News & Information for Technology Purchasers
NewsFactor Network Sites:   NewsFactor.com Security CRM Business Sci-Tech Newsletters XML/RSS Feed  
   
Home Enterprise I.T. Hardware Software Communications More Topics...
Data Security
Average Rating:
Rate this article:  
Patch Tuesday Will Challenge IT with Core Updates Patch Tuesday Will Challenge IT with Core Updates
By Jennifer LeClaire
March 6, 2009 8:57AM

    Bookmark and Share
Patch Tuesday will launch a big workload for IT departments with a critical Windows core update requiring reboots for all supported Windows versions. The patches also plug spoofing holes in Windows, including Server 2000. Patch Tuesday will not include a fix for an Excel vulnerabililty that Microsoft said could allow remote code execution.
 



Microsoft Relevant Products/Services plans to deliver three security updates -- including one critical fix -- for the March Patch Tuesday. However, Redmond will not issue a patch for an Excel flaw that attackers are actively exploiting.

Tuesday's updates will address vulnerabilities in Windows Relevant Products/Services. The critical update plugs holes in editions of Windows the company still supports. The update ranked "important" will protect against spoofing bugs in Windows and Server 2000.

"Along with the spring weather, March is bringing one of the most disruptive Patch Tuesdays we've seen in a while," said Paul Henry, security and forensic analyst for Lumension. "What's interesting about this series of patches is that they affect all Windows operating systems, which are impacted by the remote code execution, implying that it could be comprised through malicious code -- something we'll have to confirm on Tuesday."

A Mammoth Undertaking

According to Henry, the critical patch is going to be a huge undertaking for IT administrators. That's because the broad platform impact of the bulletin suggests that core services -- rather than isolated application components -- of the Windows operating system Relevant Products/Services need to be modified. Any patching of the core infrastructure Relevant Products/Services opens up other applications to potential risk. The bottom line: A simple patch deployment Relevant Products/Services is impossible this coming Patch Tuesday.

"To make sure this is secure, IT departments will have to do a scan Relevant Products/Services of the entire system as well as reboot all Windows machines in the entire enterprise Relevant Products/Services. When at the server Relevant Products/Services software level, rebooting is a very disruptive event, making servers further exposed to vulnerabilities," Henry said.

In order for this vulnerability to be removed, he continued, IT will have to bring down the servers with the additional challenge of continuing to maintain service Relevant Products/Services-level agreements. Given the breadth of this critical update, he said, all resources at Microsoft are likely engaged in getting this patch precise.

If the critical update isn't enough to keep IT administrators busy, the two important updates that also affect Windows operating systems will be. Henry said it's likely that all three patches are related. Vulnerabilities one and two have the exact same exposure, so a definite link exists between the two. (continued...)

1  |  2  |  Next Page >

 

Tell Us What You Think
Your Comment:



Advertisement


 Data Security
1.   China Busted Hacker-Training Site
2.   FBI Tackles Haiti-Relief Scams
3.   Patch Tuesday Will Tie MS Record
4.   Google Apps Controls Mobile Devices
5.   Torrent Traps Used To Harvest Logins


advertisement
Product Information and Resources for Technology You Can Use To Boost Your Business

Enterprise Hardware Spotlight
Nvidia Auto-Switches Notebook GPU To Save Battery Life
Nvidia has taken the wraps off a notebook technology that chooses the best graphics processor for any given application and automatically routes the workload to Nvidia or Intel processors.
 
Microsoft Says Battery Woes Not Caused By Windows 7
Battery problems on Windows 7 machines are not caused by the operating system. That's the position of Stephen Sinofsky, head of the Windows division, in a long posting on the Windows engineering blog.
 
IBM's New POWER7 Servers Save Energy with Big Loads
IBM has unveiled high-capacity servers that are the first to be based on its new, multi-core POWER7 chip. It said the new line is designed "to manage the most demanding emerging applications."
 

Enterprise Technology Spotlight
Google May Add Facebook, Twitter Links to Gmail
Google will reportedly roll more social-networking features into Gmail, the fastest-growing e-mail service. The new features could save users the trouble of switching to Facebook or Twitter.
 
IBM's New POWER7 Servers Save Energy with Big Loads
IBM has unveiled high-capacity servers that are the first to be based on its new, multi-core POWER7 chip. It said the new line is designed "to manage the most demanding emerging applications."
 
IBM Opens Eco-Friendly, Cloud-Focused Data Center
IBM has opened its latest data center in North Carolina. Big Blue said the $362 million facility in Research Triangle Park is designed to support cloud computing and other new computing models.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Hardware | Software | Communications | Network Security | Wireless Tech | Linux/Open Source
Apple/Macintosh | Microsoft/Windows | World Wide Web | Data Storage | E-Commerce | Personal Tech | Tech Trends | Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | Free Whitepapers | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2010 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo.