Re: Deploy Security Patch with SMS 2003

From: Chris Faigle (Faigle_at_discussions.microsoft.com)
Date: 07/06/04

  • Next message: Robbie: "When deploying .MSI the shortcuts are missing." 
    Date: Tue, 6 Jul 2004 12:07:02 -0700

    Critical updates? Security fix? What is the difference and why should I care? Why did we go through all this hassle to set up SMS 2003 if we cannot easily push out patches that computers are getting automatically through WindowsUpdates? Why have this crazy convoluted automated detection process if it isn't even going to work for something which at the end of the day is a one bit registry change.

    I guess since the patch doesn't solve the real problem anyway, why should it have a (relatively simple) mechanism to push it out, particularly since these holes have been known for such a long time.

    I do not have all day every day week in and week out to mess with fixing up Microsoft's errors compounded by ridiculousness like this.

    This answer is entirely unacceptable.

    Chris Faigle
    IS Security
    University of Richmond

    "Shafqat Khan [MSFT]" wrote:

    > <copying from another thread about this patch>
    >
    > This will not be added to mssecure.xml and will not be detected by MBSA 1.2.
    > This was released as a critical update and is not categorized as a security
    > fix. It is a settings change to block one way of exploiting the
    > vulnerability. One can still use SMS to deploy this settings change script.
    > See guidance at:
    >
    > Deploying Software Updates Using the SMS Software Distribution Feature:
    >
    > http://www.microsoft.com/technet/prodtechnol/sms/sms2003/patchupdate.mspx
    >
    >
    > 867832 How to distribute software updates that are not detected by the
    > Microsoft Baseline Security Analyzer in Systems Management Server 2003
    >
    >
    > "Chris Faigle" <Chris Faigle@discussions.microsoft.com> wrote in message
    > news:7386FDB8-43E9-4D0C-84BC-9F8E6F0323B9@microsoft.com...
    > > KB870669 has not shown up on our SMS 2003 server either, even though it is
    > set to sync every two hours. Can Microsoft please provide more information
    > on this?
    > >
    >
    >
    >

  • Next message: Robbie: "When deploying .MSI the shortcuts are missing."

    Relevant Pages

    • Re: Deploy Security Patch with SMS 2003
      ... One can still use SMS to deploy this settings change script. ... Deploying Software Updates Using the SMS Software Distribution Feature: ... Microsoft Baseline Security Analyzer in Systems Management Server 2003 ...
      (microsoft.public.sms.swdist)
    • Microsoft Baseline Security Analyzer exploit (Exposed vulnerabilities list)
      ... Microsoft Baseline Security Analyzer exploit ... Finjan Software Security Advisory ... MBSA analyzes the system for security vulnerabilities, a report is created ... the Java and the ActiveX demos at the above test site. ...
      (Vuln-Dev)
    • Microsoft Baseline Security Analyzer exploit (Exposed vulnerabilities list)
      ... Microsoft Baseline Security Analyzer exploit ... Finjan Software Security Advisory ... MBSA analyzes the system for security vulnerabilities, a report is created ... the Java and the ActiveX demos at the above test site. ...
      (Bugtraq)
    • Re: Deploy Security Patch with SMS 2003
      ... Security fix? ... It is a settings change to block one way of exploiting the ... >> Deploying Software Updates Using the SMS Software Distribution Feature: ...
      (microsoft.public.sms.swdist)
    • PBX Security
      ... I return with the reasons I freaked when I saw what a PBX ... ANY extension, and not just any user can do that, with proper ... cryptographic controls on software updates for a PBX. ... relevant and enforced security policy, security conscious users, etc and ...
      (Pen-Test)
    • Quantcast