Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

MS03-039

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Networking & Security] >> GFI LANguard >> MS03-039 Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
MS03-039 - 10.Sep.2003 7:40:00 PM   
sikosis

 

Posts: 89
Joined: 30.Jun.2003
From: QLD, Australia
Status: offline
I just tried to find this bulletin, but it's not in LNASS.

Any idea when ? This is a very serious bug in Windows.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp
Post #: 1
RE: MS03-039 - 11.Sep.2003 5:35:00 AM   
Karl Garrett

 

Posts: 13
Joined: 11.May2003
From: Swindon, UK
Status: offline
Likewise, We have a large Management visability at the moment & I donj't want to have to rely on another scanning tool. GFI LANGuard could recieve some damage if this isn't addresses quickly..

Karl Garrett - NBS

(in reply to sikosis)
Post #: 2
RE: MS03-039 - 11.Sep.2003 5:39:00 AM   
OldManUnder

 

Posts: 35
Joined: 2.Mar.2003
From: Here and There, USA
Status: offline
I just emailed Eric a MS03-039 only XML file. This one is really streamlined... ~30K. I used it a good bit over night for NT4, W2K, and WXP without issue. Perhaps Eric will post it this morning if he has time.

-Gerald

(in reply to sikosis)
Post #: 3
RE: MS03-039 - 11.Sep.2003 6:11:00 AM   
Karl Garrett

 

Posts: 13
Joined: 11.May2003
From: Swindon, UK
Status: offline
Any Chance you could mail that to me? - this is damm urgent & management are jumping all over...it's making LNSS look stupid.

email is karl.garrett@nationwide.co.uk

cheers

p.s, brief instructions on where to stick it ( ummm) etc would be most appreciated.

(in reply to sikosis)
Post #: 4
RE: MS03-039 - 11.Sep.2003 6:28:00 AM   
Patrizia

 

Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline
The LNSS cab file has now been updated to include the MS03-039 bulettin. If you start LNSS the new files should be downloaded.

(in reply to sikosis)
Post #: 5
RE: MS03-039 - 11.Sep.2003 6:36:00 AM   
Karl Garrett

 

Posts: 13
Joined: 11.May2003
From: Swindon, UK
Status: offline
Just this minute noticed! - many thanks.

I still have issues with getting the updates thru a firewall! - is it me? - or am I going stupid :-) - I thought the updates were http & not ftp?, I know the mssecure.cab file is ok, its just the autoupdate thru LNSS always fails.

Regards

(in reply to sikosis)
Post #: 6
RE: MS03-039 - 11.Sep.2003 8:57:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
initial download of mssecure.xml file (actually lnssprms.cab) is done through an HTTP get, but the update of the security files is done through FTP.

eric

(in reply to sikosis)
Post #: 7
RE: MS03-039 - 11.Sep.2003 9:27:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
for those interested in the ms03-039 only file mentioned above it is now on my website. http://myweb.cableone.net/xnih/download/ms03-039.zip

eric

(in reply to sikosis)
Post #: 8
RE: MS03-039 - 11.Sep.2003 10:46:00 AM   
adfreak

 

Posts: 6
Joined: 10.Sep.2003
Status: offline
So we need to scan all our segments to determine which machines were missed last night when we patched them with MS03-039. If I rename my mssecure.xml file, close NSS, place the MS03-039 related .xml file into C:\program files\gfi\nss, then restart NSS. If I scan a segment, will it come back and tell me which machines are missing the patch???

can that be via a report?

(in reply to sikosis)
Post #: 9
RE: MS03-039 - 11.Sep.2003 10:52:00 AM   
adfreak

 

Posts: 6
Joined: 10.Sep.2003
Status: offline
I just followed the instructions, opened NSS back up and ran a scan. When I look at the hosts on the left hand side and check Alerts, some are reporting missing MS03-039 but some have it as being installed????

(in reply to sikosis)
Post #: 10
RE: MS03-039 - 11.Sep.2003 11:17:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
quote:
When I look at the hosts on the left hand side and check Alerts, some are reporting missing MS03-039 but some have it as being installed????
machines that havne't been rebooted yet, machines that were off, etc????

quote:
If I scan a segment, will it come back and tell me which machines are missing the patch???

can that be via a report?

you and reports...

go into the report manager, select the latest scan, custimize report, make sure it is using default template, click OK, under query:

property: Patch
condition: is not installed
value: MS03-039

should list all machines that do not have MS03-039 installed (plus whatever other patches are not installed, it does not just list that patch if they are missing others in the report).

eric

(in reply to sikosis)
Post #: 11
RE: MS03-039 - 11.Sep.2003 12:31:00 PM   
PSC0bra

 

Posts: 17
Joined: 8.Sep.2003
From: Plano TX
Status: offline
I have the most recent Mssecure.
when i scan a machine that has ms03-039 installed, and machine has rebooted, it shows as uninstalled?

I checked the file version that it keys of off.

I set created an alert to check if this key is installed.

SOFTWARE\Microsoft\Updates\Windows 2000\SP5\KB824146

this works ok but im not sure its as accurate as the file version could be.

Please advise.

Also - how do you make an alert that checks file version?

THanks

(in reply to sikosis)
Post #: 12
RE: MS03-039 - 11.Sep.2003 1:22:00 PM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
don't know of a way to creat an alert on file version info.

why does it claim that MS03-039 is not installed?

it should tell you.

eric

(in reply to sikosis)
Post #: 13
RE: MS03-039 - 11.Sep.2003 1:55:00 PM   
PSC0bra

 

Posts: 17
Joined: 8.Sep.2003
From: Plano TX
Status: offline
It said the version is less than expected.

But i had installed the patch, rebooted.
and when i checked the file manually it was the newer version it was looking for.

Where can i edit what Mssecure is looking for?

(in reply to sikosis)
Post #: 14
RE: MS03-039 - 11.Sep.2003 2:25:00 PM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
mssecure.xml holds all the info it is checking.

eric

(in reply to sikosis)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Networking & Security] >> GFI LANguard >> MS03-039 Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts