Microsoft pulls ineffective server patch

security key

Microsoft has been forced to pull a security patch for a problem in Windows 2000 server because the fix isn't working.

Originally issued as part of April's monthly patching cycle - known as Patch Tuesday - the update addressed a critical flaw in Windows 2000 Server, which only affected systems with Windows Media Services installed but could have allowed remote code execution.

Microsoft's security communications manager Jerry Bryant explained that the update was pulled "because we found it does not address the underlying issue effectively."

"We are not aware of any active attacks seeking to exploit this issue and are targeting a re-release of the update for next week," he added in a blog post.

Bryant add that Microsoft had a list of workarounds that admins could use in the mean time available in the original security bulletin, and recommended that affected customers should use a firewall to limit exposure.