RE: Anyone have hard evidence of problems with Windows Automatic Updates?

From: James D. Stallard (james@leafgrove.com)
Date: 03/21/03

  • Next message: Thomas Cameron: "RE: Anyone have hard evidence of problems with Windows Automatic Upda tes?"
    From: james@leafgrove.com (James D. Stallard)
    To: "'Thomas Cameron'" <ThomasC@mip.com>, <focus-ms@securityfocus.com>
    Date: Fri, 21 Mar 2003 16:22:17 -0000
    
    

    Thomas

    I think you only have to look back at the debacle that was Windows NT4
    SP6.
    Microsoft released it over a year late, it was a Seriously Bad Thing
    (tm) and was pulled and re-released a short while later as SP6a

    In all fairness to Microsoft, they pretty much halted all development
    work for several months last year to engage in the "Trustworthy
    Computing Initiative" so perhaps the bad old days is a bad example.

    There is probably something in the archives about SP6/SP6a, if not I
    have plenty of archives from NTBugtraq that covered the subject in
    detail, which I would be happy to post somewhere public.

    Regards

    James D. Stallard

    -----Original Message-----
    From: Thomas Cameron [mailto:ThomasC@mip.com]
    Sent: 20 March 2003 20:49
    To: focus-ms@securityfocus.com
    Subject: Anyone have hard evidence of problems with Windows Automatic
    Updates?

    All -

    We are using the Windows 2000 automatic update feature on several of our
    production servers.

    One of my fellow IT team members has expressed concern that Microsoft
    has a bad history of releasing hotfixes which break servers. I can find
    lots of anecdotal evidence that this has happened, but only a very
    limited number of cases where some specific configurations were
    negatively impacted by hotfix application.

    Does anyone have any hard evidence that automatic updates are a Bad
    Thing(tm)?

    Thanks,
    Thomas Cameron, RHCE, CNE, MCSE, MCT
    Best Software - Non Profit and Government Division
    (512) 454-1844 x 307

    For the protection of our internal systems and those of our customers,
    Best Software, Inc., blocks most email attachments. Please use plain
    text when corresponding via email with Best Software.

    ----------------------------------------------------------------------
    ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data! It's as
    simple as placing additional SQL commands into a Web Form input
    box giving hackers complete access to all your backend systems!
    http://www.spidynamics.com/mktg/sqlinjection33

    ----------------------------------------------------------------------
    ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data!
    It's as simple as placing additional SQL commands into a Web Form input
    box giving hackers complete access to all your backend systems!
    http://www.spidynamics.com/mktg/sqlinjection33


  • Next message: Thomas Cameron: "RE: Anyone have hard evidence of problems with Windows Automatic Upda tes?"

    Relevant Pages

    • Re: SQLDUMPER library error message (PLEASE HELP)
      ... which "provides the interface to backup/restore Microsoft SQL server ... > I have the exact same problem running Windows XP Pro/SP2, ... The problem started after I uninstalled> Microsoft ... I'd go back to a Restore Point, but I don't know when> installed the ...
      (microsoft.public.windowsxp.general)
    • RE: Expire accounts from Active Directory after a period of inactivity
      ... One thing to be conscious of- in Windows 2000, ... you could not simply query AD for this information- you would ... How a Hacker Uses SQL Injection to Steal Your SQL ... > box giving hackers complete access to all your backend systems! ...
      (Focus-Microsoft)
    • RE: Help please
      ... you also want to move some user and install a Windows 2003 domain. ... Please note that it is possible to access the SQL server on SBS 2000 domain ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Re: SQLDUMPER library error message (PLEASE HELP)
      ... I ran services.msc and disabelled SQL Server VSS ... I have the exact same problem running Windows XP Pro/SP2, ... The problem started after I uninstalled Microsoft ... I'd go back to a Restore Point, but I don't know when installed the ...
      (microsoft.public.windowsxp.general)
    • Re: Question about Datasets and ASP.NET
      ... So I should do all my processing using SQL functions, ... This Microsoft article implies that using ADO.NET with ASP.NET ... applications is the way of the past because newer controls allow you to ... with my backend application (a Windows project using Windows forms - not ...
      (microsoft.public.dotnet.languages.vb)