Speaking of Microsoft problems ..
Speaking of Microsoft security troubles, the company was apparently hoping for a ‘patch-free month’.
But sadly another problem – this time with Windows Update – caused a fix for a serious vulnerability which was supposed to have been released last month to be delivered to computer users on Tuesday.
Ironically, this was, "the same day Microsoft proclaimed December would be a patch-free month," says an IDG News Service story here, going on:
"The software patch fixes a serious vulnerability in a set of Web site management tools called FrontPage Server Extensions, which are part of Microsoft’s Windows 2000, Windows XP and Office XP software, according to Microsoft Security Bulletin MS03-051 released Nov. 11. Exploiting the flaw could allow an attacker to gain control over a user’s PC, Microsoft said."
But, "Microsoft … has corrected an error in Windows Update that prevented MS03-051 from reaching certain Windows XP customers via Windows Update or Automatic Update technologies," according to the report, whch also has Micro$oft saying it’s not aware of any hackers having exploited the vulnerability and encouraging users "to install the patch as prompted by the Windows Update service".
Russ Cooper, surgeon general of TruSecure and moderator of the NTBugtraq security mailing list, said he wished there had been a worm or a high-profile attack that took advantage of this particular flaw, the IDG Story continues.
"Too bad that did not happen because we would lose all the people that work on Windows Update development and instead have people who are capable," he said. "I have sent out numerous e-mails with the title ‘Windows Update is a dog.’ It is a terrible delivery mechanism."
