There was a program called BigFix that used to do something like that. I haven't used it in awhile, and a quick Google search found that BigFix was apparently bought by IBM this last February.
http://www.bigfix.com/redirect.php?var=/It looks as though the functionality of BigFix's patch management is synonymous with a few of IBM's product (seen in the table on the link above).