January Patch Day Has 3 Bulletins -- Redmondmag.com

January Patch Day Has 3 Bulletins

By Scott Bekker
01/13/2004

January Patch Day Has 3 Bulletins Microsoft issued three bulletins on Tuesday in its monthly collection of patches for January.

The bulletins included a critical patch for Internet Security & Acceleration Server 2000, an important patch for Windows and a patch of moderate severity for Exchange Server 2003.

The ISA Server and Windows vulnerabilities both could allow an attacker to run arbitrary code on a user's system. The Exchange vulnerability could allow a user of Outlook Web Access to randomly access another user's mailbox. Also on Tuesday, Microsoft re-released a patch from last year, MS03-045, to fix problems in the Thai, Hebrew and Arabic versions.

The Windows vulnerability actually involves a flaw in Microsoft Data Access Components (MDAC). The affected versions of MDAC ship with Windows 2000, SQL Server 2000, Windows XP and Windows Server 2003.

The new patches are the first since November, and the third set of monthly patches since Microsoft began releasing patches on a monthly basis in October. There were no security bulletins in December.

The bulletins are available at www.microsoft.com/security.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.
What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.