News

January Patch Day Has 3 Bulletins

January Patch Day Has 3 Bulletins Microsoft issued three bulletins on Tuesday in its monthly collection of patches for January.

The bulletins included a critical patch for Internet Security & Acceleration Server 2000, an important patch for Windows and a patch of moderate severity for Exchange Server 2003.

The ISA Server and Windows vulnerabilities both could allow an attacker to run arbitrary code on a user's system. The Exchange vulnerability could allow a user of Outlook Web Access to randomly access another user's mailbox. Also on Tuesday, Microsoft re-released a patch from last year, MS03-045, to fix problems in the Thai, Hebrew and Arabic versions.

The Windows vulnerability actually involves a flaw in Microsoft Data Access Components (MDAC). The affected versions of MDAC ship with Windows 2000, SQL Server 2000, Windows XP and Windows Server 2003.

The new patches are the first since November, and the third set of monthly patches since Microsoft began releasing patches on a monthly basis in October. There were no security bulletins in December.

The bulletins are available at www.microsoft.com/security.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • FTC Expands Microsoft Antitrust Investigation Under Trump Administration

    The Federal Trade Commission (FTC) is pressing ahead with a broad investigation into Microsoft's business practices, an inquiry that began in the final weeks of the Biden administration.

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Microsoft to Shut Down Skype Services

    Microsoft will discontinue its Skype telecommunications and video calling services on May 5, 2025, marking the end of the platform's decades-long run.

  • Big Blue To Acquire Datastax in Enterprise AI Play

    In a bid to bolster its enterprise-aimed AI capabilities, IBM is planning to acquire Datastax, a leading AI and data solutions provider, for an undisclosed amount.