MS09-054 Reporting not Installed

Usage and Config Patch
1

(imported topic written by gcibirch91)

Hi,

The above Patch is being reported on one of our servers by BigFix as not installed. However, if I run the MBSA or the Windows Update, both report the patch as installed. Is there a way to authorise this patch as installed so that it doesn’t report on this particular server anymore?

Thanks

2

(imported comment written by liuhoting91)

Can you tell us a little bit more about how you’re running into this problem? There’s a lot of MS09-054 content (IE vulnerability), so if you tell us what operating system you’re running and what version of IE you’re running on systems that seem inconsistent, we can dig around for you.

3

(imported comment written by gcibirch91)

Sorry for not getting back sooner been off work.

The full name for the patch is MS09-054 Cumulative Security Update for Internet Explorer - Inter Explorer 7 - Windows Server 2008 Gold/SP2

4

(imported comment written by gcibirch91)

As a test I resent the patch to the server and rebooted it. But the patch is still being reported as missing.

5

(imported comment written by gcibirch91)

Any ideas on this please?

6

(imported comment written by liuhoting91)

Sorry for not getting back sooner. We’ve updated this fixlet yesterday in our content modification announcement. That should take care of a false positive (there was one file that was only being updated under specific circumstances that needed to be removed).

Have you tried using the latest version of the fixlet (905425) and seeing if this issue is resolved?

7

(imported comment written by gcibirch91)

Hi

Will try it and see if that corrects. Presume I need to resend the fixlet?

8

(imported comment written by gcibirch91)

OK.

The fixlet has dissapeared from the server so presuming its being recognised as installed now. But, the server is coming up as an applicable computer for our baseline, but there is now fixlets applicable to the server. I have restarted the client as well.

Also, could you look at the fixlet MS09-060 Vulnerabilities in Microsoft Active Template Library (ATL) Active X Controls for Microsoft Office could allow remote code execution - Outlook 2003 SP3 (Local/Network Install). The server is Windows 2003.

Thanks

9

(imported comment written by gcibirch91)

Hi any ideas on this please??

10

(imported comment written by gcibirch91)

would be good to find if there is a problem or not

11

(imported comment written by gcibirch91)

Hi can someone help please??

12

(imported comment written by liuhoting91)

For your MS09-060 Outlook problem, is it that you see a discrepancy between what Bigfix reports as relevant and what MBSA / Windows Updates says? What service pack level are your Win2003 machines at?

13

(imported comment written by gcibirch91)

To be truthful the Server that has the MS09-60 problems has now corrected itself over the weekend. No one did anything to it but when I came in on Monday the server was not applicable to the baseline anymore. However still have the issue with my other server, whereby I can’t see any baseline fixlets applicable to this server but it says it still needs the baseline. It is Windows 2008 SP2.

14

(imported comment written by liuhoting91)

I think maybe opening a ticket with support might be more helpful than going back and forth on this forum… :slight_smile: One simple step I would make is to just run the relevance on the machine that you’re having issues with. If it’s all true, and it’s not showing up as applicable on the baseline, I think there might be problems.

We didn’t make any changes to MS09-060 over the weekend.