RE: Just a heads up on the ISAPI idq.dll test

[Phelps Troy A SrA 88 CG/SCSI]

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

We have also had the same problem, but one thing that came to light about this check 
is that it does not work if netbios is disabled.  If anyone knows a sure way to make 
this vulnerability work please reply.  Thanks!!!   Or any other checks that maybe you 
all have found that does not work.

Troy A. Phelps, SrA, USAF 
 

    


-----Original Message-----
From: Gary Flynn [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 19, 2001 4:12 PM
To: [EMAIL PROTECTED]
Subject: Just a heads up on the ISAPI idq.dll test



TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

It hasn't worked here. I've had to patch two
systems that the scanner told me were fine.
In fact, I ran the single test across several
thousand machines and it told me all were fine...
something I just knew couldn't be right.

So if you're using it to find machines susceptible
to the Red Code worm, I don't think you're getting
accurate data.

IisIsapiIdqBo under NT Patches for MS01-033

-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml