Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


January 14, 2004

Microsoft Issues January Security Patches

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!

   Microsoft issued three security patches yesterday, once again coming through on its fall 2003 promise to give its customers regularly scheduled security updates rather than randomly releasing patches as they're finished. The patches apply to Microsoft Exchange Server 2003 and Microsoft Internet Security and Acceleration (ISA) Server 2000, as well as Windows, but only the ISA Server 2000 patch is rated critical. In addition, the company has reissued a security patch for various Windows versions; Microsoft describes this patch as "important."
   "Microsoft is committed to helping customers keep their information safe, and releasing security bulletins on a regular schedule makes security response more predictable and easier to manage," a company spokesman reported yesterday. The new patches include:
   - ISA Server 2000 (critical)--fixes a vulnerability that could let malicious code run on a user's system
   - Exchange 2003 (moderate)--fixes a vulnerability that could let a Microsoft Outlook Web Access (OWA) user randomly access another user's mailbox
   - Windows (important)--fixes a vulnerability that could let code run arbitrarily on a user's Windows Server 2003, Windows XP, or Windows 2000 system
   - Windows (important, reissue)--corrects a flaw in the Arabic, Hebrew, and Thai versions of the original patch, which addressed a buffer-overrun problem, and applies to various Windows 2003, XP, Win2K, and Windows NT 4.0 systems in the language versions listed

   Microsoft didn't issue a patch for a newly discovered Microsoft Internet Explorer (IE) vulnerability called "phish" that an intruder could exploit to fool users into providing credit card numbers and other personal information. However, Microsoft has reserved the right to issue critical security patches at any time, and certainly this type of vulnerability would fall into that category. Microsoft says it's still working on a fix. In the meantime, you can use Automatic Updates or Windows Update to get any relevant patches or download any recent security updates from the Microsoft Web site.

End of Article



Reader Comments
"Microsoft issued three security patches Tuesday, once again coming through on its fall 2003 promise to provide its customers with regularly scheduled security updates, rather than randomly releasing them as they were completed, as it had done in the past."

So we are to wait at Microsoft's beck and call for our vulnerabilities to be fixed? This is not a good thing....

Aaron January 14, 2004


You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now




Top Viewed ArticlesView all articles
What You Need to Know About Microsoft's x64 Server Product Plans

What do Longhorn Server, Windows Compute Cluster Server, and Windows Vista have in common? The x64 platform. ...

WinInfo Short Takes: 4th of July Special Edition

An often irreverent look at some of the week's other news, including a shortened work week thanks to the 4th of July, expensive Windows 7 pricing, Bing's modest monthly gains, IE 8 heading to work, Steve Jobs back at Apple, and so much more ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...


Security Whitepapers Sustainable Compliance: How to reconnect compliance, security and business goals

The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Related Events Security Summit

Top 10 Email Security Challenges and Solutions

Introduction to Identity Lifecycle Manager "2"

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format

Test Drive IT Solutions and Get Free Music Downloads
Solve your toughest IT problems with these free downloads and receive 5 free music downloads!


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home asp.netPRO Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement | Reprints and Licensing