# Microsoft out-of-band Security Bulletin Release **URL:** \ **Category:** Factual Questions\ **Created:** [October 23, 2008, 5:06pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228 "2008-10-23T17:06:38Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\ **Post date:** [October 23, 2008, 5:06pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/1 "2008-10-23T17:06:38Z")
Apparently Microsoft is releasing an out-of-band security bulletin tomorrow. The only information I can glean is that it’s Critical (obviously) it involves Windows (almost as obvious, but I guess it could have been IIS or SQL instead of the OS), and it involves remote code execution. Anyone have any insights? Details? Rumors? Microsoft is not in the habot of doing out-of-band releases – I don’t remember them ever doing one. ---
**Author:** ![Sunspace](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunspace/32/1250_2.png) [@Sunspace](https://boards.straightdope.com/u/Sunspace)\ **Post date:** [October 23, 2008, 5:27pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/2 "2008-10-23T17:27:01Z")
What do you mean by ‘out-of-band’? Not through the usual channels? ---
**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\ **Post date:** [October 23, 2008, 5:34pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/3 "2008-10-23T17:34:41Z")
> [@Sunspace](#): > > What do you mean by ‘out-of-band’? Not through the usual channels? Microsoft has a usual method and schedule for releasing security bulletins and patches. This is outside that schedule. It’s unusual enough that they’re doing a webcast this afternoon to explain the issue, apparently – registration for which is already full. ---
**Author:** ![hende](https://avatars.discourse-cdn.com/v4/letter/h/aca169/32.png) [@hende](https://boards.straightdope.com/u/hende)\ **Post date:** [October 23, 2008, 5:37pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/4 "2008-10-23T17:37:58Z")
He means that the security patch isn’t being released on Microsoft’s Patch Tuesday (2nd Tuesday of each month). These “out-of-band” releases are always done to fix critical vulnerabilities that are already being exploited. This patch seems to relate to SMB (Windows file sharing). See link for slightly more detail: [http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html](http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html) ---
**Author:** ![Sunspace](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunspace/32/1250_2.png) [@Sunspace](https://boards.straightdope.com/u/Sunspace)\ **Post date:** [October 23, 2008, 5:44pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/5 "2008-10-23T17:44:43Z")
Ah, okay, thanks. The linked article described it as an ‘out-of-cycle’ release, which is a clearer expression. To me, ‘out of band’ means through a different medium or channel than usual, niot at a different time. ---
**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\ **Post date:** [October 23, 2008, 5:52pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/6 "2008-10-23T17:52:28Z")
> [@hende](#): > > He means that the security patch isn’t being released on Microsoft’s Patch Tuesday (2nd Tuesday of each month). These “out-of-band” releases are always done to fix critical vulnerabilities that are already being exploited. > > This patch seems to relate to SMB (Windows file sharing). > > See link for slightly more detail: [SMB Vulnerablity Found – Emergency Patch | Remote Administration For Windows](http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html) But that alert addresses an existing patch: MS08-063. ---
**Author:** ![Rysto](https://avatars.discourse-cdn.com/v4/letter/r/ecccb3/32.png) [@Rysto](https://boards.straightdope.com/u/Rysto)\ **Post date:** [October 23, 2008, 5:53pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/7 "2008-10-23T17:53:53Z")
Ooh, this looks like a bad one. Reading between the lines of [this](http://www.microsoft.com/technet/security/Bulletin/ms08-067.mspx) and [this](http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html), it looks like any Windows computer that has file sharing enabled is vulnerable. And by vulnerable, I mean “attackers can do pretty much anything to your machine.” Given the huge numbers of computers that use file shares, it’s no wonder MS is publishing an out-of-cycle patch. ---
**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\ **Post date:** [October 23, 2008, 5:54pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/8 "2008-10-23T17:54:00Z")
> [@Sunspace](#): > > Ah, okay, thanks. The linked article described it as an ‘out-of-cycle’ release, which is a clearer expression. To me, ‘out of band’ means through a different medium or channel than usual, niot at a different time. [::shrugs::](http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx) > [@Microsoft](#): > > This is an advance notification of an out-of-band security bulletin that Microsoft is intending to release on October 23, 2008. ---
**Author:** ![hende](https://avatars.discourse-cdn.com/v4/letter/h/aca169/32.png) [@hende](https://boards.straightdope.com/u/hende)\ **Post date:** [October 23, 2008, 6:02pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/9 "2008-10-23T18:02:47Z")
Here is another article with some more detail about the patch… Apparently it has to do with the Windows Server service. [http://www.pcworld.com/businesscenter/article/152688/microsoft\_says\_windows\_flaw\_could\_bring\_worm\_attack.html](http://www.pcworld.com/businesscenter/article/152688/microsoft_says_windows_flaw_could_bring_worm_attack.html) ---
**Author:** ![chrisk](https://avatars.discourse-cdn.com/v4/letter/c/6de8d8/32.png) [@chrisk](https://boards.straightdope.com/u/chrisk)\ **Post date:** [October 23, 2008, 6:12pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/10 "2008-10-23T18:12:12Z")
> [@Rysto](#): > > Ooh, this looks like a bad one. Reading between the lines of [this](http://www.microsoft.com/technet/security/Bulletin/ms08-067.mspx) and [this](http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html), it looks like any Windows computer that has file sharing enabled is vulnerable. And by vulnerable, I mean “attackers can do pretty much anything to your machine.” Given the huge numbers of computers that use file shares, it’s no wonder MS is publishing an out-of-cycle patch. I’m updating, but I don’t feel too worried myself, because I’m assuming that the attacker would need to have SMB visibility to the computer. Neither my ISP nor my home router let SMB through I believe - I use it internally on my home network, but that’s it. (And the wireless on the router is disabled.) Gonna mention it to the IT guy here at work. ---
**Author:** ![enipla](https://avatars.discourse-cdn.com/v4/letter/e/54ee81/32.png) [@enipla](https://boards.straightdope.com/u/enipla)\ **Post date:** [October 23, 2008, 6:32pm UTC](https://boards.straightdope.com/t/microsoft-out-of-band-security-bulletin-release/469228/11 "2008-10-23T18:32:06Z")
> [@hende](#): > > He means that the security patch isn’t being released on Microsoft’s Patch Tuesday (2nd Tuesday of each month). These “out-of-band” releases are always done to fix critical vulnerabilities that are already being exploited. > > This patch seems to relate to SMB (Windows file sharing). > > See link for slightly more detail: [SMB Vulnerablity Found – Emergency Patch | Remote Administration For Windows](http://www.intelliadmin.com/blog/2008/10/smb-vulnerablity-found-emergency-patch.html) What time of day do they release the updates? I’m thinking it would be good for ME to install updates on the second Wednesday since I do it early in the morning (converts to 1pm GMT)