The above Patch is being reported on one of our servers by BigFix as not installed. However, if I run the MBSA or the Windows Update, both report the patch as installed. Is there a way to authorise this patch as installed so that it doesn’t report on this particular server anymore?
Can you tell us a little bit more about how you’re running into this problem? There’s a lot of MS09-054 content (IE vulnerability), so if you tell us what operating system you’re running and what version of IE you’re running on systems that seem inconsistent, we can dig around for you.
Sorry for not getting back sooner. We’ve updated this fixlet yesterday in our content modification announcement. That should take care of a false positive (there was one file that was only being updated under specific circumstances that needed to be removed).
Have you tried using the latest version of the fixlet (905425) and seeing if this issue is resolved?
The fixlet has dissapeared from the server so presuming its being recognised as installed now. But, the server is coming up as an applicable computer for our baseline, but there is now fixlets applicable to the server. I have restarted the client as well.
Also, could you look at the fixlet MS09-060 Vulnerabilities in Microsoft Active Template Library (ATL) Active X Controls for Microsoft Office could allow remote code execution - Outlook 2003 SP3 (Local/Network Install). The server is Windows 2003.
For your MS09-060 Outlook problem, is it that you see a discrepancy between what Bigfix reports as relevant and what MBSA / Windows Updates says? What service pack level are your Win2003 machines at?
To be truthful the Server that has the MS09-60 problems has now corrected itself over the weekend. No one did anything to it but when I came in on Monday the server was not applicable to the baseline anymore. However still have the issue with my other server, whereby I can’t see any baseline fixlets applicable to this server but it says it still needs the baseline. It is Windows 2008 SP2.
I think maybe opening a ticket with support might be more helpful than going back and forth on this forum… One simple step I would make is to just run the relevance on the machine that you’re having issues with. If it’s all true, and it’s not showing up as applicable on the baseline, I think there might be problems.
We didn’t make any changes to MS09-060 over the weekend.