Microsoft patch did not stick

Microsoft has re-issued one of the critical security patches it distributed earlier this month, after discovering it did not fully protect all systems.

The company has re-issued security update MS06-061 to customers using Windows 2000 Service Pack 4, which is an OS still widely used in enterprises.

The original patch was issued to tackle critical holes in Microsoft XML Core Services, which potentially allowed remote attackers to take over users systems and execute arbitrary code.

However, version 2.0 of the patch has now been re-issued after the company discovered that it did not fully protect Windows 2000 SP4. Microsoft said, “The security update previously did not correctly set the kill bit for Microsoft XML Parser 2.6.”

More information is available at:

http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx