MDGx

98 FE + 98 SE + ME updates + patches + (hot)fixes

1,295 posts in this topic

6-1-2006:

Added instructions on how to install MS01-059 UPnP security fix on Win98/98SE even without WinXP ICS client.

HTH

Edited by MDGx
0

Share this post


Link to post
Share on other sites
UPDATED · 6-1-2006

Please see the top of this topic for most recent updates.

_________________________________

Added instructions on how to install MS01-059 UPnP security fix on Win98/98SE even without WinXP ICS client.

HTH

well there is no point in installing the MS01-059 UPnP update for Win98 w/out the XP ICS Client. It's useless without the client software. the XP SP1 & SP2 versions of the XP ICS Client EXE package [netsetup.exe] do include the updated files from the MS01-059 update for Win98 though they are dated newer than the ones found in MS01-059.

Edited by erpdude8
0

Share this post


Link to post
Share on other sites

MDGx,

What the ICS Client is. It's something most of w98 users don't use, right?

On your site, it's unclear what is already included in the last uSP. Or "Already installed!" means that?

I think you should add a uSP logo or something...but that's a lot of work.

0

Share this post


Link to post
Share on other sites

Fredledingue:

ICS = Internet Connection Sharing

More info:

http://www.dewassoc.com/support/networking/ics_1.htm

http://www.homenethelp.com/ics/

ICS in Win98 SE:

http://support.microsoft.com/?id=234815

ICS in WinXP:

http://support.microsoft.com/?id=310563

Yes, some Win98SE users (still) use ICS, as far as I know.

IMHO:

To me it doesn't matter how many people use ICS, all it matters is that everybody should be able to install and use it, as long as it's available.

Although erpdude8 has a good point:

UPnP may not be available to Win98 SE users without WinXP ICS installed.

I'm going to research more on this.

About uSP [i presume you are referring to Gape's SP2] logo...

The updates/patches/fixes I post at my site are not related to Gape's SP2. They are just individual updates which [usually] fix only 1 bug, the way MS posted them.

When I say something like "requires x already installed", I refer to a system component without which a particular update/patch/fix doesn't work/install/etc.

And you're right, to add an SP2 logo [and/or state which ones are included in SP2] to all related updates at my site would take a very long time, and unfortunately I don't have that much time to spare. :(

HTH

0

Share this post


Link to post
Share on other sites

MDGx,

Thanks for the infos on ICS. In fact, as soon as you own two computer it's wise to run this patch just in case one day you decide to share the conection.

About your site,

I refered to the "Already Installed!" notes that we can seen from time to time on your lists of upgrade...

What does it mean?

0

Share this post


Link to post
Share on other sites
Fredledingue:

ICS = Internet Connection Sharing

More info:

http://www.dewassoc.com/support/networking/ics_1.htm

http://www.homenethelp.com/ics/

ICS in Win98 SE:

http://support.microsoft.com/?id=234815

ICS in WinXP:

http://support.microsoft.com/?id=310563

Yes, some Win98SE users (still) use ICS, as far as I know.

IMHO:

To me it doesn't matter how many people use ICS, all it matters is that everybody should be able to install and use it, as long as it's available.

Although erpdude8 has a good point:

UPnP may not be available to Win98 SE users without WinXP ICS installed.

I'm going to research more on this.

I occasionally use ICS depending on configuration. For example, I may have a "sateliite" operation going which is wireless to a laptop containing support files for an install on a nearby machine. The nearby machine is net-wired to the laptop [with a cross-over cable] to obtain files across the baby network between them, etc. If I enable ICS in the laptop, the other machine gets an IP address and Internet access, etc.

Please note a few misconceptions about ICS and UPnP:

1) Despite claims to the contrary, UPnP is NOT required for ICS support, even from XP, which yells the loudest about it. ICS even in XP will assign an IP address to the client machine just like your router, whether it uses UPnP or not (I have used both kinds).

The ONLY actual difference between XP's version of ICS and the 98SE and Win2K and ME version is the strong "recommendation" for the UPnP. They are operationally the same.

2) UPnP is native only to ME and XP. In all relevant systems there are gaping security holes fixed by the same update with separate binaries for ME, XP, and also for 98/98SE. There are generally two updates, but the second one obsoletes the first one. XP SP2 doesn't need the update applied. [Dunno about XP SP1, but earlier clearly needs it.]

3) UPnP can optionally be added to 98 and 98SE using a utility most easily obtained from the XP setup CD. When you first run XP's ICS wizard, it enables you to have a diskette containing netsetup.exe obtained directly from the XP CD. I have heard claims this is also downloadable from some MS site [or was]. Using netsetup.exe, you will get essentially the ME version added onto 98 or 98SE, as well as a shared folder forced upon you inside of your My Documents folder I think called Shared Files [or something like that]. You can undo the sharing of that particular folder if you wish after the fact, and/or enable any form of other sharing you wish, etc.

4) If you DO use UPnP, AND you have either a UPnP-aware router to connect the 98/98SE machine to, or are connected to XP using ICS, or perhaps some other UPnP device, you can notice it and interact with it in some ways, just as you can in ME or XP.

For example, in XP, ME, or upgraded 98/98SE, I can see my UPnP-enabled router and notice a system tray icon showing some activity. In some cases, it can also proclaim to see a device designated as a "residential gateway" which again is the router. Right click on the icon and check status and you can find out a surprising amount of info about your router from the 98/98SE version, even though the specific verbiage differs from the other implementations.

Additionally, certain applications are UPnP aware and can better access Internet ports more automatically, such as recent versions of LimeWire, which apparently find the "holes" you created in your router's firewall for the purpose. Without UPnP you have to manually configure. [Note: You still have to manually do the "port forwarding" and/or "port triggering" in your router since by default these "holes" are plugged, but this is beyond the scope of this, etc.] My 98SE system UPnP status reveals them directly!

The connection icon is sorta like the dial-up connection icon in appearance, but a whole lot different in terms of what it can tell you. But if you aren't connected to any UPnP other device, you don't have a use for it and the icon won't appear. But since it IS PnP, when you connect the machine to something else doing UPnP, the icon will appear.

cjl

0

Share this post


Link to post
Share on other sites
2) UPnP is native only to ME and XP. In all relevant systems there are gaping security holes fixed by the same update with separate binaries for ME, XP, and also for 98/98SE. There are generally two updates, but the second one obsoletes the first one. XP SP2 doesn't need the update applied. [Dunno about XP SP1, but earlier clearly needs it.]

The UPnP security patches for Win98se, ME & XP were released in December 2001 so the upnp security fixes ARE included in XP SP1/SP1a and SP2. note that UPNP is NOT included in Win2000.

0

Share this post


Link to post
Share on other sites
I refered to the "Already Installed!" notes that we can seen from time to time on your lists of upgrade...

What does it mean?

It means that...

When I say something like "requires x already installed", I refer to a system component without which a particular update/patch/fix doesn't work/install/etc.

HTH

0

Share this post


Link to post
Share on other sites

Ha! You are right. It must be my mind that needs debugging! :}

0

Share this post


Link to post
Share on other sites
Ha! You are right. It must be my mind that needs debugging! :}

heh, no kidding :D

someday you'll get it

No problem.

@erpdude8: on your IE/WMP site, could you please modify the text for the 905495 updates to be as follows:

for the file IE905495.EXE: Internet Explorer 5.5 SP2/6.0 SP1 FTP client KB905495 update for Windows 98/NT4/ME

for the file Q905495.EXE: Internet Explorer 5.5 SP2 FTP client KB905495 update for Windows 95

Could you also add the 2K905495.EXE file and the IE912812.EXE file.

@All: Who's with me that this topic should be a sticky?

the_guy

EDIT: @MDGx: the Q911567.EXE file is just for IE 5.5 SP2, NOT IE 6.0 SP1. The OS's there are correct

note to the_guy and MDGx: There are problems that come up after installing the KB911567 updates whether official or unofficial. Outlook Express users may have problems opening WAB [Windows Address Book] files after applying the KB911567 update for OE. Problem is noted in Microsoft KB article 917288:

http://support.microsoft.com/kb/917288

MDGx should list the side effect of what KB911567 does to Outlook Express on his IE page.

AND the problem with KB911567 is also mentioned on the Askwoody.com web site [hmm, does that Woody guy hate MS or something?]

Edited by erpdude8
0

Share this post


Link to post
Share on other sites

Bad news, guys...

http://news.com.com/2100-1002_3-6082307.html

Micro$oft will •not• fix the MS06-015 [Q908531] shell32.dll critical security vulnerability:

http://www.microsoft.com/technet/security/...n/ms06-015.mspx

found in all Windows 98 + ME OSes.

They blame this decision on having to rewrite a huge amount of code [?], and that as a consequence they can't be sure if some apps would still work [or not] afterwards. :(

They also recommend that all users should install + use a firewall which should be configured to protect port 139 TCP [NetBios].

FYI:

NetBIOS [ports 137 (name), 138 (datagram) + 139 (session)]= Network Basic Input Output System. API (Application Programming Interface) used on LANs (Local Area Networks). •Always• block, unless using NetBIOS on your network(s) and/or on the network(s) you connect to.

no comments :realmad:

0

Share this post


Link to post
Share on other sites
Bad news, guys...

. . . . .

They also recommend that all users should install + use a firewall which should be configured to protect port 139 TCP [NetBios].

FYI:

NetBIOS [ports 137 (name), 138 (datagram) + 139 (session)] = Network Basic Input Output System. API (Application Programming Interface) used on LANs (Local Area Networks). •Always• block, unless using NetBIOS on your network(s) and/or on the network(s) you connect to.

no comments :realmad:

coming late to the problem but afaik, you can shut this permanently with the 'network bondage' trick

http://www.grc.com/su-bondage.htm

http://www.grc.com/su-rebinding9x.htm

any help ?

0

Share this post


Link to post
Share on other sites
It is strange - at first Microsoft promissed to fix all critical security flaws, then it failed to do it.

Petr

What, pray tell, Petr, is so strange about that? MS doesn't have a good track record it that department anyways. :realmad:

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.