Microsoft Updates Security Patch for Windows TSE

Back in December 2002, Microsoft released a patch for Windows NT 4.0, Terminal Server Edition (WTS) to correct problems with certain message handling functions. A problem in WTS let intruders elevate privileges on a system.

However, the patch installation routine contained a bug when the patch was installed on Japanese versions of NT multiprocessor systems. On those versions, the installation routine didn't copy the correct binary files onto the system, and as a result, WTS would fail. Users who installed the patch on Windows 2000 and Windows XP were unaffected by the installation error.

After almost 5 months, the company finally corrected the installation routine so that the proper binaries are copied onto WTS systems. Microsoft has updated its related Security Bulletin MS02-071 (Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation), with links to corrected patches.

That's good news for Microsoft's Japanese customers who use WTS on multiprocessor NT systems. But I bet a lot of Japanese are wondering why it took the company almost 5 months to correct a simple installation routine.