We have just set up Sharepoint Server 2007 SP2. When everything was complete no updates were showing as being needed.
I next ran a Nessus scanthat said the following:
Product : SharePoint Server 2007 / SharePoint Services 3.0 Path : C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\\bin\mssph.dll Installed version : 12.0.6422.1000 Fix : 12.0.6529.5000
It told me to apply MS10-039. When I tried to apply the patch it said it was already installed but when I looked at the file versions of several files for that patch my server had older files than what is included with the patch.
If the patch is already installed why the difference in file versions. Am I protected from the vulnerability or not?
View Complete Post