Re: Anyone have hard evidence of problems with Windows Automatic Upda tes?
From: Anthony Kim (Anthony.Kim@VW.COM)
Date: 03/20/03
- Previous message: Clark, Andre M.: "RE: Expire accounts from Active Directory after a period of inactivity"
- In reply to: Thomas Cameron: "Anyone have hard evidence of problems with Windows Automatic Upda tes?"
- Next in thread: James D. Stallard: "RE: Anyone have hard evidence of problems with Windows Automatic Updates?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 20 Mar 2003 16:58:19 -0600 From: Anthony Kim <Anthony.Kim@VW.COM> To: focus-ms@securityfocus.com
On Thu, Mar 20, 2003, Thomas Cameron wrote:
> All -
>
> We are using the Windows 2000 automatic update feature on several of our
> production servers.
>
> One of my fellow IT team members has expressed concern that Microsoft has a
> bad history of releasing hotfixes which break servers. I can find lots of
> anecdotal evidence that this has happened, but only a very limited number of
> cases where some specific configurations were negatively impacted by hotfix
> application.
>
> Does anyone have any hard evidence that automatic updates are a Bad
> Thing(tm)?
Read the paper published by WireX and Zero Knowledge Systems folks:
"Timing the Application of Security Patches for Optimal Uptime".
(Google for it.)
Based on a sample of 136 total CVE entries, 20 patches were
"determined to be faulty, all but one (CVE-2001-0341) had an
updated patch released." And the one was pulled and never
re-released.
Faulty patches are a real phenomenon.
----------------------------------------------------------------------
ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data!
It's as simple as placing additional SQL commands into a Web Form input
box giving hackers complete access to all your backend systems!
http://www.spidynamics.com/mktg/sqlinjection33
- Previous message: Clark, Andre M.: "RE: Expire accounts from Active Directory after a period of inactivity"
- In reply to: Thomas Cameron: "Anyone have hard evidence of problems with Windows Automatic Upda tes?"
- Next in thread: James D. Stallard: "RE: Anyone have hard evidence of problems with Windows Automatic Updates?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
