Microsoft has officially released the patch that fixes the WMF flaw. The patch can be download individually here, but it is advised to simply use Windows Update. Yesterday, Microsoft said it would not release it until next Tuesday, but two (1 | 2) third party fixes were already available. And to make matters worse, Microsoft accidentally leaked their own patch to the Net yesterday.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Member since:2005-12-15
Windows 2000 is 10 years old ?
No, NT 4.0 is. Like I said previously.
how many business have you worked in ?
Many, as I've mostly consulted for Fortune 100 and 500 companies over the past 10 years. I currently work for MS PSS.
The majority of the ones I seen have data centres running Windows 2000 SP2 or SP3. The logistics of upgrading 4000 computers at once is a nightmare.
Then they have lazy and inexperienced admins. Patch management of service packs is a fact of life. You can do it for free with WSUS, or pay out the pooper for larger scaled apps like SMS, Tivoli, Altaris, etc. The hard part is testing, but again, a fact of life. Deployment is trivial compared to the testing, but usually companies don't have 4000 different kinds of images to worry about testing on.
Microsoft should fix exploits in ALL versions of software it produces. Not just ones it wants you to use.
You want patches for everything, but you want them yesterday. With this theory, you just increased testing for 2000 alone by 6 times. It's simply not feasible. MS always supports N-1 for SP's on an OS. In the case of 2000, it's N-1 from the post SP4 rollup to SP4. Service Pack 4 has been out for 3 years - if you aren't running it, you are not doing your job.
Member since:2005-12-15
(Forgot to mention):
And I'd not be able to name any OS that creates updates for every possible permutation of patch level. There's always a current baseline, with limited backporting.
To use the car analogy, if you are still driving a Model T in 2006, Ford is not going to give you a free replacement carbeurator when yours finally breaks...
Member since:
2005-07-06
Windows 2000 is 10 years old ?
how many business have you worked in ? The majority of the ones I seen have data centres running Windows 2000 SP2 or SP3. The logistics of upgrading 4000 computers at once is a nightmare.
However, that was not the point I was making.
The point was this...
Microsoft should fix exploits in ALL versions of software it produces. Not just ones it wants you to use.