Note: this post is getting frequent updates; please keep checking back. Last update: 3/19/2021
Microsoft has released a set of out of band security updates for vulnerabilities for the following ver...
Updated Mar 19, 2021
Version 44.0
Blog Post
Hi all, just want to share my experience with upgrading 2013 EXCH from CU4 to CU23 followed by patching with KB5000871. whole process takes about 6 hours without a glitch! upgrade steps will be create backup VM (if applicable) > prep schema, AD, domain > restart server > put in maintenance mode > upgrade NET framework 4.8 with elevated command prompt > restart > upgrade CU 23 with elevated command prompt > restart > install KB5000871 with elevated command prompt > restart.
PATCHING DEFINITELY NEEDED. yesterday I started seeing below log. after I did patching, I run check again using Zero Day Check Script.ps1 and Test-Hafnium.ps1 and I did not get that result anymore. perhaps the log get overwritten or CU23 make some changes to Exchange to block that.
@{DateTime=2021-03-08T08:31:34.145Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/autodiscover/autodiscover.xml?#}
@{DateTime=2021-03-08T08:31:48.208Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/mapi/emsmdb/?#}
@{DateTime=2021-03-08T08:31:49.349Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/mapi/emsmdb/?#}
@{DateTime=2021-03-08T08:31:54.302Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/ecp/proxyLogon.ecp?#}
@{DateTime=2021-03-08T08:32:11.068Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/ecp/DDI/DDIService.svc/GetList?msExchEcpCanary=rKkQwilkO0u2gqHxHVTXyVac4PWe49gITJwCW8vyR22f8mjJ7WCvCMHaWiqLfc7R9WF_8XlMAiw.&schema=VirtualDirectory#}
@{DateTime=2021-03-08T08:32:15.084Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=rKkQwilkO0u2gqHxHVTXyVac4PWe49gITJwCW8vyR22f8mjJ7WCvCMHaWiqLfc7R9WF_8XlMAiw.&schema=OABVirtualDirectory#}
@{DateTime=2021-03-08T08:32:18.396Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=rKkQwilkO0u2gqHxHVTXyVac4PWe49gITJwCW8vyR22f8mjJ7WCvCMHaWiqLfc7R9WF_8XlMAiw.&schema=ResetOABVirtualDirectory#}
@{DateTime=2021-03-08T08:32:21.412Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=rKkQwilkO0u2gqHxHVTXyVac4PWe49gITJwCW8vyR22f8mjJ7WCvCMHaWiqLfc7R9WF_8XlMAiw.&schema=OABVirtualDirectory#}
@{DateTime=2021-03-08T08:32:24.568Z; AnchorMailbox=ServerInfo~a]@SERVER.COM:444/autodiscover/autodiscover.xml?#}
@{DateTime=2021-03-08T08:32:28.303Z; AnchorMailbox=ServerInfo~a]@SERVER.COM/OAB/6b6a1886-0f8c-4bab-8ad0-4fa11a04d3b5/oab.xml#}
@{DateTime=2021-03-08T08:32:59.819Z; AnchorMailbox=ServerInfo~a]@SERVER.COM/OAB/6b6a1886-0f8c-4bab-8ad0-4fa11a04d3b5/oab.xml#}
@{DateTime=2021-03-08T08:32:59.850Z; AnchorMailbox=ServerInfo~a]@SERVER.COM/OAB/6b6a1886-0f8c-4bab-8ad0-4fa11a04d3b5/oab.xml#}
@{DateTime=2021-03-08T08:33:00.069Z; AnchorMailbox=ServerInfo~a]@SERVER.COM/OAB/6b6a1886-0f8c-4bab-8ad0-4fa11a04d3b5/oab.xml#}
@{DateTime=2021-03-08T08:33:02.663Z; AnchorMailbox=ServerInfo~a]@SERVER.COM/OAB/6b6a1886-0f8c-4bab-8ad0-4fa11a04d3b5/3f06030f-67ac-4324-956a-65412f64f52d-data-716.lzx#}
@{DateTime=2021-03-08T23:53:23.861Z; AnchorMailbox=ServerInfo~burpcollaborator.net/ecp/default.flt?}