full-disclosure - RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: Joe.Granto at MCI.Com (Joe Granto)
Subject: RE: Microsoft Baseline Security Analyzer not
 seeing KB887742 and KB88 6185  Correction

Enterprise Update Scan Tool:
http://support.microsoft.com/?id=894193

This tool seems to be a solution between MBSA releases. This tool may be 
what you need to detect those fixes. From the URL above:

"Why does this tool exist?
Microsoft delivers this tool for certain bulletins in an MSRC release 
cycle that cannot be detected by the MBSA or the ODT. Each tool is 
specific to an MSRC release cycle."

and

"Why do the MBSA and the ODT not detect this update?
The MBSA and the ODT may not offer full detection for certain bulletins 
in an MSRC release cycle. Full detection may not be available because of 
a limitation of the detection engine or because the product that is 
affected is not supported by the MBSA or the ODT. We are working to 
resolve this issue in future versions of the MBSA through the Windows 
Update Server infrastructure. In the meantime, the Enterprise Update Scan 
Tool is designed to complement the MBSA and the ODT for security update 
detection. Whenever MBSA or ODT cannot offer detection, we plan to 
release an Enterprise Update Scan Tool."

------------------------------------------------------------------------
Joe Granto, Senior Engineer
Intel Engineering, MCI (back in black)
Marimba Jedi
Office: (954)377-5632      VNET: 377-5632
Pager:  (888)500-6340 or joe.granto+page@....com
FAX: (954)377-5793

LINUX is only free if your time is worthless.

"There is no estimated time of resolution."

Fear my three minute POP time-out.

There is no WorldCom, only Zuul.

WorldCom...  it was all a bad dream.

What's $11 billion between friends?

Complete <adj.>: having all necessary parts, elements, or steps

Sprint, BP, WorldCom, Qwest, Verizon..  someone make the pain stop.