MS updates fix major flaws in Exchange and the Windows DNS Server
Seven groups of patches, called updates in Microsoft parlance, were released on Tuesday, fixing a total of 19 bugs. Microsoft rates all seven of these updates as critical, but security experts say that IT administrators should be particularly concerned with the MS07-026 and MS07-029 updates, which fix flaws in Exchange and the Windows DNS (Domain Name System) server.
The Exchange update fixes previously undisclosed flaws in Microsoft's messaging software that could be exploited to take control of the server, says Paul Zimski, director of product and market strategy at Patchlink. "The biggest impact to organisations is going to be the Exchange update," he says. "It really affects core business."