cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
453
Views
4
Helpful
3
Replies

Security patch for Unity server - MS08-067

gb-fairchild
Level 1
Level 1

Microsoft just issued this alert:

Microsoft Security Bulletin MS08-067 - Critical

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Published: October 23, 2008

According to Cisco the Unity updates wizard is updated on the 2nd Tuesday of each month. Do I have to wait unitl Nov. 11th to get this update or is their a way to get it (a Cisco approved update) sooner??

3 Replies 3

That forum points to the doc that states : "Note: This document does not support Cisco Unity or servers where Cisco Unity is installed." I've got calls into our Cisco Sales Engineers and TAC and no one has been able to yes or no to MS08-067 on Unity.

I have done a little comparison on Microsoft updates on Call Managers vs Microsoft updates on Unity Servers, and it seems that there is a few that are approved for Call Managers that are not for Unity, in the past. Can someone confirm this?

Hi all -

From the supported policy - "Support Policy for Microsoft Service Packs and Updates

Microsoft provides monthly updates for Windows, Exchange, SQL Server, MSDE, Internet Explorer, and IIS. These updates (known by a variety of names, including security rollup patches, security updates, critical updates, patches, and hot fixes) are limited to changes that fix specific problems. They do not include general defect fixes or new functionality. All of these Microsoft updates are qualified by Cisco from the day that Microsoft releases them. We recommend that you evaluate Microsoft updates in accordance with your server-software-maintenance policy to determine when to update the Cisco Unity server. If your company does not have a policy, we recommend that Microsoft updates be applied to the server as they are released. Cisco TAC provides support for a Cisco Unity system on which such updates have been installed." Link is here - http://www.cisco.com/en/US/docs/voice_ip_comm/unity/7x/support/7xcusupp.html#wp525581

As always, if you have a test lab or environment is which Unity is a server, I definitely recommend testing first.

Ginger

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: