionHostNames, and then press ENTER.
    6. Right-click BackConnectionHostNames, and then click Modify.
    7. In the Value data box, type the host name or the host names for the sites that are on the local computer, and then click OK.
    8. Exit Registry Editor, and then restart the IISAdmin service.

    Method 2: Disable the loopback check (the less-recommended method)

    Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

    The second method is to disable the loopback check by setting the DisableLoopbackCheck registry entry.

    To set the DisableLoopbackCheck registry entry, follow these steps:
    1. Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
      281308  (http://support.microsoft.com/kb/281308/ ) Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
    2. Click Start, click Run, type regedit, and then click OK.
    3. In Registry Editor, locate and then click the following registry key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    4. Right-click Lsa, point to New, and then click DWORD Value.
    5. Type DisableLoopbackCheck, and then press ENTER.
    6. Right-click DisableLoopbackCheck, and then click Modify.
    7. In the Value data box, type 1, and then click OK.
    8. Exit Registry Editor, and then restart your computer.
    For more information, click the following article number to view the article in the Microsoft Knowledge Base:
    926642  (http://support.microsoft.com/kb/926642/ ) Error message when you try to access a server locally by using its FQDN or its CNAME alias after you install Windows Server 2003 Service Pack 1: "Access denied" or "No network provider accepted the given network path"
  • Known issue 3

    After you install this security update on a Windows Small Business Server-based computer that is running Windows SharePoint Services 3.0, in some scenarios, the SharePoint Companyweb and Central Administration pages may not be available. For more information about this issue and about how to resolve the issue, visit the following Microsoft TechNet webpage:
    http://blogs.technet.com/b/sbs/archive/2010/06/18/companyweb-and-sharepoint-central-admin-not-accessible-after-installing-kb983444.aspx (http://blogs.technet.com/b/sbs/archive/2010/06/18/companyweb-and-sharepoint-central-admin-not-accessible-after-installing-kb983444.aspx)
  • Known issue 4

    This security update may appear multiple times in the Installed Updates list after you install it. This issue occurs because this update is applied to multiple Office applications. 
  • Known issue 5

    After you install this update, you cannot load the Add to My Links page, which is a menu item under the My Links menu in the upper-right corner of the homepage.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
944267  (http://support.microsoft.com/kb/944267/ ) How to troubleshoot common errors that occur when you run the SharePoint Products and Technologies Configuration Wizard on a computer that is running Windows SharePoint Services 3.0 or SharePoint Server 2007

Prerequisites to apply this security update

The following list contains prerequisites for the security update:
  • You must have Windows SharePoint Services 3.0 Service Pack 2 or a later version installed to apply this security update. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
    949582  (http://support.microsoft.com/kb/949582/ ) How to obtain the latest service pack for Windows SharePoint Services 3.0

Restart information

You may have to restart the computer after you install this security update.

Security update replacement information

This security update replaces the following security update:
2345304  (http://support.microsoft.com/kb/2345304/ ) MS10-072: Description of the security update for Windows SharePoint Services 3.0: October 12, 2010

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
For Microsoft Windows SharePoint Services 3.0, 32-bit editions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Camlqry.xsdNot Applicable9,58102-Feb-201008:25
Cfgupddl.sqlNot Applicable13809-Apr-201103:55
Configdb.sqlNot Applicable66,82309-Apr-201104:36
Configup.sqlNot Applicable50,05609-Apr-201103:55
Create.asxNot Applicable16,35028-Oct-200917:29
Depl.xsdNot Applicable62,74606-Apr-201108:41
Dwdcw20.dll12.0.6545.5000438,61611-Aug-201019:22
Dws.asxNot Applicable4,44128-Oct-200917:29
Feature_0003.xmlNot Applicable51112-Mar-200905:12
Fldswss.xmlNot Applicable214,91303-Feb-201007:40
Microsoft_sharepoint_dsp_oledb.dll12.0.6562.5000128,88820-Jun-201111:07
Microsoft_sharepoint_dsp_soappt.dll12.0.6562.500087,92820-Jun-201111:07
Microsoft_sharepoint_dsp_sts.dll12.0.6562.5000104,31220-Jun-201111:07
Microsoft_sharepoint_dsp_xmlurl.dll12.0.6562.500087,92820-Jun-201111:07
Microsoft_web_design_server.dll12.0.6562.5000403,33620-Jun-201112:20
Msscntrs.dll_0001.x8612.0.6529.500088,40803-Feb-201009:24
Mssdmn.exe_0001.x8612.0.6557.5000281,45612-Apr-201109:56
Mssearch.exe_0005.x8612.0.6539.5000156,05609-Jun-201008:49
Mssph.dll_0001.x8612.0.6565.5000703,31204-Aug-201101:59
Mssrch.dll_0001.x8612.0.6558.50002,066,25627-Apr-201111:48
Nlhtml.dll_0002.x862008.1231.6510.5000123,24022-Jun-200911:59
Offfilt.dll_0002.x862008.1231.6532.5000199,53620-Mar-201009:15
Offprsx.dll12.0.6563.50001,134,48829-Jun-201113:55
Onetutil.dll12.0.6565.50011,980,28011-Aug-201106:31
Owssvr.dll_000112.0.6565.50013,028,34410-Aug-201105:57
Owstimer.exe_000112.0.6548.500054,64008-Oct-201004:50
Query9x.dll_0002.x8612.0.6510.500081,21617-Jun-200923:27
Rgnldflt.xmlNot Applicable14,76009-Jul-201001:11
Schema.xml_announceNot Applicable92,60220-Nov-201007:17
Schema.xml_discussNot Applicable325,96303-Feb-201007:40
Schema.xml_usersNot Applicable371,41610-Sep-200903:21
Searchom.dll_0003.x8612.0.6562.50001,466,24020-Jun-201111:14
Searchom.dll_0005.x8612.0.6562.50001,466,24020-Jun-201111:14
Sigcfg.cerNot Applicable68909-Apr-201104:36
Sigcfg.dllNot Applicable8,03209-Apr-201104:36
Sigcfg.sqlNot Applicable42,67909-Apr-201104:36
Sigsdb.cer.x86Not Applicable68916-Mar-201104:19
Sigsdb.dll.x86Not Applicable8,03216-Mar-201104:19
Sigsdb.sql.x86Not Applicable154,68416-Mar-201104:19
Sigstore.cerNot Applicable68902-Aug-201115:37
Sigstore.dllNot Applicable8,02402-Aug-201115:37
Sigstore.sqlNot Applicable404,46802-Aug-201115:37
Store.sqlNot Applicable2,778,94502-Aug-201115:37
Storeup.sqlNot Applicable2,704,06802-Aug-201114:47
Stoupddl.sqlNot Applicable13802-Aug-201114:47
Sts.workflows.dll12.0.6562.500071,54420-Jun-201111:08
Stsadm.exe12.0.6562.5000587,68020-Jun-201111:08
Stsap.dll12.0.6562.5000628,63220-Jun-201111:08
Stsapa.dll12.0.6562.5000268,15220-Jun-201111:07
Stslib.dll_000112.0.6562.5000128,88820-Jun-201111:07
Stsom.dll12.0.6565.50019,602,93610-Aug-201105:57
Stsom.dll_000112.0.6565.50019,602,93610-Aug-201105:57
Stssoap.dll12.0.6562.5000313,20820-Jun-201111:08
Stswel.dll12.0.6565.50011,937,78410-Aug-201105:57
Stswfacb.dll12.0.6562.5000194,45620-Jun-201111:08
Stswfact.dll12.0.6562.5000194,45620-Jun-201111:08
Timezone.xmlNot Applicable75,81620-Jul-201100:40
Tquery.dll_0002.x8612.0.6554.50002,357,58402-Feb-201108:26
Wss.rsxNot Applicable453,41003-Feb-201007:37
Wss.search.sql.x86Not Applicable432,50116-Mar-201104:19
Wss.search.up.sql.x86Not Applicable339,77316-Mar-201100:54
Wss.xsdNot Applicable72,86712-Aug-200901:10
Wssadmin.exe_000112.0.6564.500015,27223-Jul-201102:49
Wssadmop.dll_000112.0.6564.5000485,24023-Jul-201102:49
Wsspreupgradecheck.xmlNot Applicable10,57413-Oct-200905:24
Xmlfiltr.dll.x862008.1231.6514.5000102,24818-Aug-200907:42
For Microsoft Windows SharePoint Services 3.0, 64-bit editions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Camlqry.xsdNot Applicable9,58102-Feb-201008:25Not Applicable
Cfgupddl.sqlNot Applicable13809-Apr-201103:55Not Applicable
Configdb.sqlNot Applicable66,82309-Apr-201104:36Not Applicable
Configup.sqlNot Applicable50,05609-Apr-201103:55Not Applicable
Create.asxNot Applicable16,35028-Oct-200917:29Not Applicable
Depl.xsdNot Applicable62,74606-Apr-201108:41Not Applicable
Dwdcw20.dll12.0.6545.50001,093,46411-Aug-201017:31x64
Dws.asxNot Applicable4,44128-Oct-200917:29Not Applicable
Feature_0003.xmlNot Applicable51112-Mar-200905:12Not Applicable
Fldswss.xmlNot Applicable214,91303-Feb-201007:40Not Applicable
Microsoft_sharepoint_dsp_oledb.dll12.0.6562.5000128,88818-Jun-201111:17x86
Microsoft_sharepoint_dsp_soappt.dll12.0.6562.500087,92818-Jun-201111:17x86
Microsoft_sharepoint_dsp_sts.dll12.0.6562.5000104,31218-Jun-201111:17x86
Microsoft_sharepoint_dsp_xmlurl.dll12.0.6562.500087,92818-Jun-201111:17x86
Microsoft_web_design_server.dll12.0.6562.5000403,33618-Jun-201109:52x86
Msscntrs.dll_0001.x6412.0.6529.5000437,08003-Feb-201008:46Not Applicable
Mssdmn.exe_0001.x6412.0.6557.5000798,57606-Apr-201115:02Not Applicable
Mssearch.exe_0005.x6412.0.6539.5000572,31209-Jun-201006:58Not Applicable
Mssph.dll_0001.x6412.0.6565.50001,959,76002-Aug-201115:38Not Applicable
Mssrch.dll_0001.x6412.0.6558.50004,761,93627-Apr-201111:34Not Applicable
Nlhtml.dll_0002.x642008.1231.6510.5000228,19217-Jun-200921:48Not Applicable
Offfilt.dll_0002.x642008.1231.6532.5000387,95217-Mar-201011:57Not Applicable
Offprsx.dll12.0.6563.50001,761,68829-Jun-201113:49x64
Onetutil.dll12.0.6565.50013,385,20810-Aug-201105:22x64
Owssvr.dll_000112.0.6565.50015,170,55210-Aug-201105:45Not Applicable
Owstimer.exe_000112.0.6548.500089,45608-Oct-201004:39Not Applicable
Query9x.dll_0002.x6412.0.6510.5000219,45617-Jun-200923:01Not Applicable
Rgnldflt.xmlNot Applicable14,76009-Jul-201001:11Not Applicable
Schema.xml_announceNot Applicable92,60220-Nov-201007:17Not Applicable
Schema.xml_discussNot Applicable325,96303-Feb-201007:40Not Applicable
Schema.xml_usersNot Applicable371,41610-Sep-200903:21Not Applicable
Searchom.dll_0003.x6412.0.6562.50001,568,64018-Jun-201110:33Not Applicable
Searchom.dll_0005.x6412.0.6562.50001,568,64018-Jun-201110:33Not Applicable
Sigcfg.cerNot Applicable68909-Apr-201104:36Not Applicable
Sigcfg.dllNot Applicable8,03209-Apr-201104:36x86
Sigcfg.sqlNot Applicable42,67909-Apr-201104:36Not Applicable
Sigsdb.cer.x64Not Applicable68916-Mar-201104:19Not Applicable
Sigsdb.dll.x64Not Applicable8,03216-Mar-201104:19Not Applicable
Sigsdb.sql.x64Not Applicable154,68416-Mar-201104:19Not Applicable
Sigstore.cerNot Applicable68902-Aug-201115:37Not Applicable
Sigstore.dllNot Applicable8,02402-Aug-201115:37x86
Sigstore.sqlNot Applicable404,46802-Aug-201115:37Not Applicable
Store.sqlNot Applicable2,778,94502-Aug-201115:37Not Applicable
Storeup.sqlNot Applicable2,704,06802-Aug-201114:47Not Applicable
Stoupddl.sqlNot Applicable13802-Aug-201114:47Not Applicable
Sts.workflows.dll12.0.6562.500071,54420-Jun-201111:08x86
Stsadm.exe12.0.6562.5000587,68018-Jun-201111:17x86
Stsap.dll12.0.6562.5000628,63218-Jun-201111:17x86
Stsapa.dll12.0.6562.5000268,15218-Jun-201111:17x86
Stslib.dll_000112.0.6562.5000128,88818-Jun-201111:17Not Applicable
Stsom.dll12.0.6565.50019,602,93610-Aug-201105:45x86
Stsom.dll_000112.0.6565.50019,602,93610-Aug-201105:45Not Applicable
Stssoap.dll12.0.6562.5000313,20818-Jun-201111:17x86
Stswel.dll12.0.6565.50013,330,42410-Aug-201105:45x64
Stswfacb.dll12.0.6562.5000194,45618-Jun-201111:17x86
Stswfact.dll12.0.6562.5000194,45618-Jun-201111:17x86
Timezone.xmlNot Applicable75,81620-Jul-201100:40Not Applicable
Tquery.dll_0002.x6412.0.6554.50004,783,95202-Feb-201111:10Not Applicable
Wss.rsxNot Applicable453,41003-Feb-201007:37Not Applicable
Wss.search.sql.x64Not Applicable432,50116-Mar-201104:19Not Applicable
Wss.search.up.sql.x64Not Applicable339,77316-Mar-201100:54Not Applicable
Wss.xsdNot Applicable72,86712-Aug-200901:10Not Applicable
Wssadmin.exe_000112.0.6564.500015,27220-Jul-201100:44Not Applicable
Wssadmop.dll_000112.0.6564.5000485,24020-Jul-201100:44Not Applicable
Wsspreupgradecheck.xmlNot Applicable10,57413-Oct-200905:24Not Applicable
Xmlfiltr.dll.x642008.1231.6514.5000204,13614-Aug-200915:25Not Applicable

APPLIES TO
  • Microsoft Windows SharePoint Services 3.0
Keywords: 
kbexpertiseinter kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbfix kbbug kbsurveynew KB2493987
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support