I just received an e-mail from windowssecurity@email.microsoft.com that states
The links that it contains don't correspond to the one ones it says it directs you to. For example all of them start with http://email.microsoft.com/m/s.asp? and then a string of digits yet I know the actual bulletin is located at http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp.
Is this legitimate? E-mailing every MS customer?
*** PLEASE NOTE: Due to the critical importance of this message,
this communication is being sent to all of our Microsoft customers
to alert you of this Security Bulletin. ***
It has been widely reported in the press and on Microsoft's own web
site, that on July 16th we released a critical security bulletin
(MS03-026) and a patch regarding a vulnerability in the Windows
operating system. We wanted to make sure that if you were not aware
of this bulletin and corresponding patch that you take a moment to
go to http://www.microsoft.com/security/ security_bulletins/
ms03-026.asp to find out if you are running an affected version of
the Windows operating system and get the specific information as to
what you need to do to apply this patch if you have not already.
Although we encourage you to pay attention to all security bulletins
and to deploy patches in a timely manner we wanted to call special
attention to this particular instance as we have become aware of
some activity on the internet that we believe increases the
likelihood of the exploitation of this vulnerability. Specifically,
code has been published on several web sites that would allow
someone to spread a worm/virus that takes advantage of the
vulnerability in question thereby impacting your
computing environment.
Although it is our goal to produce the most secure and dependable
products possible, we do become aware of these types of
vulnerabilities. In order to minimize the risks of such
vulnerabilities to your computing environment, we encourage you to
subscribe to the Windows Update service by going to
http://www.windowsupdate.com and also subscribe to Microsoft's
security notification service at http://register.microsoft.com/
subscription/subscribeme.asp?ID=xxx if you have not already. By
subscribing to these two services you will automatically receive
information on the latest software updates and the latest security
notifications thereby improving the likelihood that your computing
environment will be safe from worms and viruses that occur.
We apologize for any inconvenience the implementation of this patch
might cause and appreciate you taking the time to update
your system.
Thank you,
Microsoft Corporation
The links that it contains don't correspond to the one ones it says it directs you to. For example all of them start with http://email.microsoft.com/m/s.asp? and then a string of digits yet I know the actual bulletin is located at http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp.
Is this legitimate? E-mailing every MS customer?