IAV 2012-A-0001 Question (.net framework patching)
-
Wednesday, October 31, 2012 1:14 PM
Our servers got scanned and it came back with a vulnerabity in C\windows\microsoft.net\framework\v2.0.50727\system.web.dll. Upon getting the details for that dll file, it showed version 2.0.50727.4955. The thing is, I applied the patch to fix it on 16 Oct 12. The patch KB2656351 is showing applied. It is a 2008r2 x64 server. I just have .net 3.5 SP1, 3.5.1 & 4.0 loaded on this server.
Would it be ok to just delete the folder "v2.0.50727" or are the files in that folder still in use?
Are all the older .net version folders just for backward compatability? There are six folders in the Framework folder. Ranging from 1.0, 1.1, 2.0, 3.0, 3.5 and 4.0.
Thank you.
All Replies
-
Friday, November 02, 2012 6:15 AMModerator
Hello,
---Would it be ok to just delete the folder "v2.0.50727" or are the files in that folder still in use?
Firstly, you need to go to HKEY_LOCAL_MACHINE\Software\Microsoft\NET Framework Setup\NDP\v2.0.50727. Look at the right side, if you see the string INSTALL with value "1", then this version of Framework is installed and is in use.
---Are all the older .net version folders just for backward compatability? There are six folders in the Framework folder. Ranging from 1.0, 1.1, 2.0, 3.0, 3.5 and 4.0.
.Net is a side by side technology. It builds on previous version as to allow for backwards compatibility. Believe me you want all of those folders on there with 4 because the minute you remove the older folders some apps will stop working. You'd be suprised at how many apps use deprecated components from 1.1
If you have any questions about installing or updating .Net, you’d ask in .Net Framework forum.
Thanks
Zhang- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Tuesday, November 06, 2012 8:48 AM
-
Tuesday, November 06, 2012 1:01 PMThank you for the reply. That information help allot.

