Security patch for Unity server - MS08-067

Unanswered Question
Oct 25th, 2008
User Badges:

Microsoft just issued this alert:


Microsoft Security Bulletin MS08-067 - Critical

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Published: October 23, 2008



According to Cisco the Unity updates wizard is updated on the 2nd Tuesday of each month. Do I have to wait unitl Nov. 11th to get this update or is their a way to get it (a Cisco approved update) sooner??



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Rob Huffman Sat, 10/25/2008 - 08:34
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 IP Telephony, Unified Communications

techiesteph Mon, 10/27/2008 - 13:09
User Badges:

That forum points to the doc that states : "Note: This document does not support Cisco Unity or servers where Cisco Unity is installed." I've got calls into our Cisco Sales Engineers and TAC and no one has been able to yes or no to MS08-067 on Unity.


I have done a little comparison on Microsoft updates on Call Managers vs Microsoft updates on Unity Servers, and it seems that there is a few that are approved for Call Managers that are not for Unity, in the past. Can someone confirm this?

Ginger Dillon Mon, 10/27/2008 - 14:24
User Badges:
  • Blue, 1500 points or more

Hi all -

From the supported policy - "Support Policy for Microsoft Service Packs and Updates

Microsoft provides monthly updates for Windows, Exchange, SQL Server, MSDE, Internet Explorer, and IIS. These updates (known by a variety of names, including security rollup patches, security updates, critical updates, patches, and hot fixes) are limited to changes that fix specific problems. They do not include general defect fixes or new functionality. All of these Microsoft updates are qualified by Cisco from the day that Microsoft releases them. We recommend that you evaluate Microsoft updates in accordance with your server-software-maintenance policy to determine when to update the Cisco Unity server. If your company does not have a policy, we recommend that Microsoft updates be applied to the server as they are released. Cisco TAC provides support for a Cisco Unity system on which such updates have been installed." Link is here - http://www.cisco.com/en/US/docs/voice_ip_comm/unity/7x/support/7xcusupp.html#wp525581

As always, if you have a test lab or environment is which Unity is a server, I definitely recommend testing first.

Ginger


Actions

This Discussion