MS09-008 - Description of Th..

MS09-008: Description of the security update for DNS server: Ma... http://support.microsoft.
com/kb/961063/
Article ID: 961063 - Last Review: March 17, 2009 - Revision: 2.0
MS09-008: Description of the security update for DNS server: March 10, 2009
INTRODUCTION
Microsoft has released security bulletin MS09-008. To view the complete security bulletin, visit one
of the following Microsoft Web sites:
Home users: http://www.microsoft.com/protect/computer/updates/bulletins/200903.mspx (http://www.microsoft.com/protect

/computer/updates/bulletins/200903.mspx) Skip the details: Download the updates for your home computer or laptop from the
Microsoft Update Web site now: http://update.microsoft.com/microsoftupdate/ (http://update.microsoft.com/microsoftupdate/)
IT professionals: http://www.microsoft.com/technet/security/bulletin/ms09-008.mspx (http://www.microsoft.com/technet
/security/bulletin/ms09-008.mspx)
How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and
Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for
support issues with security updates, visit the Microsoft International Support Web site: http://support.microsoft.com/common
/international.aspx?rdpath=4 (http://support.microsoft.com/common/international.aspx?rdpath=4) North American customers can also obtain
instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web
site: http://support.microsoft.com/oas/default.aspx?&prid=7552 (http://support.microsoft.com/oas/default.aspx?&prid=7552) For
enterprise customers, support for security updates is available through your usual support contacts.
Known issues with this security update
Resource Consumption Issues

Resource Consumption Issues Windows DNS server systems may see an increase in memory and file
handles resource consumption for systems on which the security update that is described in MS08-037 is installed. This is expected
behavior because of the SocketPool randomization feature that was implemented to address this security vulnerability on
Windows-based servers. The implementation of the DNS server security update reserves a set of ports. One of the ports is selected
randomly for each outgoing DNS query. This design decision was made to address performance concerns for DNS servers that handle
and originate a significantly larger number of queries than Windows-based clients. The set of reserved ports that the DNS server
reserves is known as a "socket pool." By default, the size of the socket pool on Windows-based servers is 2,500 sockets. To configure
this size, change the SocketPoolSize registry entry in the following subkey in the registry: HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Services\DNS\Parameters\SocketPoolSize
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
956188 (http://support.microsoft.com/kb/956188/ ) You experience issues with UDP-dependent network services after you install DNS
Server service security update 953230 (MS08-037)
For more information, visit the following Microsoft Web page: http://blogs.technet.com/sseshad/archive/2008/12/03/windows-
dns-and-the-kaminsky-bug.aspx (http://blogs.technet.com/sseshad/archive/2008/12/03/windows-dns-and-the-kaminsky-bug.aspx)
FILE INFORMATION
The English (United States) version of this security update has the file attributes (or later file
attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC).
When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time
Zone tab in the Date and Time item in Control Panel.
For all supported editions of Microsoft Windows 2000 Service Pack 4
File name File version File size Date Time Platform
Afd.sys 5.0.2195.7204 119,152 17-Oct-2008 11:38 x86
Dns.exe 5.0.2195.7260 335,120 14-Feb-2009 00:24 x86
Dnsperf.dll 5.0.2195.7157 33,552 14-Feb-2009 01:23 x86
Dnsperf.h Not Applicable 6,642 30-Apr-2008 23:49 Not Applicable
Dnsperf.ini Not Applicable 11,597 30-Apr-2008 23:49 Not Applicable
Msafd.dll 5.0.2195.7158 105,744 14-Feb-2009 01:23 x86
Sp3res.dll 5.0.2195.7226 6,313,472 05-Jan-2009 20:37 x86
Tcpip.sys 5.0.2195.7162 320,528 18-Jun-2008 23:35 x86
Windows Server 2003 file information notes
The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the “SP requirement” and
1 of 13 3/21/2009 8:56 PM
MS09-008: Description of the security update for DNS server: Ma... http://support.microsoft.com/kb/961063/
"Service branch” columns.

GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service
branches contain hotfixes in addition to widely released fixes.
In addition to the files that are listed in these tables, this software update also installs an associated security catalog file
(KBnumber.cat) that is signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2003
File name File version File size Date Time Platform SP requirement Service branch
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 13:52 x86 SP1 SP1GDR
Afd.sys 5.2.3790.3229 150,528 16-Oct-2008 14:40 x86 SP1 SP1GDR
Dns.exe 5.2.3790.3295 449,536 16-Feb-2009 09:12 x86 SP1 SP1GDR
Dnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:32 x86 SP1 SP1GDR
Dnsperf.h Not Applicable 6,642 26-Apr-2008 04:36 Not Applicable SP1 SP1GDR
Dnsperf.ini Not Applicable 11,597 26-Apr-2008 04:36 Not Applicable SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 256,512 20-Jun-2008 19:24 x86 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 333,824 20-Jun-2008 15:59 x86 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 225,856 20-Jun-2008 10:13 Not Applicable SP1 SP1GDR
W03a2409.dll 5.2.3790.3295 40,960 16-Feb-2009 10:26 x86 SP1 SP1GDR
6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 14:01 x86 SP1 SP1QFE
Afd.sys 5.2.3790.3229 153,088 16-Oct-2008 14:43 x86 SP1 SP1QFE
Dns.exe 5.2.3790.3295 450,560 16-Feb-2009 10:37 x86 SP1 SP1QFE
Dnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:04 x86 SP1 SP1QFE
Dnsperf.h Not Applicable 6,642 26-Apr-2008 04:36 Not Applicable SP1 SP1QFE
Dnsperf.ini Not Applicable 11,597 26-Apr-2008 04:36 Not Applicable SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 258,048 20-Jun-2008 19:36 x86 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 394,752 20-Jun-2008 10:38 x86 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 225,984 20-Jun-2008 10:04 Not Applicable SP1 SP1QFE
W03a2409.dll 5.2.3790.3295 40,960 16-Feb-2009 10:26 x86 SP1 SP1QFE
Afd.sys 5.2.3790.4392 150,528 16-Oct-2008 15:46 x86 SP2 SP2GDR
Dnsperf.h Not Applicable 6,642 26-Apr-2008 04:36 Not Applicable SP2 SP2GDR
Dnsperf.ini Not Applicable 11,597 26-Apr-2008 04:36 Not Applicable SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 256,000 20-Jun-2008 18:32 x86 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 384,000 20-Jun-2008 14:22 x86 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 234,368 20-Jun-2008 13:55 Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4430 26,112 18-Dec-2008 16:53 x86 SP2 SP2GDR
Afd.sys 5.2.3790.4392 150,528 16-Oct-2008 16:03 x86 SP2 SP2QFE
Dnsperf.h Not Applicable 6,642 26-Apr-2008 04:36 Not Applicable SP2 SP2QFE
Dnsperf.ini Not Applicable 11,597 26-Apr-2008 04:36 Not Applicable SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 257,024 20-Jun-2008 19:01 x86 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 390,656 20-Jun-2008 11:01 x86 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 234,496 20-Jun-2008 10:19 Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4430 26,112 18-Dec-2008 16:53 x86 SP2 SP2QFE
2 of 13 3/21/2009 8:56 PM
6to4svc.dll 5.2.3790.2771 124,416 17-Feb-2009 08:45 x64 SP1 SP1GDR
Afd.sys 5.2.3790.3229 299,008 17-Feb-2009 08:45 x64 SP1 SP1GDR
Dnsperf.h Not Applicable 6,642 17-Feb-2009 08:45 Not Applicable SP1 SP1GDR
Dnsperf.ini Not Applicable 11,597 17-Feb-2009 08:45 Not Applicable SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 490,496 17-Feb-2009 08:45 x64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 703,488 17-Feb-2009 08:46 x64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 362,752 17-Feb-2009 08:46 x64 SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
Wdns.exe 5.2.3790.3295 449,536 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
Wdnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
Wmswsock.dll 5.2.3790.3161 232,448 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
Ww03a2409.dll 5.2.3790.3295 40,960 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 124,416 17-Feb-2009 08:46 x64 SP1 SP1QFE
Afd.sys 5.2.3790.3229 299,520 17-Feb-2009 08:46 x64 SP1 SP1QFE
Dnsperf.h Not Applicable 6,642 17-Feb-2009 08:46 Not Applicable SP1 SP1QFE
Dnsperf.ini Not Applicable 11,597 17-Feb-2009 08:46 Not Applicable SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 491,520 17-Feb-2009 08:46 x64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 829,952 17-Feb-2009 08:46 x64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 363,136 17-Feb-2009 08:46 x64 SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Wdns.exe 5.2.3790.3295 450,560 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Wdnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Wmswsock.dll 5.2.3790.3161 233,472 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Ww03a2409.dll 5.2.3790.3295 40,960 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4392 291,840 17-Feb-2009 08:53 x64 SP2 SP2GDR
Mswsock.dll 5.2.3790.4318 492,544 17-Feb-2009 08:53 x64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 768,512 17-Feb-2009 08:53 x64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 375,680 17-Feb-2009 08:53 x64 SP2 SP2GDR
Afd.sys 5.2.3790.4392 292,352 17-Feb-2009 08:45 x64 SP2 SP2QFE
3 of 13 3/21/2009 8:56 PM
Mswsock.dll 5.2.3790.4318 493,056 17-Feb-2009 08:45 x64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 784,896 17-Feb-2009 08:45 x64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 375,808 17-Feb-2009 08:46 x64 SP2 SP2QFE
For all supported IA-64-based versions of Windows Server 2003
6to4svc.dll 5.2.3790.2771 362,496 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Afd.sys 5.2.3790.3229 582,656 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Dns.exe 5.2.3790.3295 1,144,832 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Dnsperf.dll 5.2.3790.3295 26,624 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Mswsock.dll 5.2.3790.3161 780,800 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Tcpip.sys 5.2.3790.3161 1,116,672 17-Feb-2009 08:45 IA-64 SP1 SP1GDR
Tcpip6.sys 5.2.3790.3161 736,384 17-Feb-2009 08:46 Not Applicable SP1 SP1GDR
W03a2409.dll 5.2.3790.3295 39,936 17-Feb-2009 08:46 IA-64 SP1 SP1GDR
W6to4svc.dll 5.2.3790.2771 99,840 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
Wdns.exe 5.2.3790.3295 449,536 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW
6to4svc.dll 5.2.3790.2771 362,496 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Afd.sys 5.2.3790.3229 584,192 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Dns.exe 5.2.3790.3295 1,147,904 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Dnsperf.dll 5.2.3790.3295 26,624 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Mswsock.dll 5.2.3790.3161 784,896 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Tcpip.sys 5.2.3790.3161 1,308,672 17-Feb-2009 08:45 IA-64 SP1 SP1QFE
Tcpip6.sys 5.2.3790.3161 737,024 17-Feb-2009 08:46 Not Applicable SP1 SP1QFE
W03a2409.dll 5.2.3790.3295 39,936 17-Feb-2009 08:46 IA-64 SP1 SP1QFE
W6to4svc.dll 5.2.3790.2771 99,840 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Wdns.exe 5.2.3790.3295 450,560 17-Feb-2009 08:46 x86 SP1 SP1QFE\WOW
Afd.sys 5.2.3790.4392 583,680 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
Dns.exe 5.2.3790.4460 1,146,880 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
Dnsperf.dll 5.2.3790.4460 26,624 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
4 of 13 3/21/2009 8:56 PM
Mswsock.dll 5.2.3790.4318 785,408 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
Tcpip.sys 5.2.3790.4318 1,287,168 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
Tcpip6.sys 5.2.3790.4318 763,776 17-Feb-2009 08:50 Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4430 25,088 17-Feb-2009 08:50 IA-64 SP2 SP2GDR
Afd.sys 5.2.3790.4392 584,192 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Dns.exe 5.2.3790.4460 1,148,416 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Dnsperf.dll 5.2.3790.4460 26,624 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Mswsock.dll 5.2.3790.4318 789,504 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Tcpip.sys 5.2.3790.4318 1,310,208 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Tcpip6.sys 5.2.3790.4318 764,416 17-Feb-2009 08:45 Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4430 25,088 17-Feb-2009 08:45 IA-64 SP2 SP2QFE
Windows Server 2008 file information notes
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining
the file version numbers as shown in the following table.
Version Product Milestone Service branch
6.0.6000.16xxx Windows Vista RTM GDR
6.0.6000.20xxx Windows Vista RTM LDR
6.0.6001.18xxx Windows Vista SP1 and Windows Server 2008 SP1 SP1 GDR
6.0.6001.22xxx Windows Vista SP1 and Windows Server 2008 SP1 SP1 LDR
Service Pack 1 is integrated into the original release version of Windows Server 2008. Therefore, RTM milestone files apply only
to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service
branches contain hotfixes in addition to widely released fixes.
The .manifest files and the .mum files that are installed in each environment are listed separately in the "Additional file
information for Windows Server 2008" section. These files and their associated .cat (security catalog) files are critical to
maintaining the state of the updated component. The .cat files are signed with a Microsoft digital signature. The attributes of
these security files are not listed.

Cache.dns Not Applicable 3,179 03-Jan-2008 18:54 Not Applicable
Dns.exe 6.0.6001.18214 510,464 12-Feb-2009 05:55 x86
Dnsserver.events.xml Not Applicable 609 05-Jan-2008 11:22 Not Applicable
Cache.dns Not Applicable 3,179 18-Dec-2007 20:59 Not Applicable
Dns.exe 6.0.6001.22375 510,464 12-Feb-2009 05:40 x86
Dnsserver.events.xml Not Applicable 609 18-Dec-2007 20:59 Not Applicable
5 of 13 3/21/2009 8:56 PM
Cache.dns Not Applicable 3,179 03-Jan-2008 17:58 Not Applicable
Dns.exe 6.0.6001.18214 638,464 12-Feb-2009 06:05 x64
Dnsserver.events.xml Not Applicable 609 05-Jan-2008 11:24 Not Applicable
Cache.dns Not Applicable 3,179 18-Dec-2007 20:59 Not Applicable
Dns.exe 6.0.6001.22375 638,464 12-Feb-2009 06:14 x64
Dnsserver.events.xml Not Applicable 609 18-Dec-2007 21:00 Not Applicable
Additional file information for Windows Server 2008
Additional files for all supported x86-based versions of Windows Server 2008
File name Package_1_for_kb961063_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,746
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
Platform Not Applicable
File name Package_1_for_kb961063~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 2,458
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_2_for_kb961063_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,746
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_2_for_kb961063~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 2,458
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_sc_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
6 of 13 3/21/2009 8:56 PM
File size 1,399
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_sc_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,418
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_sc_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,412
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_sc~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,431
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_server_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,403
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,422
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
7 of 13 3/21/2009 8:56 PM
File name Package_for_kb961063_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,420
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Package_for_kb961063_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File Not Applicable

version
File size 1,439
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name Update-bf.mum
File Not Applicable

version
File size 1,866
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name X86_c6aca3d6a45fffd4e934fe93066c4091_31bf3856ad364e35_6.0.6001.18214_none_447f9380e9f38e0e.manifest
File Not Applicable

version
File size 706
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name X86_dc6a29c37c09523478029c458fd26687_31bf3856ad364e35_6.0.6001.22375_none_d094d4e62d89207e.manifest
File Not Applicable

version
File size 706
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File name X86_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6001.18214_none_4dff1a7dd69914a6.manifest
File Not Applicable

version
File size 163,050
8 of 13 3/21/2009 8:56 PM
Date 12-Feb-2009
(UTC)
Time 06:18
(UTC)
File name X86_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6001.22375_none_4e48d80aefe6756d.manifest
File Not Applicable

version
File size 163,050
Date 12-Feb-2009
(UTC)
Time 05:58
(UTC)
Additional files for all supported x64-based versions of Windows Server 2008
File Amd64_066a14114ee4a26acb7c28a6cf41c7d2_31bf3856ad364e35_6.0.6001.22375_none_9ff7ca5caa1878eb.manifest
name
File Not Applicable

version
File size 710
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Amd64_c20126198fed1ad35d8ef004effa73c5_31bf3856ad364e35_6.0.6001.18214_none_8a23539bb695dc6e.manifest
name
File Not Applicable

version
File size 710
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.0.6001.18214_none_aa1db6018ef685dc.manifest
name
File Not Applicable

version
File size 163,090
Date 12-Feb-2009
(UTC)
Time 06:25
(UTC)
File Amd64_microsoft-windows-dns-server-
name service_31bf3856ad364e35_6.0.6001.22375_none_aa67738ea843e6a3.manifest
File Not Applicable

version
File size 163,090
9 of 13 3/21/2009 8:56 PM
Date 12-Feb-2009
(UTC)
Time 06:32
(UTC)
File Package_1_for_kb961063_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,756
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_1_for_kb961063~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 2,472
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_2_for_kb961063_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,756
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_2_for_kb961063~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 2,472
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_sc_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,407
Date 12-Feb-2009
(UTC)
10 of 13 3/21/2009 8:56 PM
Time 19:39
(UTC)
File Package_for_kb961063_sc_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,426
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_sc_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,420
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_sc~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,439
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,411
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,430
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
11 of 13 3/21/2009 8:56 PM
File Package_for_kb961063_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,428
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Package_for_kb961063_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
name
File Not Applicable

version
File size 1,447
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
File Update-bf.mum
name
File Not Applicable

version
File size 1,878
Date 12-Feb-2009
(UTC)
Time 19:39
(UTC)
APPLIES TO
Windows Server 2008 for Itanium-Based Systems

Windows Server 2008 Datacenter
Windows Server 2008 Enterprise
Windows Server 2008 Standard
Windows Web Server 2008
Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
Microsoft Windows Server 2003, Standard Edition
Microsoft Windows Server 2003, Enterprise Edition
Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
Microsoft Windows Server 2003, Web Edition
Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
Microsoft Windows Server 2003, Datacenter Edition for Itanium-based Systems
Microsoft Windows Small Business Server 2003 Standard Edition
Microsoft Windows Server 2003 Service Pack 2, when used with:
Microsoft Windows Server 2003, Standard Edition
Microsoft Windows Server 2003, Enterprise Edition
Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
Microsoft Windows Server 2003, Web Edition
Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
Microsoft Windows Server 2003, Datacenter Edition for Itanium-based Systems
Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)
12 of 13 3/21/2009 8:56 PM
Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)

Microsoft Windows 2000 Service Pack 4, when used with:
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional Edition
Microsoft Small Business Server 2000 Standard Edition
Keywords: kbsurveynew kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertiseinter KB961063
Get Help Now

Contact a support professional by E-mail, Online, or Phone
Help and Support

©2009 Microsoft
13 of 13 3/21/2009 8:56 PM

MS09-008 - Description of Th..

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

MS09-008 - Description of Th..

Uploaded by

Copyright:

Available Formats

MS09-008: Description of the security update for DNS server: Ma... http://support.microsoft.

Home users: http://www.microsoft.com/protect/computer/updates/bulletins/200903.mspx (http://www.microsoft.com/protect

How to obtain help and support for this security update

Known issues with this security update

Resource Consumption Issues

For all supported editions of Microsoft Windows 2000 Service Pack 4

File name File version File size Date Time Platform

Afd.sys 5.0.2195.7204 119,152 17-Oct-2008 11:38 x86

Dns.exe 5.0.2195.7260 335,120 14-Feb-2009 00:24 x86

Dnsperf.dll 5.0.2195.7157 33,552 14-Feb-2009 01:23 x86

Dnsperf.h Not Applicable 6,642 30-Apr-2008 23:49 Not Applicable

Dnsperf.ini Not Applicable 11,597 30-Apr-2008 23:49 Not Applicable

Msafd.dll 5.0.2195.7158 105,744 14-Feb-2009 01:23 x86

Sp3res.dll 5.0.2195.7226 6,313,472 05-Jan-2009 20:37 x86

Tcpip.sys 5.0.2195.7162 320,528 18-Jun-2008 23:35 x86

Windows Server 2003 file information notes

"Service branch” columns.

For all supported x86-based versions of Windows Server 2003

6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 13:52 x86 SP1 SP1GDR

Afd.sys 5.2.3790.3229 150,528 16-Oct-2008 14:40 x86 SP1 SP1GDR

Dns.exe 5.2.3790.3295 449,536 16-Feb-2009 09:12 x86 SP1 SP1GDR

Dnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:32 x86 SP1 SP1GDR

Mswsock.dll 5.2.3790.3161 256,512 20-Jun-2008 19:24 x86 SP1 SP1GDR

Tcpip.sys 5.2.3790.3161 333,824 20-Jun-2008 15:59 x86 SP1 SP1GDR

Tcpip6.sys 5.2.3790.3161 225,856 20-Jun-2008 10:13 Not Applicable SP1 SP1GDR

W03a2409.dll 5.2.3790.3295 40,960 16-Feb-2009 10:26 x86 SP1 SP1GDR

6to4svc.dll 5.2.3790.2771 99,840 16-Aug-2006 14:01 x86 SP1 SP1QFE

Afd.sys 5.2.3790.3229 153,088 16-Oct-2008 14:43 x86 SP1 SP1QFE

Dns.exe 5.2.3790.3295 450,560 16-Feb-2009 10:37 x86 SP1 SP1QFE

Dnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:04 x86 SP1 SP1QFE

Mswsock.dll 5.2.3790.3161 258,048 20-Jun-2008 19:36 x86 SP1 SP1QFE

Tcpip.sys 5.2.3790.3161 394,752 20-Jun-2008 10:38 x86 SP1 SP1QFE

Tcpip6.sys 5.2.3790.3161 225,984 20-Jun-2008 10:04 Not Applicable SP1 SP1QFE

W03a2409.dll 5.2.3790.3295 40,960 16-Feb-2009 10:26 x86 SP1 SP1QFE

Afd.sys 5.2.3790.4392 150,528 16-Oct-2008 15:46 x86 SP2 SP2GDR

Dns.exe 5.2.3790.4460 450,048 16-Feb-2009 11:37 x86 SP2 SP2GDR

Dnsperf.dll 5.2.3790.4460 11,776 17-Feb-2009 08:26 x86 SP2 SP2GDR

Mswsock.dll 5.2.3790.4318 256,000 20-Jun-2008 18:32 x86 SP2 SP2GDR

Tcpip.sys 5.2.3790.4318 384,000 20-Jun-2008 14:22 x86 SP2 SP2GDR

Tcpip6.sys 5.2.3790.4318 234,368 20-Jun-2008 13:55 Not Applicable SP2 SP2GDR

W03a3409.dll 5.2.3790.4430 26,112 18-Dec-2008 16:53 x86 SP2 SP2GDR

Afd.sys 5.2.3790.4392 150,528 16-Oct-2008 16:03 x86 SP2 SP2QFE

Dns.exe 5.2.3790.4460 450,560 16-Feb-2009 10:25 x86 SP2 SP2QFE

Dnsperf.dll 5.2.3790.4460 11,776 17-Feb-2009 08:12 x86 SP2 SP2QFE

Mswsock.dll 5.2.3790.4318 257,024 20-Jun-2008 19:01 x86 SP2 SP2QFE

Tcpip.sys 5.2.3790.4318 390,656 20-Jun-2008 11:01 x86 SP2 SP2QFE

Tcpip6.sys 5.2.3790.4318 234,496 20-Jun-2008 10:19 Not Applicable SP2 SP2QFE

W03a3409.dll 5.2.3790.4430 26,112 18-Dec-2008 16:53 x86 SP2 SP2QFE

For all supported x64-based versions of Windows Server 2003

6to4svc.dll 5.2.3790.2771 124,416 17-Feb-2009 08:45 x64 SP1 SP1GDR

Afd.sys 5.2.3790.3229 299,008 17-Feb-2009 08:45 x64 SP1 SP1GDR

Dns.exe 5.2.3790.3295 777,216 17-Feb-2009 08:45 x64 SP1 SP1GDR

Dnsperf.dll 5.2.3790.3295 14,336 17-Feb-2009 08:45 x64 SP1 SP1GDR

Mswsock.dll 5.2.3790.3161 490,496 17-Feb-2009 08:45 x64 SP1 SP1GDR

Tcpip.sys 5.2.3790.3161 703,488 17-Feb-2009 08:46 x64 SP1 SP1GDR

Tcpip6.sys 5.2.3790.3161 362,752 17-Feb-2009 08:46 x64 SP1 SP1GDR

W03a2409.dll 5.2.3790.3295 41,472 17-Feb-2009 08:46 x64 SP1 SP1GDR

W6to4svc.dll 5.2.3790.2771 99,840 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW

Wdns.exe 5.2.3790.3295 449,536 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW

Wdnsperf.dll 5.2.3790.3295 11,776 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW

Wmswsock.dll 5.2.3790.3161 232,448 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW

Ww03a2409.dll 5.2.3790.3295 40,960 17-Feb-2009 08:46 x86 SP1 SP1GDR\WOW