Microsoft pulls ineffective server patch
The patch doesn't fix the Windows 2000 Server problem 'effectively,' Microsoft said.


Microsoft has been forced to pull a security patch for a problem in Windows 2000 server because the fix isn't working.
Originally issued as part of April's monthly patching cycle - known as Patch Tuesday - the update addressed a critical flaw in Windows 2000 Server, which only affected systems with Windows Media Services installed but could have allowed remote code execution.
Microsoft's security communications manager Jerry Bryant explained that the update was pulled "because we found it does not address the underlying issue effectively."
"We are not aware of any active attacks seeking to exploit this issue and are targeting a re-release of the update for next week," he added in a blog post.
Bryant add that Microsoft had a list of workarounds that admins could use in the mean time available in the original security bulletin, and recommended that affected customers should use a firewall to limit exposure.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Freelance journalist Nicole Kobie first started writing for ITPro in 2007, with bylines in New Scientist, Wired, PC Pro and many more.
Nicole the author of a book about the history of technology, The Long History of the Future.
-
Vulnerability management complexity is leaving enterprises at serious risk
News Fragmented data and siloed processes mean remediation is taking too long
By Emma Woollacott
-
Beat cyber criminals at their own game
Whitepaper A guide to winning the vulnerability race and protection your organization
By ITPro
-
Same cyberthreat, different story
Whitepaper How security, risk, and technology asset management teams collaborate to easily manage vulnerabilities
By ITPro
-
Three steps to transforming security operations
Whitepaper How to be more agile, effective, collaborative, and scalable
By ITPro
-
Should your business start a bug bounty program?
In-depth Big tech firms including Google, Apple and Microsoft offer bug bounty programs, but can they benefit smaller businesses too?
By Kate O'Flaherty
-
Accessing the XDR realm
Whitepaper A guide for MSPs to unleash modern security
By ITPro
-
Why zero trust strategies fail
In-depth Zero Trust is the gold standard for organizations in protecting systems from cyber attacks, but there are many common implementation pitfalls businesses must avoid
By Sandra Vogel
-
Sitecore XP RCE flaw is being actively exploited, ACSC warns
News The vulnerability was fixed last month but hackers are now moving against patching laggards
By Rene Millman