New MS Security Patch

[pdulfo]

Is it safe to install the new security patch KB824146 from Microsoft. I have been told to do so by my Manager, any body done this yet.

P

 

[glarkin]

I applied this patch to our SCCCS 4.2 and Web Client 4.0 servers last night and so far everything seems normal. We just cutover to Symposium on Monday so we still have a couple of minor issues related to that, but otherwise we're running normally.

 

[pdulfo]

Did you apply the patch with the support / backing of Nortel/supplier or did you just go ahead. Knowing how picky some suppliers are about Symposium setups I am loathed to apply the patch if it is not going to be supported by Nortel.

P

 

[glarkin]

I was told by our vendor that the patch was approved by Nortel.

 

[pdulfo]

Great news. I will do it tonight

P

 

[pdulfo]

After my request I have just received the following from BT.

*-*--*-*-*-*-*-*-*-*-*-*-*-*-*-*-*


Symposium Product Security Advisory Bulletin

Microsoft recently released the security advisory MS03-039 Buffer Overrun in RPCSS Service Could Allow Code Execution (824146).
This security advisory supercedes the previously issued MS03-026 security advisory and is applicable to all Windows platforms
(except for Windows 98/ME). Microsoft also released the KB 824146
scanning tool (KB824146scan.exe) that network administrators can use to identify host computers on their networks that do not
have the MS03-026 (823980) and the MS03-039 (824146) security patches installed. This tool replaces the KB 823980 scanning
tool (KB823980scna.exe) that is documented in Microsoft Knowledge Base article 826369.

Due to the critical nature of this security vulnerability, and the possible exploitation similar to previous Blaster worm, Nortel Networks
recommends you to perform appropriate system backup and install the available security hotfix from Microsoft immediately for the
following applicable

Symposium Products

Symposium Call Center Server 4.2 (Windows 2000)
Symposium Call Center Server 4.0 (Windows NT 4.0)
Symposium Call Center Server 3.0 (Windows NT 4.0)
Symposium Call Center Server 4.0 Client (Windows 2000, Windows XP, Windows NT 4.0)
Symposium Call Center Server 3.0 Client (Windows 2000, Windows NT 4.0)
Symposium Express Call Center 4.2 (Windows 2000)
Symposium Express Call Center 4.2 Client (Windows 2000, Windows XP)
Symposium Express Call Center 3.0 (Windows NT 4.0)
Symposium Express Call Center 3.0 Client (Windows 2000, Windows XP, Windows NT 4.0)
Symposium Call Center Web Client 4.5 (Windows 2000)
Symposium Call Center Web Client 4.0 (Windows 2000)
Symposium Web Center Portal 3.0 (Windows NT 4.0)
Symposium Web Center Portal 4.0 Beta (Windows 2000)
TAPI SP 2.3 (Windows NT 4.0, Windows 2000)
Symposium Agent (Windows NT 4.0, Windows 2000)
Nortel Networks is continuing to evaluate this security vulnerability and its compatibility with Symposium products.

BT

If you wish BT to carry out the work on your behalf please contact your Account Manager. The work will be chargeable using time related charges.

Microsoft

The details and hotfix for this security vulnerability is available from Microsoft:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp