Exchange patch breaks Exchange

Post #20,931 by Silverlock 12/10/01 3:18:11 PM Reply	Exchange patch breaks Exchange Duh. They did it again. I would love to hear an explanation for this one. -quote A PATCH RELEASED last week to fix a flaw in the Outlook Web Access module of Microsoft's Exchange 5.5 Server can render the Web-based e-mail system useless, administrators complained, prompting Microsoft to update and rerelease its security bulletin. "Unexpected consequences" may result due to file dependency issues if the Outlook Web Access server that the patch is applied to does not have Internet Explorer (IE) Version 5.0 or greater installed, Microsoft said in the revised version of bulletin MS01-057, issued late Friday. -endquote Excuse me? A patch for a server breaks the server if it has the wrong version of a browser installed? Never mind. I've come to expect amateurish software from them. [link\|http://www.idg.net/ic_777471_1794_9-10000.html\|[link\|http://www.idg.net/ic_777471_1794_9-10000.html\|http://www.idg.net/...9-10000.html]] When I visit the aquarium, the same thought keeps running through my mind; Leemmmooonnn, Buuttteerrr, MMMmmmmmm good!
Post #20,933 by inthane-chan 12/10/01 3:36:36 PM Reply	I have no comment on this. Really, I don't. I don't even work in that department. Go figure. "He who fights with monsters might take care lest he thereby become a monster. And if you gaze for long into an abyss, the abyss gazes also into you." - Friedrich Nietzsche
Post #20,938 by pwhysall 12/10/01 4:23:54 PM Reply	Re: Exchange patch breaks Exchange Doesn't affect me. I had a conversation with my colleagues that went like "Shall we patch this now, or shall we wait a wee while and let some other poor shmoe take the pain?" Guess what we chose :) Peter Shill For Hire [link\|http://www.kuro5hin.org\|There is no K5 Cabal]
Post #20,939 by drewk 12/10/01 4:31:50 PM Reply	Believe me, Peter, this is not a slam against you I don't doubt that your course of action was exactly correct. But does it ever worry you that the proper response to a patch for a security vulnerability is not "Quick, apply the patch!" but rather "Let someone else take the pain"? Gawd, what a nightmare to have to work with. We have to fight the terrorists as if there were no rules and preserve our open society as if there were no terrorists. -- [link\|http://www.nytimes.com/2001/04/05/opinion/BIO-FRIEDMAN.html\|Thomas Friedman]
Post #20,944 by pwhysall 12/10/01 5:28:17 PM Reply	It's all a question of risk. We simply weighed the risk of the vulnerability (very slight) against the business risk of a broken mail server (holy shit) and made a decision accordingly. I'd do the same with any box, running any product on any operating system - applying patches the instant they appear is never wise, and is only rarely necessary. Peter Shill For Hire [link\|http://www.kuro5hin.org\|There is no K5 Cabal]

Welcome to IWETHEY!