RE: System Scanner XFORCE fix request [Fwd: Case 395811 ]

[Krohnert, Kelley (ISSAtlanta)]

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

Sid,

Thank you again for bringing this issue to our attention. We make every
effort to keep information in the X-Force Database up-to-date, particularly
when a check or signature in a product changes. However, occasionally
modifications are made that are not recorded in the X-Force Database, and we
appreciate being notified when inaccuracies are found. I will also ask
Technical Support to make sure that any inaccuracies found on the X-Force
Database Web site are sent directly to my team, so that we can promptly
correct the information.

With regards to the System Scanner frozen-file-attributes check that you
referred to, I contacted the development team to verify the behavior of the
check, and updated the X-Force Database with the current check details. The
updated information will be available on the Web site after our next full
Web update. 

Regards,
Kelley Krohnert

=====================================
Kelley Krohnert
X-Force Database & Research Manager
[EMAIL PROTECTED] 

Internet Security Systems, Inc.
(404) 236.2754
http://www.iss.net
===================================== 

-----Original Message-----
From: Connor, Nick (ISSReading) 
Sent: Thursday, July 05, 2001 8:05 AM
To: 'Sid Witzer'
Cc: ISS XForce; issforum
Subject: RE: System Scanner XFORCE fix request [Fwd: Case 395811 ]


Hi Sid,

Thank you for your input on this topic - I will follow up with the X-Force
on this.

Nick Connor

-----
Nick Connor, 
Product Manager - Host Protection Products      
Internet Security Systems
Tel:  +44 118 959 3800 
------------------------------------------------
Internet Security Systems - The Power to Protect
================================================




-----Original Message-----
From: Sid Witzer [mailto:[EMAIL PROTECTED]]
Sent: 29 June 2001 19:11
To: ISS XForce; issforum
Subject: System Scanner XFORCE fix request [Fwd: Case 395811 ]


If the information in the knowledge base is found to be wrong or
mis-leading, it
should be corrected automatically.  The end user should not have to ask for
it.
--
Regards,
Sid Witzer
Citigroup


ISS Technical Support wrote:

> Hello Sid,
> The check that you found on the XForce web page was in an older version
> (System scanner Version 1.0 for Windows). In the newer versions it is
named
> frozen-file-attributes. This check has since been enhanced and improved to
> check for all attributes.
> The article that you are referencing on the XForce web page was created
July
> 1998. If you would like to have this article updated please send an email
to
> [EMAIL PROTECTED] requesting that they update this article or add an article
> for the frozen-file-attributes check.
>
> I am still in the process of verifing if registering the exception will do
> what you want it to.
>
> Thank you for using System Scanner,
> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> XXXXX
> Support Engineer
>
> Internet Security Systems
>  -The Power to Protect-
>
> Phone:  (404)236-2700  or  888-447-4861
> mailto:[EMAIL PROTECTED]
> http://www.iss.net/customer_care/knowledgebase
> http://www.iss.net
> Request a Knowledgebase Account
> http://www.iss.net/customer_care/knowledgebase/register.php
> Internet Security Systems-The Power to Protect
> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>
> To the Tech,
>
> As I read the X-force doc:
>
> SS should be checking the System, Read-only and Encrypted attributes (See
> attached text.) I presume that this means the check should not be looking
at
> the Archive
> bit.
>
> See the attachment in the original email.
> --
> Regards,
> Sid Witzer
> Citigroup