Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

MS04-011, MS04-012, MS04-013, and MS04-014

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Networking & Security] >> GFI LANguard >> MS04-011, MS04-012, MS04-013, and MS04-014 Page: [1]
Login
Message << Older Topic   Newer Topic >>
MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 9:08:00 AM   
wayneadkins

 

Posts: 11
Joined: 26.Jan.2004
From: Kentucky
Status: offline 		Microsoft released new patches yesterday evening, how long will it be before MS04-011 thru -014 is recognized by languard.
Post #: 1
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 10:00:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		normally within 24 hours.

eric

(in reply to wayneadkins)
Post #: 2
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 10:08:00 AM   
wayneadkins

 

Posts: 11
Joined: 26.Jan.2004
From: Kentucky
Status: offline 		Thanks. That is what I thought, but am starting to get questions from our Information Security department. Just needed verification.

(in reply to wayneadkins)
Post #: 3
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 1:02:00 PM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		it has been updated now according to an email I just got (or just noticed).

So assuming you have it set to autodownload the updates the next time you restart LNSS it should have information on them, plus about 4 others that have been updated.

eric

(in reply to wayneadkins)
Post #: 4
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 2:04:00 PM   
InfoAdmin

 

Posts: 9
Joined: 30.Oct.2003
Status: offline 		Eric,
What is the latest version of LNSS 3.3 to date?
I have restarted mine, and it's not updating....
I am using version 20040204. Is there a later version out there?

(in reply to wayneadkins)
Post #: 5
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 14.Apr.2004 5:38:00 PM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		InfoAdmin,

2 different updates here. The one you are talking about (version of LNSS) is actually the version of languard.exe, which 20040204 sounds about right. LNSS 3.x did not have the ability to update itself (languard.exe) or tell if a new build of it was out.

The update we were talking about was the update of the mssecure.xml file. This setting is under Scan > Options > Alerts, Yes, download updates from the following location. That location should point at GFI. (Doing the above from memory since I'm not sitting at a machine with LNSS installed).

You can check to see if your mssecure.xml is up to date by doing a search for specific bulletins, such as ms04-013 in the find bulletin option. If it finds it you should have the latest mssecure.xml from GFI, if it doesn't check to make sure it is set to download that as mentioned above.

eric

(in reply to wayneadkins)
Post #: 6
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 15.Apr.2004 4:13:00 AM   
scottf51

 

Posts: 21
Joined: 18.Jan.2004
Status: offline 		Hi Eric,

Is MS04-013 supposed to be detetcted? (cumulative update for outlook express). It just that its not showing on XP Pro SP1a English or 2000 SP4 English. The good news is that at least XP SP1a is giving the same results as 2Kpro now [Smile]

Scott

(in reply to wayneadkins)
Post #: 7
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 15.Apr.2004 8:30:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		Outlook Express patches, nope, not unless it is a new supported product. Outlook Express has never been one of the products LNSS supports.

Here is the list of official supported products:
http://kbase.gfi.com/showarticle.asp?id=KBID001626

There are other posts about how I've modified (read non supported) the products.xml to identify other products and there is info on my web site about adding some of those to the products.xml (http://myweb.cableone.net/xnih) that you may want to look at if you need to detect/patch Outlook Express. It isn't a product that is used at the university I work at (neither is outlook actually) so it has never been something I've spent time to try to figure out and make work.

eric

(in reply to wayneadkins)
Post #: 8
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 15.Apr.2004 8:52:00 AM   
scottf51

 

Posts: 21
Joined: 18.Jan.2004
Status: offline 		Thought that may be the case, just thought it may be supported as part of the OS since it is classed by Microsoft as a component of Windows.

I don't use Outlook Express either but Microsoft say the following:
===============================================

I do not use Outlook Express to read e-mail or newsgroups. Am I at risk from this vulnerability?

Yes. Because Outlook Express is installed by default, customers will be at risk until this update is applied. An attacker could exploit this vulnerability through a malicious Web site or through HTML e-mail, regardless of whether Outlook Express is the default e-mail reader.
================================================

What makes it even better is that :

================================================

MBSA does not currently scan for Outlook Express-related security updates. However, Windows Update will successfully detect and install this update if it is required. For more information about MBSA and the products that MBSA currently scans, visit the following
=================================================

So what they are saying is that you cannot tell whether it is installed and its a hole big enough to drive a bus through. Their solution, go to Windows update blah blah ! gotta love Microsoft, trustworthy computing my ....... [Wink]

:edit

What language did you write the utils you have on your site in ? Just curious [Smile]

:edit

Seem to be having another problem though, recently NSS has started giving me this message with Win2Kpro SP4 english language

=================================================
Check for missing patches ...
Unable to determine language identifier!
Switching to English language.
Installed Products :
-> Windows 2000 Professional Service Pack 4
=================================================

it then detects ms03-042 as being missing which it isn't, happened on 3 machines so far, they used to be ok and I haven't changed the setup at all. I am using Version: 3.3 Build 20040204

Scott

[ April 15, 2004, 04:02 PM: Message edited by: scottf51 ]

(in reply to wayneadkins)
Post #: 9
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 15.Apr.2004 10:31:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		we'll tackle these a few at a time:

my programs - all written in Delphi 6 (visual pascal)

Outlook Express - Nice.. will pass it on. You can always push the patch as a custom patch through LNSS to all of your machines.

and...

quote:
Seem to be having another problem though, recently NSS has started giving me this message with Win2Kpro SP4 english language

=================================================
Check for missing patches ...
Unable to determine language identifier!
Switching to English language.
Installed Products :
-> Windows 2000 Professional Service Pack 4
=================================================

it then detects ms03-042 as being missing which it isn't, happened on 3 machines so far, they used to be ok and I haven't changed the setup at all. I am using Version: 3.3 Build 20040204
The can't determine language is because it either is having problems connecting to the registry at that point in time, or the key that it is looking for doesn't exist. All that happens then is that it defaults to English.

As for saying it is missing and you claim it isn't, why does it claim it is missing? What .dll file is out of date? On one of those machines please verify the version info on that file.

For the most part, odds are if it is claiming it is missing because a .dll is out of date, the .dll probably is out of date. But we shall see.

eric

(in reply to wayneadkins)
Post #: 10
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 15.Apr.2004 10:52:00 AM   
scottf51

 

Posts: 21
Joined: 18.Jan.2004
Status: offline 		Hi,

Ok it failed because a registry entry wasn't there but updates are still being missed on this machine, other 2000 sp4 english machines show them as missing but the ones that flag the language error up miss the following patches

ms04-013
ms04-014
ms04-012
ms04-011

kb 831167 patch is also missed but I don't think LNSS detects it anyway (although it is listed as a critical update by microsoft and IE is supported???).

Regards

Scott

(in reply to wayneadkins)
Post #: 11
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 16.Apr.2004 4:40:00 AM   
scottf51

 

Posts: 21
Joined: 18.Jan.2004
Status: offline 		Cancle the language identifier problem, just downloaded LNSS 5 and there is no problem,must have been a bug in my build, just waiting for my licence key now [Smile]

(in reply to wayneadkins)
Post #: 12
RE: MS04-011, MS04-012, MS04-013, and MS04-014 - 16.Apr.2004 9:28:00 AM   
xnih

 

Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline 		Scott51,

Ok, so what issues are you still having? Too many posts now, so lets get back to the issues you are seeing in one msg.

eric

(in reply to wayneadkins)
Post #: 13
Page:   [1]
All Forums >> [Networking & Security] >> GFI LANguard >> MS04-011, MS04-012, MS04-013, and MS04-014 Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts