bugtraq - RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <F847A82797397749AE0495F7145B48C60253035F@NAEX01.na.qualcomm.com>
Date: Tue, 15 Feb 2005 19:49:17 -0800
From: "Threlkeld, Richard" <richardt@...lcomm.com>
To: "James Lay" <jlay@...riben.com>,
	"BuqtraqNT (E-mail)" <NTBUGTRAQ@...tserv.ntbugtraq.com>,
	"BugtraqSecurity (E-mail)" <Bugtraq@...urityfocus.com>
Subject: RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185  Correction

>From http://www.microsoft.com/technet/security/bulletin/ms05-009.mspx
under the FAQ section:

"Can I use the Microsoft Baseline Security Analyzer (MBSA) to determine
if this update is required?
MBSA will determine if this update is required for Windows Media Player.
MBSA will not determine if this update is required for Windows Messenger
or MSN Messenger. It will provide a note message to this effect. See
Microsoft Knowledge Base Article 306460 for information regarding note
messages in MBSA.

Microsoft has made available an Enterprise Update Scanning Tool (EST) to
assist customers with the detection of needed security updates not
currently supported by MBSA.

For detailed information about the programs that MBSA currently does not
detect, see Microsoft Knowledge Base Article 306460"

Microsoft actually did a great job of recognizing the fact that the MBSA
doesn't detect flaws in Windows Messenger yet people still need to scan
and developing a tool for you to do so.  If you read the FAQ you could
be scanning your network right now instead of complaining about a known
limitation with the MBSA ;)

Best,

Richard Threlkeld
Microsoft MVP - SMS
http://myitforum.techtarget.com/blog/rthrelkeld/

-----Original Message-----
From: James Lay [mailto:jlay@...riben.com] 
Sent: Tuesday, February 15, 2005 6:41 AM
To: BuqtraqNT (E-mail); BugtraqSecurity (E-mail)
Subject: RE: Microsoft Baseline Security Analyzer not seeing KB887742
and KB88 6185 Correction

Ok....so it's actually KB887472 which was the other one....which is an
MSN Security Update.  Yea...MS needs to fix this ASAP for MBSA.

James

-----Original Message-----
From: James Lay [mailto:jlay@...riben.com]
Sent: Monday, February 14, 2005 11:24 AM
To: BuqtraqNT (E-mail); BugtraqSecurity (E-mail); Full-Disclosure
(E-mail)
Subject: Microsoft Baseline Security Analyzer not seeing KB887742 and
KB88 6185

Subject line says it all....just did a fresh install of WinXP SP2....was
using MBSAFU to make sure it would patch...which it did.  However
Windows Update shows still needing KB887742 and KB886185.  MBSA shows no
critical patches need updated.  Systeminfo shows that both KB887742 and
KB886185 are NOT installed.  I'm using latest MBSA.  Anyone else see
this?  Kinda sucks :(

James Lay
Network Manager/Security Officer
AmeriBen Solutions/IEC Group
Deo Gloria!!!