Unity with MS May 9th exchange Patch

[mperbix]

I received a note from my Blackberry Admin that MS will have a patch for Exchange 2000 and 2003 that states in the MS Tech Note that is will NOT effect Unity...I find that hard to believe in a unified setting....maybe in standalone....is there any difinitive answer....the MS Technote is..

http://support.microsoft.com/kb/912918

[tonyw1538]

That technote has to do with the "SendAs" changes. It is only relevant if a user is using "Full Mailbox Access" as a means to "Send As" rather than explicitly granting "Send As".

After reading MS06-019 (http://www.microsoft.com/technet/security/bulletin/ms06-019.mspx) I am persuaded I need to install this in my Exchange environment. At what point will Cisco bless the update?

[tonyw1538]

FWIW - I got twitchy about the vulnerability and we went for it last night.

In our CallManager-integrated Unity 4.1.1 installation, application of MS06-019 to the Exchange server environment (but not to the Unity server) did not affect Unity's behavior. Everything is working well today.

Of course, your mileage may vary....

[s.casper_2]

Did you do anything about MS6-017 - Vulnerability in Microsoft Front Page Server Extensions Could Allow Cross Site Scripting (917627) on your Exchange Server?

[tonyw1538]

No, we do not run FPSE on the Exchange servers - only on our IIS servers that explicitly require it.

[tonyw1538]

No, we do not run FPSE on the Exchange servers - only on our IIS servers that explicitly require it.