MIcrosoft release out-of-band critical update

[cmeagan656]

Details per MS advance notification:

********************************************************************
Microsoft Security Bulletin Advance Notification for October 2008
Issued: October 22, 2008
********************************************************************

This is an advance notification of an out-of-band security bulletin
that Microsoft is intending to release on October 23, 2008.

The full version of the Microsoft Security Bulletin Advance
Notification for October 2008 can be found at

http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx.

This bulletin advance notification will be replaced with the
revised October bulletin summary on October 23, 2008. The revised
bulletin summary will include the out-of-band security bulletin as
well as the security bulletins already released on October 14, 2008.

Cheers.

 

[BadBigBen]

Thanx cmeagan656, for the info...


Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[Glenn9999]

And here it is:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

----------
Measurement is not management.

 

[cmeagan656]

@BadBigBen

You're welcome!

@Glenn9999

Thanks for posting the link to the bulletin.

Info:

So far I've installed this patch on 20 XP Pro clients running SP2 or SP3, and a couple of variants of Server 2003 and there haven't been any gotchas. The update does require a restart of the clients and the servers.

Cheers.

 

[mclellan]

Does anyone know if there are any prerequisites for this? We are lagging in our microsoft updates!


Thanks
Barry

 

[linney]

I think the only prerequisites, are having the vulnerable operating system that the update applies to.

If things follow along the lines of the Ms-Blaster event of 2003, I wouldn't be surprised if some sort of detection for this worm is included in the monthly Windows Update releases of the Microsoft Malicious Software Removal Tool.

 

[Sympology]

Note there are now active exploits in the wild attacking this flaw.
If you haven't updated it is strongly recommended.

Most people spend their time on the "urgent" rather than on the "important."