In "Microsoft Security Bulletin MS10-039" there is a workaround wich describes how to deny access to "%ProgramFiles%\Common Files\Microsoft Shared\Web Server Extensions\12\TEMPLATE\LAYOUTS\Help.aspx.
Does this mean that when applying the now available security updates (in my case KB979445 and KB983444) one should expect that this file gets replaced with a newer version?
I´m wondering because it struck me that I forgot to remove the workaround before applying the patches wich should lead to that the account used for applying them had no permission to change this file, I also noticed that the file in question
is still last modified 2006.
View Complete Post