Microsoft pulls buggy Exchange Server patch

MS13-061, released on Tuesday to address 3 vulnerabilities in an Oracle component in Exchange Server, causes data to be inaccessible in Exchange Server 2013. Microsoft has pulled the update and released guidance for how to work around the problems it causes.

After reports of content damage to Exchange Server 2013 after deployment, Microsoft has withdrawn the MS13-061 update for Exchange Server released this past Tuesday.

The company received reports of problems with Exchange Server 2013 installations from customers. The problem does not affect Exchange Server 2007 or 2010 and Microsoft says that customers of those versions can proceed with testing and deployment.

But, in the meantime, they have removed the patch from Windows Update and other distribution systems.

Knowledge Base article KB2874216 explains the problem in more detail and gives guidance for customers who have encountered it.  It identifies these problems that customers may encounter:

  • The content index (CI) for mailbox databases shows "Failed" on the affected server.
  • The Microsoft Exchange Search Host Controller service is missing.
  • You see a new service that is named "Host Controller service for Exchange."

The KB article describes 2 registry key settings to make. After rebooting the server, the problem should be bypassed.