Microsoft Revises MS10-025 - Says "Please Stand By"

Products
Privileged Password Management

Discover, manage, audit, and monitor privileged accounts and credentials.

Password Safe

DevOps Secrets Safe

Privileged Access Discovery Application
Endpoint Privilege Management

Enforce least privilege across Windows, Mac, Linux, and Unix endpoints.

Windows and Mac

Unix and Linux

Active Directory Bridge
Secure Remote Access

Centrally manage remote access for service desks, vendors, and operators.

Remote Support

Privileged Remote Access

Privileged Access Discovery Application
Cloud Security Management

Automate the management of identities and assets across your multicloud footprint.

Cloud Privilege Broker
BeyondInsight

Experience the industry’s most innovative, comprehensive platform for privileged access management.
Solutions
Use Cases
Industry Applications
Solutions

The BeyondTrust Privileged Access Management portfolio is an integrated solution that provides visibility and control over all privileged accounts and users.
Resources
Learn
Attend
- Events
- Go Beyond
- Training
- Webinars
Support
Universal Privilege Management

Our innovative Universal Privilege Management approach secures every user, asset, and session across your entire enterprise.
Company
Watch Demo
Contact Sales

Yesterday, Microsoft released a major revision to MS10-025 (Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution). While Microsoft revises security bulletins frequently, rarely do you see a major revision within a week of the original release. The reason for this revision is that "the original security update did not protect systems from the vulnerability described in this bulletin." As of this writing, Microsoft has pulled down the patch for MS10-025 (KB980858) and requested customers follow one of the following mitigation steps:

- Stop and disable Windows Media Unicast Service - Uninstall the Windows Media Services component using Windows Component Wizard

This vulnerability only affects Windows 2000 Servers that have Windows Media Services running. As such its attack surface should be fairly small. According to MSRC, Microsoft plans to re-release MS10-025 sometime next week with the proper fix in place.