[BigFix-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Enterprise Security'

[autonotify at us.ibm.com]

Fixlet Site - 'Enterprise Security'
Current Version: 1533	Published: Sat, 15 Oct 2011 00:22:38  GMT

New Fixlets:
============

***************************************************************
Title: Microsoft Unsupported: Windows Server 2003 SP1 and Earlier
Severity: Critical
Fixlet ID: 595
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;[ln];lifecycle
Fixlet Link: http://support.microsoft.com/gp/lifesupsps
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;%5bln%5d;LifeWinFAQ

Fixlet Description: Microsoft no longer provides extended security update support for Windows 2003 Service Pack 1 and earlier. Support ended on the dates listed below. These products have reached the end of their lifecycles and Microsoft is no longer providing security updates for them. BigFix will continue to provide content for security patches released prior to the extended support expiration date, but will not be able to provide content for newly discovered vulnerabilities. Microsoft recommends migrating these systems to supported versions to prevent potential exposure to vulnerabilities. You can use the appropriate "UPDATE: Windows 2003 Service Pack X Available" Fixlet message to update your Windows 2003 computers to a supported version. Customers who require additional support for Windows 2003 Gold or Windows 2003 SP1 should contact Microsoft for custom support options. See the links below for more information 

Important Note: Microsoft does not provide vulnerability information or patches for Windows 2003 computers pre-SP2. You will not see relevant Fixlet messages for new patches until you update the computer to Windows 2003 SP2 or later.

Extended support phase expiration date:  Windows 2003 Gold: April 10, 2007  Windows 2003 SP1: April 14 2009

***************************************************************
Title: Microsoft Unsupported: Windows Vista SP1 and Earlier
Severity: Critical
Fixlet ID: 597
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;[ln];lifecycle
Fixlet Link: http://support.microsoft.com/gp/lifesupsps
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;%5bln%5d;LifeWinFAQ

Fixlet Description: Microsoft no longer provides extended security update support for Windows Vista SP1 and earlier. Support ended on the dates listed below. These products have reached the end of their lifecycles and Microsoft is no longer providing security updates for them. BigFix will continue to provide content for security patches released prior to the extended support expiration date, but will not be able to provide content for newly discovered vulnerabilities. Microsoft recommends migrating these systems to supported versions to prevent potential exposure to vulnerabilities. You can use the appropriate "UPDATE: Windows Vista Service Pack X Available" Fixlet message to update your Windows Vista computers to a supported version. Customers who require additional support for Windows Vista Gold or Windows Vista SP1 should contact Microsoft for custom support options. See the links below for more information 

Important Note: Microsoft does not provide vulnerability information or patches for Windows Vista computers pre-SP2. You will not see relevant Fixlet messages for new patches until you update the computer to Windows Vista SP2 or later.

Extended support phase expiration date:  Windows Vista Gold: April 13, 2010  Windows Vista SP1: July 12, 2011

***************************************************************
Title: Microsoft Unsupported: Windows Server 2008 Gold
Severity: Critical
Fixlet ID: 599
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;[ln];lifecycle
Fixlet Link: http://support.microsoft.com/gp/lifesupsps
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;%5bln%5d;LifeWinFAQ

Fixlet Description: Microsoft no longer provides extended security update support for Windows Server 2008 Gold. Support ended on the dates listed below. These products have reached the end of their lifecycles and Microsoft is no longer providing security updates for them. BigFix will continue to provide content for security patches released prior to the extended support expiration date, but will not be able to provide content for newly discovered vulnerabilities. Microsoft recommends migrating these systems to supported versions to prevent potential exposure to vulnerabilities. You can use the appropriate "UPDATE: Windows Server 2008 Service Pack X Available" Fixlet message to update your Windows Server 2008 computers to a supported version. Customers who require additional support for Windows Server 2008 Gold should contact Microsoft for custom support options. See the links below for more information 

Important Note: Microsoft does not provide vulnerability information or patches for Windows Server 2008 computers pre-SP2. You will not see relevant Fixlet messages for new patches until you update the computer to Windows Server 2008 SP2 or later.

Extended support phase expiration date:  Windows Server 2008 Gold: July 12, 2011

***************************************************************
Title: Microsoft Unsupported: Office 2007 SP1 and Earlier
Severity: Critical
Fixlet ID: 605
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;[ln];lifecycle
Fixlet Link: http://support.microsoft.com/gp/lifesupsps
Fixlet Link: http://support.microsoft.com/default.aspx?scid=fh;%5bln%5d;LifeWinFAQ

Fixlet Description: Microsoft no longer provides extended security update support for Office 2007 SP1 and earlier. Support ended on the dates listed below. These products have reached the end of their lifecycles and Microsoft is no longer providing security updates for them. BigFix will continue to provide content for security patches released prior to the extended support expiration date, but will not be able to provide content for newly discovered vulnerabilities. Microsoft recommends migrating these systems to supported versions to prevent potential exposure to vulnerabilities. You can use the appropriate "UPDATE: Office 2007 Service Pack X Available" Fixlet message to update your Office 2007 computers to a supported version. Customers who require additional support for Office 2007 Gold or Office 2007 SP1 should contact Microsoft for custom support options. See the links below for more information 

Important Note: Microsoft does not provide vulnerability information or patches for Office 2007 computers pre-SP2. You will not see relevant Fixlet messages for new patches until you update the computer to Office 2007 SP2 or later.

Extended support phase expiration date:  Windows Office 2007 Gold: January 13, 2009 Windows Office 2007 SP1: July 13, 2010

***************************************************************
Title: MS11-057: Cumulative Security Update for Internet Explorer - IE 5.01 SP4 - Windows 2000 SP4 (Superseded)
Severity: Critical
Fixlet ID: 1105761
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS11-057.mspx

Fixlet Description: Note: This patch has been superseded by MS11-081.Microsoft has released a security update that resolves five privately reported vulnerabilities and two publicly disclosed vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.

***************************************************************
Title: MS11-057: Cumulative Security Update for Internet Explorer - IE 6 SP1 - Windows 2000 SP4 (Superseded)
Severity: Critical
Fixlet ID: 1105763
Fixlet Link: http://www.microsoft.com/technet/security/Bulletin/MS11-057.mspx

Fixlet Description: Note: This patch has been superseded by MS11-081.Microsoft has released a security update that resolves five privately reported vulnerabilities and two publicly disclosed vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.