full-disclosure - Sans GDI scan says still vulnerable after patching

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <9E97F0997FB84D42B221B9FB203EFA27171986@dc1ms2.msad.brookshires.net>
From: toddtowles at brookshires.com (Todd Towles)
Subject: Sans GDI scan says still vulnerable after patching

I suggest you search in the patchmanagment mailing list on
patchmanagement.org 

Sorry to tell you, but the OS isn't the only thing that needs patching.

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> BillyBobKnob
> Sent: Wednesday, October 06, 2004 10:16 AM
> To: Full Disclosure
> Subject: [Full-Disclosure] Sans GDI scan says still 
> vulnerable after patching
> 
> I have patched some systems at work with the MS04-028 patch 
> and then ran the Sans GDI scanner which said that they are 
> still vulnerable.
> Any ideas why ?
> 
> F:\WINDOWS\system32\dllcache\sxs.dll
> 
> Version: 5.1.2600.136 <-- Vulnerable version
> 
> F:\WINDOWS\system32\sxs.dll
> 
> Version: 5.1.2600.136 <-- Vulnerable version
> 
> 
> 
> Thanks
> Bill
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>