Ok. As you have seen in recent messages, I'm having a rough time validating the existence (or lack thereof) of the hotfixes for MS02-008 and 009. Nessus continues to insist that they are not there. In a previous cases that was correct. We did some further investigation and determined that some of the other post sp2 hotfixes were applied in the wrong order. Once we got that straightened out, a new scan was run. Nessus still complains that the patches aren't there. Hfnetchk says they are, and we can verify the existence of the appropriate registry key and files.
It appears that the plugin for MS02-008 may only be checking for Q318203 (patches xml versions 3.x) and not looking for Q318202 or Q317244 (versions 2.x, 4.x). http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318203&SD=MSKB&; The above link basically says something altogether different than the original advisory and appears to contradict. Typical Microsoft I suppose... either that or I've missed something altogether. -----Original Message----- From: Mays Jeff [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 09, 2002 11:23 AM To: '[EMAIL PROTECTED]'; Michael Scheidell Cc: [EMAIL PROTECTED] Subject: RE: Problem with MS02-008 and MS02-009 plugins yep, done that (valid account, that is..). -----Original Message----- From: Boutwell, George [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 09, 2002 11:25 AM To: Michael Scheidell Cc: [EMAIL PROTECTED] Subject: Re: Problem with MS02-008 and MS02-009 plugins Doesn't the plugin require a 'valid' administrator account to even query the registry entries? If so, has he configured NesssusWX to have that account's info (warning clear text). Just a thought. George On 8 May 2002 at 18:13, Michael Scheidell wrote: > > Yes, the patches are EN language. I have looked at the registry (as > > guided by MS patch docs) and on some machines the entries exist, on > > others they do not. I've not yet checked cvs, but will certainly do > > so. > > > I'll check when I get back to office, if registry entry exists and > plugins alerts on it, there i sproblem wiht plugin. if registry entry > DOES NOT exist, then problem with ms > George Boutwell, MIS Programmer I - Valley Hope Association [EMAIL PROTECTED]
