Patching MSMQ Vulnerabilities

I was working with WCF Technologies in one of my past projets and some of the Microsoft bugs really freak me out. Mainly, we have a WCF channel with NetMsmqBinding and MSMQ channel is authenticated through Certificates in a bi-directional way. In certain instances, we have identified that received MSMQ messages become poisoned due to no reason.

This is an identified Microsoft bug in MSMQ 3.0 version in following OS, Service Packs and patches; however it is hard to find a link explaining all affected OS and Service Packs.

Symptom:-

When we have a WCF Channel with MSMQ Binding, and we receive some messages from another source using an external certificate, the MSMQ 3.0 is rejecting those received messages by considering it as a poisoned message.

Root Cause:-

This is a known issue in the MSMQ 3.0 version in following OS+ Service Packs+ Patches.

Microsoft Windows Server 2003 + Service Pack 2 + KB 971032 (KB971032 cause this issue)

Microsoft Windows XP + Service Pack 2 + KB 971032 (KB971032 cause this issue)

Microsoft Windows XP + Service Pack 3 (Service Pack 3 cause this issue)

Resolution:-

Affected SW

Resolution

Microsoft Windows Server 2003 + Service Pack 2 + KB 971032

Install following hot-fix to resolve this issue

http://support.microsoft.com/kb/2028919

Microsoft Windows XP + Service Pack 2 + KB 971032

Upgrade to Service Pack 3 and install following hot-fix to resolve this issue

http://support.microsoft.com/kb/959682

Microsoft Windows XP + Service Pack 3

Install following hot-fix to resolve this issue

http://support.microsoft.com/kb/959682

No comments:

Post a Comment