Microsoft releases fix for crypto patch
Microsoft has released a workaround for the MS09-056 Crypto API update for Windows that was deployed on the latest Patch Day. Designed to prevent the processing of spoofed SSL certificates, the patch also caused an important service to malfunction on some systems. As a result, Live Communications Server 2005, Office Communications Server 2007 and the evaluation release of Office Communicator 2007 also became inaccessible. Users are no longer able to connect to the servers.
The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.
Redmond has also re-released update MS09-043 to fix a problem with Office Access Runtime 2003. Searching for updates via Windows Server Update Services (WSUS) was liable to yield unreliable results that coould give users a false sense of security.
The MS-09-062 update was also revised and re-released for downloading.
- Microsoft Patch Tuesday - 34 security vulnerabilities addressed, a report from The H.