Microsoft pulls ineffective server patch
The patch doesn't fix the Windows 2000 Server problem 'effectively,' Microsoft said.
 
 
Microsoft has been forced to pull a security patch for a problem in Windows 2000 server because the fix isn't working.
Originally issued as part of April's monthly patching cycle - known as Patch Tuesday - the update addressed a critical flaw in Windows 2000 Server, which only affected systems with Windows Media Services installed but could have allowed remote code execution.
Microsoft's security communications manager Jerry Bryant explained that the update was pulled "because we found it does not address the underlying issue effectively."
"We are not aware of any active attacks seeking to exploit this issue and are targeting a re-release of the update for next week," he added in a blog post.
Bryant add that Microsoft had a list of workarounds that admins could use in the mean time available in the original security bulletin, and recommended that affected customers should use a firewall to limit exposure.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Freelance journalist Nicole Kobie first started writing for ITPro in 2007, with bylines in New Scientist, Wired, PC Pro and many more.
Nicole the author of a book about the history of technology, The Long History of the Future.
- 
 Building enduring channel partnerships in a multi-generational IT environment Building enduring channel partnerships in a multi-generational IT environmentIndustry Insights Partners are evolving from sellers to strategic advisors, prioritizing customer outcomes 
- 
 What can AI do to empower those working in the legal sector today, tomorrow, and beyond? What can AI do to empower those working in the legal sector today, tomorrow, and beyond?Supported AI is transforming the legal profession — from streamlining today’s workflows to shaping tomorrow’s strategies. For firms, the choice is clear: embrace trusted AI tools now or risk falling behind in a rapidly evolving landscape 
- 
 Vulnerability management complexity is leaving enterprises at serious risk Vulnerability management complexity is leaving enterprises at serious riskNews Fragmented data and siloed processes mean remediation is taking too long 
- 
 Beat cyber criminals at their own game Beat cyber criminals at their own gameWhitepaper A guide to winning the vulnerability race and protection your organization 
- 
 Same cyberthreat, different story Same cyberthreat, different storyWhitepaper How security, risk, and technology asset management teams collaborate to easily manage vulnerabilities 
- 
 Three steps to transforming security operations Three steps to transforming security operationsWhitepaper How to be more agile, effective, collaborative, and scalable 
- 
 Should your business start a bug bounty program? Should your business start a bug bounty program?In-depth Big tech firms including Google, Apple and Microsoft offer bug bounty programs, but can they benefit smaller businesses too? 
- 
 Accessing the XDR realm Accessing the XDR realmWhitepaper A guide for MSPs to unleash modern security 
- 
 Why zero trust strategies fail Why zero trust strategies failIn-depth Zero Trust is the gold standard for organizations in protecting systems from cyber attacks, but there are many common implementation pitfalls businesses must avoid 
- 
 Sitecore XP RCE flaw is being actively exploited, ACSC warns Sitecore XP RCE flaw is being actively exploited, ACSC warnsNews The vulnerability was fixed last month but hackers are now moving against patching laggards 
