Solved: Microsoft Out of Band Critical Security Update for Windows Server

angel-moon · ‎10-24-2008

Hello,

Does anyone know the Cisco stance as relates to applying the recently released critical security update released just this past Thursday? Is this update approved or on its way to be approved for Unity, MeetingPlace, etc?

Here's this link.

http://www.microsoft.com/technet/security/bulletin/MS08-067.mspx

Thanks in advance! All replies rateed

Jaime Valencia · ‎10-24-2008

if this is going to be treated as a high priority you should see something within the next few days, otherwise it will go as any other patch thru the review process as Cisco has 60 days to review and qualify patches.

The work around is to disable the Computer Browser and Server service in the meantime.

HTH

java

if this helps, please rate

HTH

java

if this helps, please rate

View solution in original post

Jaime Valencia · ‎10-24-2008

if this is going to be treated as a high priority you should see something within the next few days, otherwise it will go as any other patch thru the review process as Cisco has 60 days to review and qualify patches.

The work around is to disable the Computer Browser and Server service in the meantime.

HTH

java

if this helps, please rate

HTH

java

if this helps, please rate

Ginger Dillon · ‎10-24-2008

Hi -

We tested this patch on our lab Unity 4.2 server with Exchange 2003 server. We applied the patch to our lab DC and GC servers as well as Exchange. We monitored Unity and did not see any ill effect. We applied the patch to the lab Unity server with no ill effect. Due to the nature of the patch, which primary exposure is to external RPC threats, we patched our OWA server and all Exchange servers yesterday. This Sunday I am applying the patch, plus all October security updates on our 5 Unity servers.

Sincerely, Ginger

Trent Hurt · ‎10-24-2008

Have a look at this link. It shows the patch is scheduled to be released Oct. 24.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/win_os/os_srv_sec/osbios.htm

gb-fairchild · ‎10-25-2008

I just looked at the link - it says it doesn't cover Unity:

Supported Applications and Servers

These updates support all versions of the following applications:

Â· Cisco Unified CallManager

Â· Cisco Conference Connection

Â· Cisco Personal Assistant

Â· Cisco IP Interactive Voice Response, and Cisco IP Call Center Express

Â· Cisco Emergency Responder

Â· Cisco Customer Voice Portal

Â· Cisco MeetingPlace

Note: This document does not support Cisco Unity or servers where Cisco Unity is installed.

techiesteph · ‎10-27-2008

I am trying to find the same answer.... Does anyone know if and/or when the Patch will be released for Cisco Unity?

Ginger Dillon · ‎10-28-2008

Hi -

Here is a link to the forum post I made regarding the OS security update policy for Cisco Unity - http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=Unified%20Communications%20Applications&topicID=.ee835d2&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cc231ee/2#select...

Regards, Ginger