Summary
ManageSoft Security Patch Management fails to detect Exchange 2000 Server with the post SP3 update rollup installed. As a result, the security bulletins MS06-003 and MS06-019 are reported as "not applicable" to such devices, and the relevant patches from these bulletins will not be installed
ManageSoft Security Patch Management fails to detect Exchange 2000 Server with the post SP3 update rollup installed. As a result, the security bulletins MS06-003 and MS06-019 are reported as "not applicable" to such devices, and the relevant patches from these bulletins will not be installed.
The installation agent log file will show messages such as the following when processing relevant patch packages on affected devices (exact details in the logging will vary depending on the version of ManageSoft Security Patch Management in use):
Detected installed product "Windows Server 2003" (ProductID 178) Service pack "Windows Server 2003 Service Pack 1" (ServicePackID 232) [...] Security patch MS06-003/Exchange2000-KB894689-x86-ENU.EXE is out of scope
In particular, note that the logging here does not show the product "Exchange 2000 Server" as being installed.
This incorrect behavior can be resolved for systems running ManageSoft Security Patch Management 7.2 or later by downloading the latest version of the ManageSoft Security Patch Management securityproducts.xml file as described in KB article M100659 (see linked document).
Information about the MS06-003 security bulletin can be found at http://www.microsoft.com/technet/security/bulletin/MS06-003.mspx.
Comments