After reading this, please tell me objectively whom you think should be sued (MS - who has released a patch; Me - who is aware of the patch; or this party - who is tying my hands)

http://infosource.bestsoftwareinc.com/Hypermedia/SES/SM/2461
1.htm

Did you see the line: " If you are running MAS 500 with SQL Server 2000, do not load on SQL Service Pack 3 or SQL Security Patch MS02-061." ?

The moral of this? It's not just about MS releasing vulnerable codes; nor is it about lazy/overworked admins who can't/won't deploy patches. You have to factor in the independent, 3rd-party application vendors who keeps telling you "we have not approved that patch YET", 12 months AFTER the patches have been released.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/141/18069#18069