MS11-074 Misreporting ....?

system · September 19, 2011, 11:40am

(imported topic written by nberger91)

Anyone seeing issues with “MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - SharePoint Workspace 2010 Gold/SP1 (x64)”

Relevance reports hotfix required, Microsoft reports ‘There are no products affected by this package installed on this system’ http://www.microsoft.com/download/en/confirmation.aspx?id=2736

system · September 19, 2011, 3:39pm

(imported comment written by mgardner28)

I’m seeing the same result.

Noah · September 19, 2011, 5:47pm

(imported comment written by NoahSalzman)

Thanks for the heads-up… we are looking into the issue.

system · September 19, 2011, 8:47pm

(imported comment written by SystemAdmin)

The URL you provided is for MS10-047, but you’re talking about MS11-074?

In any case, to help us narrow down the possible reason for this issue, can you answer this question: what version of SharePoint does the machine have (Groove 2007, SharePoint 2010, SharePoint Workspace 2010, etc)?

Thanks.

system · September 19, 2011, 10:59pm

(imported comment written by mgardner28)

I am having this issue on six machines.

All six are Windows 7 64-bit.

All have Microsoft SharePoint Workspace 2010 Version 14.0.6106.5005 (32-bit)

Thanks

system · September 19, 2011, 11:25pm

(imported comment written by mgardner28)

Just figured out the issue. Our OS is 64-bit and the Microsoft SharePoint Workspace 2010 is a 32-bit version. If I download and install the 32-bit version of the patch from Microsoft and install it all is well. I guess you need to add relevance to check whether the application is 32-bit or 64-bit.

system · September 20, 2011, 12:53am

(imported comment written by SystemAdmin)

Yes, that was the issue with our Fixlet. An updated version should be published now. Thanks for letting us know.

system · September 20, 2011, 10:40pm

(imported comment written by thecheesehasyou91)

I’m also experiencing a problem with the MS11-074 fixlet ID 1107427 for Office Web Apps 2010 Gold/SP1 (x64). Its showing up relevant on our SharePoint servers but fails when running. I’ve manually run the installer from the fixlet and the installer returns with “There are no products affected by this package installed on this system.”

Anyone else seen this one?

system · September 20, 2011, 11:42pm

(imported comment written by SystemAdmin)

The last update fixed our issue too, but we still have one regarding:

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Office SharePoint Server 2007 SP2 (sserverx) (x64)

We return this error code:

Command succeeded (Exit Code=17028) waithidden __Download\Office2007-kb2553002-fullfile-x64-glb.exe /quiet /norestart (fixlet 140323)

This error code is: No product installed for contained patch

So there is an issue with this Fixlet relevance as well.

We are also having the same issue with these:

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Word Web App 2010 Gold/SP1 (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - SharePoint Workspace 2010 Gold/SP1 (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (wosrv) (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (ppsmawfe) (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (ppsmamui) (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (osrv) (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - SharePoint Foundation 2010 Gold/SP1 (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Office Web Apps 2010 Gold/SP1 (x64)

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Office SharePoint Server 2007 SP2 (sserverx) (x64)

All the MS11-074 (x64) patches need a second look please…I can provide any information you require.

Thanks,

Scott

system · September 21, 2011, 12:59am

(imported comment written by SystemAdmin)

thecheesehasyou and Scott (sdemonte),

Troubleshooting SharePoint 2010 is a pretty involved process. The best way we can really do it is if you contact support here: http://support.bigfix.com/contact.html. The reason I asked the original poster about his SharePoint version is because that Fixlet in particular has a noticeable relevance issue (to me at least). For the majority of Fixlets listed in both of your posts, it is not a simple fix, so more data will be needed from you, which is easier done by contacting support.

One thing I can say (for Scott’s case at least), is that in the announcements we released with the MS11-074 patches is that there are some troublesome Fixlets:

MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (ppsmawfe) (x64) (ID: 1107435)
MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Sharepoint Server 2010 Gold/SP1 (wosrv) (x64) (ID: 1107441)
MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Office Sharepoint Server 2007 SP2 (sserverx) x64 (ID: 1107423)
MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege - Office Sharepoint Server 2007 SP2 (sserverx) (ID: 1107415)

With the exception of #1107435, which was updated in the last update, these Fixlets had their default action removed and a note placed in the description indicating that these Fixlets require extra attention before patching.

However, Scott, it is troubling to see that you have issues with pretty much all the SharePoint 2010 Fixlets, so you definitely will want to contact support so we can figure out where the problem is.