MS09-070: Vulnerabilities in Active Directory Federation Services could allow remote code execution

View products that this article applies to.

Introduction

Microsoft has released security bulletin MS09-070. To view the complete security bulletin, visit one of the following Microsoft Web sites:

Home users:
http://www.microsoft.com/technet/security/bulletin/MS09-dec.mspx
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
http://update.microsoft.com/microsoftupdate
IT professionals:
http://www.microsoft.com/technet/security/bulletin/MS09-070.mspx

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top

More information

Known issues with this security update

Wctx parameter change
This security update changes the contents of the wctx parameter. The wctx parameter is an optional query string parameter for the HTTP 1.1 methods GET and POST. It is an opaque value. Therefore, applications should not assume any value for it. Applications that assume any value for the wctx parameter may be affected by this update.

The contents of the wctx parameter are available in cookies on client computers.

The WS-Federation Passive Requestor Profile standard defines this parameter as follows:
Wctx: This optional parameter is an opaque context value that must be returned with the issued token if it is passed in the request.
Username logging deprecation
After this security update is installed on Windows Server 2003-based systems, NT Token applications will not log user names in Microsoft Internet Information Server (IIS) logs on the Web server any longer.

↑ Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Server 2003 file information

The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Ifsext.dll	5.2.3790.4578	96,256	26-Aug-2009	03:23	x64	SP2	SP2GDR
Ifsfilt.dll	5.2.3790.4578	28,672	26-Aug-2009	03:23	x64	SP2	SP2GDR
Ifsutils.dll	5.2.3790.4578	144,896	26-Aug-2009	03:23	x64	SP2	SP2GDR
System.web.security.singlesignon.dll	5.2.3790.4578	585,728	26-Aug-2009	03:23	x86	SP2	SP2GDR
Adfsreg.exe	5.2.3790.4578	9,216	26-Aug-2009	03:20	x64	SP2	SP2QFE
Ifsext.dll	5.2.3790.4578	96,256	26-Aug-2009	03:20	x64	SP2	SP2QFE
Ifsfilt.dll	5.2.3790.4578	28,672	26-Aug-2009	03:20	x64	SP2	SP2QFE
Ifsutils.dll	5.2.3790.4578	144,896	26-Aug-2009	03:20	x64	SP2	SP2QFE
System.web.security.singlesignon.dll	5.2.3790.4578	585,728	26-Aug-2009	03:20	x86	SP2	SP2QFE

For all supported x86-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
System.web.security.singlesignon.dll	5.2.3790.4578	585,728	25-Aug-2009	14:44	x86	SP2	SP2GDR
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:35	x86	SP2	SP2GDR\IA
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:35	x86	SP2	SP2GDR\IA
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:35	x86	SP2	SP2GDR\IA
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:35	x86	SP2	SP2GDR\ID
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:35	x86	SP2	SP2GDR\ID
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:35	x86	SP2	SP2GDR\ID
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:35	x86	SP2	SP2GDR\IS
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:35	x86	SP2	SP2GDR\IS
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:35	x86	SP2	SP2GDR\IS
Adfsreg.exe	5.2.3790.4578	7,680	24-Aug-2009	11:57	x86	SP2	SP2QFE
System.web.security.singlesignon.dll	5.2.3790.4578	585,728	25-Aug-2009	14:42	x86	SP2	SP2QFE
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:31	x86	SP2	SP2QFE\IA
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:31	x86	SP2	SP2QFE\IA
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:31	x86	SP2	SP2QFE\IA
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:31	x86	SP2	SP2QFE\ID
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:31	x86	SP2	SP2QFE\ID
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:31	x86	SP2	SP2QFE\ID
Ifsext.dll	5.2.3790.4578	77,824	25-Aug-2009	14:31	x86	SP2	SP2QFE\IS
Ifsfilt.dll	5.2.3790.4578	20,480	25-Aug-2009	14:31	x86	SP2	SP2QFE\IS
Ifsutils.dll	5.2.3790.4578	101,376	25-Aug-2009	14:31	x86	SP2	SP2QFE\IS

Windows Server 2008 file information

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

Version	Product	Milestone	Service branch
6.0.6001.18`xxx`	Windows Server 2008 SP1	SP1	GDR
6.0.6001.22`xxx`	Windows Server 2008 SP1	SP1	LDR
6.0.6002.18`xxx`	Windows Server 2008 SP2	SP2	GDR
6.0.6002.22`xxx`	Windows Server 2008 SP2	SP2	LDR

Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008

File name	File version	File size	Date	Time	Platform
System.web.security.singlesignon.dll	6.0.6001.18311	589,824	14-Aug-2009	17:41	x86
System.web.security.singlesignon.dll	6.0.6001.22498	589,824	17-Aug-2009	13:46	x86
System.web.security.singlesignon.dll	6.0.6002.18091	589,824	14-Aug-2009	16:56	x86
System.web.security.singlesignon.dll	6.0.6002.22201	589,824	17-Aug-2009	13:04	x86
Adfsgc.exe	6.0.6001.18000	117,248	19-Jan-2008	07:33	x86
Adfsmig.dll	6.0.6001.18000	150,016	19-Jan-2008	07:33	x86
Adfsres.dll	6.0.6001.18000	58,368	19-Jan-2008	05:42	x86
Ifsutils.dll	6.0.6001.18311	110,080	14-Aug-2009	16:28	x86
Adfsgc.exe	6.0.6001.22498	117,248	17-Aug-2009	10:10	x86
Adfsmig.dll	6.0.6001.22498	150,016	17-Aug-2009	12:27	x86
Adfsres.dll	6.0.6001.22498	58,368	17-Aug-2009	10:10	x86
Ifsutils.dll	6.0.6001.22498	110,080	17-Aug-2009	12:29	x86
Adfsgc.exe	6.0.6002.18005	117,248	11-Apr-2009	06:27	x86
Adfsmig.dll	6.0.6002.18005	150,016	11-Apr-2009	06:28	x86
Adfsres.dll	6.0.6002.18005	58,368	11-Apr-2009	04:30	x86
Ifsutils.dll	6.0.6002.18091	110,080	14-Aug-2009	13:34	x86
Adfsgc.exe	6.0.6002.22201	117,248	17-Aug-2009	09:44	x86
Adfsmig.dll	6.0.6002.22201	150,016	17-Aug-2009	11:58	x86
Adfsres.dll	6.0.6002.22201	58,368	17-Aug-2009	09:43	x86
Ifsutils.dll	6.0.6002.22201	110,080	17-Aug-2009	09:43	x86
Adfs_schema.xml	Not Applicable	4,616	05-Jan-2008	11:34	Not Applicable
Ifsext.dll	6.0.6001.18311	96,256	14-Aug-2009	16:28	x86
Ifsfilt.dll	6.0.6001.18311	20,480	14-Aug-2009	16:28	x86
Ifssvc.exe	6.0.6001.18000	54,272	19-Jan-2008	07:33	x86
Adfs_schema.xml	Not Applicable	4,616	01-Apr-2009	19:09	Not Applicable
Ifsext.dll	6.0.6001.22498	96,256	17-Aug-2009	12:29	x86
Ifsfilt.dll	6.0.6001.22498	20,480	17-Aug-2009	12:29	x86
Ifssvc.exe	6.0.6001.22498	54,272	17-Aug-2009	10:10	x86
Adfs_schema.xml	Not Applicable	4,616	16-Apr-2008	00:45	Not Applicable
Ifsext.dll	6.0.6002.18091	96,256	14-Aug-2009	13:34	x86
Ifsfilt.dll	6.0.6002.18091	20,480	14-Aug-2009	13:34	x86
Ifssvc.exe	6.0.6002.18005	54,272	11-Apr-2009	06:27	x86
Adfs_schema.xml	Not Applicable	4,616	03-Apr-2009	21:31	Not Applicable
Ifsext.dll	6.0.6002.22201	96,256	17-Aug-2009	09:43	x86
Ifsfilt.dll	6.0.6002.22201	20,480	17-Aug-2009	09:43	x86
Ifssvc.exe	6.0.6002.22201	54,272	17-Aug-2009	09:44	x86
Package.cab	Not Applicable	291,932	18-Aug-2009	18:57	Not Applicable

For all supported x64-based versions of Windows Server 2008

File name	File version	File size	Date	Time	Platform	Service branch
Adfsgc.exe	6.0.6001.18000	141,824	19-Jan-2008	08:00	x64	Not Applicable
Adfsmig.dll	6.0.6001.18000	165,888	19-Jan-2008	08:00	x64	Not Applicable
Adfsres.dll	6.0.6001.18000	58,368	19-Jan-2008	06:17	x64	Not Applicable
Ifsutils.dll	6.0.6001.18311	125,952	14-Aug-2009	17:27	x64	Not Applicable
Adfsgc.exe	6.0.6001.22498	141,824	17-Aug-2009	10:11	x64	Not Applicable
Adfsmig.dll	6.0.6001.22498	165,888	17-Aug-2009	12:11	x64	Not Applicable
Adfsres.dll	6.0.6001.22498	58,368	17-Aug-2009	10:11	x64	Not Applicable
Ifsutils.dll	6.0.6001.22498	125,952	17-Aug-2009	12:12	x64	Not Applicable
Adfsgc.exe	6.0.6002.18005	141,824	11-Apr-2009	07:09	x64	Not Applicable
Adfsmig.dll	6.0.6002.18005	165,888	11-Apr-2009	07:11	x64	Not Applicable
Adfsres.dll	6.0.6002.18005	58,368	11-Apr-2009	05:23	x64	Not Applicable
Ifsutils.dll	6.0.6002.18091	125,952	14-Aug-2009	16:03	x64	Not Applicable
Adfsgc.exe	6.0.6002.22201	141,824	17-Aug-2009	10:06	x64	Not Applicable
Adfsmig.dll	6.0.6002.22201	165,888	17-Aug-2009	12:17	x64	Not Applicable
Adfsres.dll	6.0.6002.22201	58,368	17-Aug-2009	10:06	x64	Not Applicable
Ifsutils.dll	6.0.6002.22201	125,952	17-Aug-2009	12:19	x64	Not Applicable
Adfs_schema.xml	Not Applicable	4,616	05-Jan-2008	11:34	Not Applicable	Not Applicable
Ifsext.dll	6.0.6001.18311	107,520	14-Aug-2009	17:27	x64	Not Applicable
Ifsfilt.dll	6.0.6001.18311	24,576	14-Aug-2009	17:27	x64	Not Applicable
Ifssvc.exe	6.0.6001.18000	61,952	19-Jan-2008	08:00	x64	Not Applicable
Adfs_schema.xml	Not Applicable	4,616	01-Apr-2009	16:29	Not Applicable	Not Applicable
Ifsext.dll	6.0.6001.22498	107,520	17-Aug-2009	12:12	x64	Not Applicable
Ifsfilt.dll	6.0.6001.22498	24,576	17-Aug-2009	12:12	x64	Not Applicable
Ifssvc.exe	6.0.6001.22498	61,952	17-Aug-2009	10:11	x64	Not Applicable
Adfs_schema.xml	Not Applicable	4,616	03-Sep-2008	18:54	Not Applicable	Not Applicable
Ifsext.dll	6.0.6002.18091	107,520	14-Aug-2009	16:03	x64	Not Applicable
Ifsfilt.dll	6.0.6002.18091	24,576	14-Aug-2009	16:03	x64	Not Applicable
Ifssvc.exe	6.0.6002.18005	61,952	11-Apr-2009	07:10	x64	Not Applicable
Adfs_schema.xml	Not Applicable	4,616	03-Apr-2009	21:01	Not Applicable	Not Applicable
Ifsext.dll	6.0.6002.22201	107,520	17-Aug-2009	12:19	x64	Not Applicable
Ifsfilt.dll	6.0.6002.22201	24,576	17-Aug-2009	12:19	x64	Not Applicable
Ifssvc.exe	6.0.6002.22201	61,952	17-Aug-2009	10:07	x64	Not Applicable
System.web.security.singlesignon.dll	6.0.6001.18311	589,824	14-Aug-2009	18:39	x86	Not Applicable
System.web.security.singlesignon.dll	6.0.6001.22498	589,824	17-Aug-2009	13:27	x86	Not Applicable
System.web.security.singlesignon.dll	6.0.6002.18091	589,824	14-Aug-2009	17:07	x86	Not Applicable
System.web.security.singlesignon.dll	6.0.6002.22201	589,824	17-Aug-2009	13:24	x86	Not Applicable
Ifsutils.dll	6.0.6001.18311	110,080	14-Aug-2009	16:28	x86	WOW64_MICROSOFT-WINDOWS-ADFS-COMMONTOALL-FILES_31BF3856AD364E35_6.0.6001.18311_NONE_D694B989B8588CAA
Ifsutils.dll	6.0.6001.22498	110,080	17-Aug-2009	12:29	x86	WOW64_MICROSOFT-WINDOWS-ADFS-COMMONTOALL-FILES_31BF3856AD364E35_6.0.6001.22498_NONE_D6CED8FAD1B0BD5D
Ifsutils.dll	6.0.6002.18091	110,080	14-Aug-2009	13:34	x86	WOW64_MICROSOFT-WINDOWS-ADFS-COMMONTOALL-FILES_31BF3856AD364E35_6.0.6002.18091_NONE_D824AC11B5BFC156
Ifsutils.dll	6.0.6002.22201	110,080	17-Aug-2009	09:43	x86	WOW64_MICROSOFT-WINDOWS-ADFS-COMMONTOALL-FILES_31BF3856AD364E35_6.0.6002.22201_NONE_D90F9A0ECE9462CE

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

File name	Windows6.0-kb971726-x86.cab
File version	Not Applicable
File size	447,047
Date (UTC)	18-Aug-2009
Time (UTC)	18:54

File name	Windows6.0-kb971726-x86.xml
File version	Not Applicable
File size	442
Date (UTC)	18-Aug-2009
Time (UTC)	18:56

File name	Wsusscan.cab
File version	Not Applicable
File size	163,870
Date (UTC)	18-Aug-2009
Time (UTC)	19:06

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6001.18311_none_796ed3bd75076aba.manifest
File version	Not Applicable
File size	4,513
Date (UTC)	14-Aug-2009
Time (UTC)	18:23

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6001.22498_none_79a8f32e8e5f9b6d.manifest
File version	Not Applicable
File size	4,513
Date (UTC)	17-Aug-2009
Time (UTC)	14:25

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6002.18091_none_7afec645726e9f66.manifest
File version	Not Applicable
File size	4,513
Date (UTC)	14-Aug-2009
Time (UTC)	18:12

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6002.22201_none_7be9b4428b4340de.manifest
File version	Not Applicable
File size	4,513
Date (UTC)	17-Aug-2009
Time (UTC)	13:40

File name	Package_1_for_kb971726_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,801
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_1_for_kb971726~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	4,227
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_2_for_kb971726_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,740
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_2_for_kb971726~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,452
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_3_for_kb971726_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,959
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_3_for_kb971726~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	4,392
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_4_for_kb971726_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,740
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_4_for_kb971726~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,458
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server_0_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,076
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server_0~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	2,115
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server_1_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,620
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server_1~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,652
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server_bf~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,691
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Package_for_kb971726_server~31bf3856ad364e35~x86~~6.0.1.1.mum
File version	Not Applicable
File size	1,722
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	Update-bf.mum
File version	Not Applicable
File size	1,969
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_1e400ac99e699565ba585f6030199b09_31bf3856ad364e35_6.0.6001.18311_none_cb2a5025cfce8849.manifest
File version	Not Applicable
File size	710
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_29a826d1836739f0bc15387af330dd2a_31bf3856ad364e35_6.0.6001.22498_none_e2ac29a67fcb4521.manifest
File version	Not Applicable
File size	703
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_4ade23bdda9ef47d064097847fc9d098_31bf3856ad364e35_6.0.6002.22201_none_2337a06198691f61.manifest
File version	Not Applicable
File size	706
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_4b9722d066c3b31025809cde5abccc70_31bf3856ad364e35_6.0.6002.22201_none_8b4cbc13093fb950.manifest
File version	Not Applicable
File size	710
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_5869e89efda79de62f65737891874a2e_31bf3856ad364e35_6.0.6001.22498_none_6c3f1703e4154a77.manifest
File version	Not Applicable
File size	706
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_591d691ccfb016883d0d816b920b82de_31bf3856ad364e35_6.0.6001.22498_none_085e7ea32c9dcb35.manifest
File version	Not Applicable
File size	710
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_60e348fac8995a2566839123a8aabef3_31bf3856ad364e35_6.0.6001.18311_none_86aaeb868903b0e8.manifest
File version	Not Applicable
File size	703
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_823be3afeaaeb4f6c1a2e42f4d67b977_31bf3856ad364e35_6.0.6001.18311_none_16331516636955f6.manifest
File version	Not Applicable
File size	706
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_8f34b7aeeb9cee30a29d1bb4274c5b23_31bf3856ad364e35_6.0.6002.18091_none_a4257306c266a885.manifest
File version	Not Applicable
File size	710
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_99a19f9baf68b2b8fc8d17454cee59fd_31bf3856ad364e35_6.0.6002.18091_none_d83e18123aef65ea.manifest
File version	Not Applicable
File size	703
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_d4b287301f52d4f3dc4b6876f02c396c_31bf3856ad364e35_6.0.6002.22201_none_ff0c4702f12a40a7.manifest
File version	Not Applicable
File size	703
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_d60dc98c55357b851b6da17f07cc68d7_31bf3856ad364e35_6.0.6002.18091_none_a1db6a0fbc0783b3.manifest
File version	Not Applicable
File size	706
Date (UTC)	18-Aug-2009
Time (UTC)	05:58

File name	X86_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.18311_none_702173b3cb9a5979.manifest
File version	Not Applicable
File size	16,395
Date (UTC)	18-Aug-2009
Time (UTC)	06:02

File name	X86_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.22498_none_705b9324e4f28a2c.manifest
File version	Not Applicable
File size	15,309
Date (UTC)	17-Aug-2009
Time (UTC)	14:25

File name	X86_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.18091_none_71b1663bc9018e25.manifest
File version	Not Applicable
File size	16,395
Date (UTC)	18-Aug-2009
Time (UTC)	06:02

File name	X86_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.22201_none_729c5438e1d62f9d.manifest
File version	Not Applicable
File size	15,309
Date (UTC)	17-Aug-2009
Time (UTC)	13:40

File name	X86_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.18311_none_bcd7e0df89424c0a.manifest
File version	Not Applicable
File size	18,589
Date (UTC)	18-Aug-2009
Time (UTC)	06:02

File name	X86_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.22498_none_bd120050a29a7cbd.manifest
File version	Not Applicable
File size	17,602
Date (UTC)	17-Aug-2009
Time (UTC)	14:20

File name	X86_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.18091_none_be67d36786a980b6.manifest
File version	Not Applicable
File size	18,589
Date (UTC)	18-Aug-2009
Time (UTC)	06:02

File name	X86_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.22201_none_bf52c1649f7e222e.manifest
File version	Not Applicable
File size	17,602
Date (UTC)	17-Aug-2009
Time (UTC)	13:38

File name	Package.cab
File version	Not Applicable
File size	291,932
Date (UTC)	18-Aug-2009
Time (UTC)	18:57

Additional files for all supported x64-based versions of Windows Server 2008

FileManifest-table #2-->

File name	Windows6.0-kb971726-x64.cab
File version	Not Applicable
File size	517,263
Date (UTC)	18-Aug-2009
Time (UTC)	18:54
Platform	Not Applicable

File name	Windows6.0-kb971726-x64.xml
File version	Not Applicable
File size	444
Date (UTC)	18-Aug-2009
Time (UTC)	18:56
Platform	Not Applicable

File name	Wsusscan.cab
File version	Not Applicable
File size	164,080
Date (UTC)	18-Aug-2009
Time (UTC)	19:06
Platform	Not Applicable

File name	Amd64_28611f67e83cbb9b6e0317e7ffe19c2f_31bf3856ad364e35_6.0.6001.18311_none_40063c4456b88721.manifest
File version	Not Applicable
File size	1,062
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_29a826d1836739f0bc15387af330dd2a_31bf3856ad364e35_6.0.6001.22498_none_3ecac52a3828b657.manifest
File version	Not Applicable
File size	705
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_60e348fac8995a2566839123a8aabef3_31bf3856ad364e35_6.0.6001.18311_none_e2c9870a4161221e.manifest
File version	Not Applicable
File size	705
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_70396ddff3b7fd07ab53bc587c32e40e_31bf3856ad364e35_6.0.6002.22201_none_39352515bf787644.manifest
File version	Not Applicable
File size	1,070
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_935a86570f446a806d5d4431b489b79f_31bf3856ad364e35_6.0.6001.18311_none_91db56eaef456055.manifest
File version	Not Applicable
File size	1,070
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_940feabb27634c5c4dcc6a177b29515b_31bf3856ad364e35_6.0.6002.18091_none_1e0d2b558f054fa8.manifest
File version	Not Applicable
File size	1,062
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_99a19f9baf68b2b8fc8d17454cee59fd_31bf3856ad364e35_6.0.6002.18091_none_345cb395f34cd720.manifest
File version	Not Applicable
File size	705
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_9e563a026b4ed3aebb49d0bc73b08c0c_31bf3856ad364e35_6.0.6001.22498_none_b21e88bc197ab19e.manifest
File version	Not Applicable
File size	1,062
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_b351688ff22e561ee57637936ef2517f_31bf3856ad364e35_6.0.6002.22201_none_8b52e823cec7aed2.manifest
File version	Not Applicable
File size	1,062
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_b998d476967f6ed2149114a533da7963_31bf3856ad364e35_6.0.6002.18091_none_0a442767221e4ad2.manifest
File version	Not Applicable
File size	1,070
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_d4b287301f52d4f3dc4b6876f02c396c_31bf3856ad364e35_6.0.6002.22201_none_5b2ae286a987b1dd.manifest
File version	Not Applicable
File size	705
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_fe88c1c3dc05f7ad75d6792865f5c704_31bf3856ad364e35_6.0.6001.22498_none_bbb54b7099f2c312.manifest
File version	Not Applicable
File size	1,070
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.18311_none_cc400f3783f7caaf.manifest
File version	Not Applicable
File size	16,445
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.22498_none_cc7a2ea89d4ffb62.manifest
File version	Not Applicable
File size	15,359
Date (UTC)	17-Aug-2009
Time (UTC)	13:59
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.18091_none_cdd001bf815eff5b.manifest
File version	Not Applicable
File size	16,445
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.22201_none_cebaefbc9a33a0d3.manifest
File version	Not Applicable
File size	15,359
Date (UTC)	17-Aug-2009
Time (UTC)	13:59
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.18311_none_18f67c63419fbd40.manifest
File version	Not Applicable
File size	18,651
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.22498_none_19309bd45af7edf3.manifest
File version	Not Applicable
File size	17,664
Date (UTC)	17-Aug-2009
Time (UTC)	13:56
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.18091_none_1a866eeb3f06f1ec.manifest
File version	Not Applicable
File size	18,651
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Amd64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.22201_none_1b715ce857db9364.manifest
File version	Not Applicable
File size	17,664
Date (UTC)	17-Aug-2009
Time (UTC)	13:56
Platform	Not Applicable

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6001.18311_none_796ed3bd75076aba.manifest
File version	Not Applicable
File size	4,533
Date (UTC)	14-Aug-2009
Time (UTC)	19:13
Platform	Not Applicable

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6001.22498_none_79a8f32e8e5f9b6d.manifest
File version	Not Applicable
File size	4,533
Date (UTC)	17-Aug-2009
Time (UTC)	13:59
Platform	Not Applicable

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6002.18091_none_7afec645726e9f66.manifest
File version	Not Applicable
File size	4,533
Date (UTC)	14-Aug-2009
Time (UTC)	17:34
Platform	Not Applicable

File name	Msil_system.web.security.singlesignon_31bf3856ad364e35_6.0.6002.22201_none_7be9b4428b4340de.manifest
File version	Not Applicable
File size	4,533
Date (UTC)	17-Aug-2009
Time (UTC)	13:58
Platform	Not Applicable

File name	Package_1_for_kb971726_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	3,041
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_1_for_kb971726~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	4,709
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_2_for_kb971726_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,970
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_2_for_kb971726~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	2,918
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_3_for_kb971726_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	3,202
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_3_for_kb971726~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	4,877
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_4_for_kb971726_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,970
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_4_for_kb971726~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	2,924
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	2,090
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server_0~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	2,129
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server_1_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,631
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server_1~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,663
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server_bf~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,701
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Package_for_kb971726_server~31bf3856ad364e35~amd64~~6.0.1.1.mum
File version	Not Applicable
File size	1,732
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Update-bf.mum
File version	Not Applicable
File size	1,984
Date (UTC)	18-Aug-2009
Time (UTC)	05:58
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.18311_none_d694b989b8588caa.manifest
File version	Not Applicable
File size	4,232
Date (UTC)	14-Aug-2009
Time (UTC)	18:14
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6001.22498_none_d6ced8fad1b0bd5d.manifest
File version	Not Applicable
File size	4,232
Date (UTC)	17-Aug-2009
Time (UTC)	14:16
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.18091_none_d824ac11b5bfc156.manifest
File version	Not Applicable
File size	4,232
Date (UTC)	14-Aug-2009
Time (UTC)	18:05
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-commontoall-files_31bf3856ad364e35_6.0.6002.22201_none_d90f9a0ece9462ce.manifest
File version	Not Applicable
File size	4,232
Date (UTC)	17-Aug-2009
Time (UTC)	13:33
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.18311_none_234b26b576007f3b.manifest
File version	Not Applicable
File size	4,770
Date (UTC)	14-Aug-2009
Time (UTC)	18:13
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6001.22498_none_238546268f58afee.manifest
File version	Not Applicable
File size	4,770
Date (UTC)	17-Aug-2009
Time (UTC)	14:15
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.18091_none_24db193d7367b3e7.manifest
File version	Not Applicable
File size	4,770
Date (UTC)	14-Aug-2009
Time (UTC)	18:05
Platform	Not Applicable

File name	Wow64_microsoft-windows-adfs-webagenttoken_31bf3856ad364e35_6.0.6002.22201_none_25c6073a8c3c555f.manifest
File version	Not Applicable
File size	4,770
Date (UTC)	17-Aug-2009
Time (UTC)	13:33
Platform	Not Applicable

File name	Package.cab
File version	Not Applicable
File size	292,042
Date (UTC)	18-Aug-2009
Time (UTC)	18:56
Platform	Not Applicable

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: atdownload, kbbug, kbexpertiseinter, kbfix, kbsecbulletin, kbsecurity, kbsecvulnerability, kbsurveynew, KB971726

↑ Back to the top

Article Info

Article ID	:	971726
Revision	:	3
Created on	:	5/8/2012
Published on	:	5/8/2012
Exists online	:	False
Views	:	348

Microsoft KB Archive Search

MS09-070: Vulnerabilities in Active Directory Federation Services could allow remote code execution

Introduction

How to obtain help and support for this security update

More information

Known issues with this security update

File information

Windows Server 2003 file information

For all supported x64-based versions of Windows Server 2003

For all supported x86-based versions of Windows Server 2003

Windows Server 2008 file information

For all supported x86-based versions of Windows Server 2008

For all supported x64-based versions of Windows Server 2008

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

Additional files for all supported x64-based versions of Windows Server 2008

Applies to: