locked
KB3033395 doesn't install RRS feed

  • Question

  • This update appears as part of yesterday's Patch Tuesday.

    All other updates seem to install fine.  I have installed this update on multiple Win Server 2003 machines and even after reboot, it keep prompting to install this again and again.

    I found another post in Spanish (I had to use Google Translate to read - not a Spanish speaker) of someone having the same problem, but not much else online (yet): https://social.technet.microsoft.com/Forums/es-ES/29c8b0eb-a72b-4efa-8b66-cc48982e39ac/kb3033395?forum=servinfoeslatames

    Does anyone have any ideas on how to resolve this?  I'm using WSUS 3 on a Win 2003 server with a mix of 2003/2008R/2012R2 servers (yes, yes, I'm slowly replacing all of the 2003 machines... but until then I want them patched!).

    Wednesday, March 11, 2015 3:49 PM

Answers

  • - Title: Vulnerabilities in Windows Kernel Could Allow Elevation of

       Privilege (3038680)

     https://technet.microsoft.com/library/security/ms15-025

     - Reason for Revision: V2.0 (March 16, 2015): To address a packaging

       issue for customers who are repeatedly reoffered security update

       3033395 when installed on systems running supported editions of

       Windows Server 2003, Microsoft released update 3033395-v2 for all

       supported editions of Windows Server 2003. Customers who have not

       already installed the 3033395 update should install update

       3033395-v2 to be fully protected from this vulnerability. To

       avoid the possibility of future detection logic problems, Microsoft

       recommends that customers running Windows Server 2003 who have

       already successfully installed the 3033395 update also apply update

       3033395-v2 even though they are already protected from this

       vulnerability. Customers running other Microsoft operating systems

       are not affected by this rerelease and do not need to take any

       action. See Microsoft Knowledge Base Article 3033395 for more

       information.

     - Originally posted: March 10, 2015

     - Updated: March 16, 2015

     - Bulletin Severity Rating: Important

     - Version: 2.0


    Brandon Justice Paychex

    • Proposed as answer by bjustice0387 Tuesday, March 17, 2015 1:49 PM
    • Marked as answer by Steven_Lee0510 Monday, April 6, 2015 3:37 PM
    Tuesday, March 17, 2015 1:49 PM

All replies

  • We have seen the same behavior.

    You can download the patch directly from the Microsoft Download Center

    www.microsoft.com/en-us/download/details.aspx?id=45968

    Add/Remove programs will then list it as installed, however the WSUS may still indicate it's available.

    Wednesday, March 11, 2015 5:10 PM
  • I've seen the same behavior on several 2003 servers. I tried uninstalling it and installing it manually with the download but that did not help. All I can think of now is to decline it in WSUS once it is installed on all servers.
    Thursday, March 12, 2015 1:54 AM
  • It appeared yestoday on my notebook with svr2013 chn.

    I'm using Windows Automatic Update(not sure if the name is corret) with Microsoft server, not WSUS.

    I posted the question on Weibo asking the MS accounts, but they told me that they couldn't solve the server OS problem.   :(


    • Edited by Ares Scarlet Thursday, March 12, 2015 7:34 AM add
    Thursday, March 12, 2015 7:26 AM
  • We have seen the same behavior.

    You can download the patch directly from the Microsoft Download Center

    www.microsoft.com/en-us/download/details.aspx?id=45968

    Add/Remove programs will then list it as installed, however the WSUS may still indicate it's available.

    It doesn't affect on my machine.

    I installed the patch twice, but the pop still appears.


    Thursday, March 12, 2015 2:03 PM
  • I can't tell if it is installed or not.  But WSUS is saying it is still missing, and I still see the yellow icon in my system tray asking for it.  I tried installing it both automatically and manually.
    Thursday, March 12, 2015 2:11 PM
  • Seeing something similar on my 2003 servers leveraging SCCM.  After the installer runs, it reports back to SCCM that the install failed but the logs are showing that it successfully installed.  Looks like a bunk patch - thanks MS :S
    Thursday, March 12, 2015 11:45 PM
  • same problem here, only 2003 servers affected,
    Friday, March 13, 2015 9:54 AM
  • Seeing something similar on my 2003 servers leveraging SCCM.  After the installer runs, it reports back to SCCM that the install failed but the logs are showing that it successfully installed.  Looks like a bunk patch - thanks MS :S
    Same issue for me as well. Patch is installed, but SCCM is reporting as failed.

    Brandon Justice Paychex

    Friday, March 13, 2015 6:38 PM
  • - Title: Vulnerabilities in Windows Kernel Could Allow Elevation of

       Privilege (3038680)

     https://technet.microsoft.com/library/security/ms15-025

     - Reason for Revision: V2.0 (March 16, 2015): To address a packaging

       issue for customers who are repeatedly reoffered security update

       3033395 when installed on systems running supported editions of

       Windows Server 2003, Microsoft released update 3033395-v2 for all

       supported editions of Windows Server 2003. Customers who have not

       already installed the 3033395 update should install update

       3033395-v2 to be fully protected from this vulnerability. To

       avoid the possibility of future detection logic problems, Microsoft

       recommends that customers running Windows Server 2003 who have

       already successfully installed the 3033395 update also apply update

       3033395-v2 even though they are already protected from this

       vulnerability. Customers running other Microsoft operating systems

       are not affected by this rerelease and do not need to take any

       action. See Microsoft Knowledge Base Article 3033395 for more

       information.

     - Originally posted: March 10, 2015

     - Updated: March 16, 2015

     - Bulletin Severity Rating: Important

     - Version: 2.0


    Brandon Justice Paychex

    • Proposed as answer by bjustice0387 Tuesday, March 17, 2015 1:49 PM
    • Marked as answer by Steven_Lee0510 Monday, April 6, 2015 3:37 PM
    Tuesday, March 17, 2015 1:49 PM