Focus on Microsoft
Anyone have hard evidence of problems with Windows Automatic Updates? Mar 20 2003 08:49PM
Thomas Cameron (ThomasC mip com) (4 replies)
RE: Anyone have hard evidence of problems with Windows Automatic Updates? Mar 21 2003 04:22PM
james leafgrove com (James D Stallard)
Re: Anyone have hard evidence of problems with Windows Automatic Upda tes? Mar 20 2003 11:19PM
Armando Ortiz (aortiz onlinetraffic com)
Re: Anyone have hard evidence of problems with Windows Automatic Upda tes? Mar 20 2003 10:58PM
Anthony Kim (Anthony Kim VW COM)
On Thu, Mar 20, 2003, Thomas Cameron wrote:

> All -
>
> We are using the Windows 2000 automatic update feature on several of our
> production servers.
>
> One of my fellow IT team members has expressed concern that Microsoft has a
> bad history of releasing hotfixes which break servers. I can find lots of
> anecdotal evidence that this has happened, but only a very limited number of
> cases where some specific configurations were negatively impacted by hotfix
> application.
>
> Does anyone have any hard evidence that automatic updates are a Bad
> Thing(tm)?

Read the paper published by WireX and Zero Knowledge Systems folks:
"Timing the Application of Security Patches for Optimal Uptime".
(Google for it.)

Based on a sample of 136 total CVE entries, 20 patches were
"determined to be faulty, all but one (CVE-2001-0341) had an
updated patch released." And the one was pulled and never
re-released.

Faulty patches are a real phenomenon.

----------------------------------------------------------------------
ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data!
It's as simple as placing additional SQL commands into a Web Form input
box giving hackers complete access to all your backend systems!
http://www.spidynamics.com/mktg/sqlinjection33

[ reply ]
Re: Anyone have hard evidence of problems with Windows Automatic Upda tes? Mar 20 2003 10:49PM
John Jasen (jjasen realityfailure org)


 

Privacy Statement
Copyright 2010, SecurityFocus