It's not clear to me why the MS03-039 plugin is still required. According to the Microsoft site the patch MS04-012 completely replaces MS03-039 for NT4, 2000, XP and 2003. See the faq at: http://www.microsoft.com/technet/security/bulletin/MS04-012.mspx
The problem I have is that for fresh installs, MS03-039 never needs to be applied (MS04-012 is instead). As a result all systems with fresh installs show up as missing MS03-039 which seems to be irrelevant. Neither Patchlink nor MBSA require the installation of MS03-039, just MS04-012. The only significant vulnerability is whether or not MS04-12 is installed. Is this not the case, or am I missing something here? Peter Heard ------------------------------------------------------------------------ Peter Heard E-mail: [EMAIL PROTECTED] Electrical Engineer Phone: 1 (604) 231-2358 (direct) MacDonald Dettwiler Phone: 1 (604) 278-3411 (operator) 13800 Commerce Parkway, Fax: 1 (604) 278-2936 Richmond BC Canada, V6V 2J3 URL: http://www.mda.ca ------------------------------------------------------------------------ -----Original Message----- From: Jason Haar [mailto:[EMAIL PROTECTED] Sent: August 10, 2004 6:04 PM To: [EMAIL PROTECTED] Subject: Re: MS03-039 Plugin and WinXP SP2 I think I've figured out the problem. Some or all of the XP SP2-installed boxes have reduced registry access to that section! So the unpriviledged account I was using to run the scan can no longer return those keys. Weird, other registry lookup failures appear to be caught by Nessus with statements like "this may be a false positive if the account you are using doesn't have administrative access". Should those key lookups also contain such a statement? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
