Yet another MS03-026 Question
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login | |
|
Yet another MS03-026 Question - 19.Aug.2003 11:08:00 AM
|
|
|
alexwc4
Posts: 2
Joined: 18.Aug.2003
From: Dallas TX
Status: offline
|
I have 4000 total machines. Most are NT 4 workstations. I ran a scan over one subnet (about 40 machines) and I ran patches for all computers, but the 823980 patch for workstations was not listed and did not run. The NT server patch was successful. When I zeroed in on one workstation, the workstation patch did appear and ran successfully. I am only running the 823980 patches for this go-around. I am new to the forum, and didn't see this issue in the existing threads.
|
|
|
|
RE: Yet another MS03-026 Question - 19.Aug.2003 12:33:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
so on a large scan it was not detecting 823980 as being missing on workstations? But on a single IP scan it was?
We will start with the same old first questions: 1. What version are you running (exact version click on Help > version Number and get the 2003xxxx date also). 2. Scan > Options > Alerts tab, setup to autoupdate, pointed to gfisoftware and not microsoft? (I assume this is a yes since it sounds like scans were working in some cases) 3. What credentials are you using? Existing, specific, if specific, local user or domain user.
Then on a large scan, or a scan of a few machines need to look at the debug info, is it actually gathering info from the machine on missing patches or did the machine not respond to specific queries and therefor we didn't actually get any missing patches listed from the machine.
eric
|
|
|
|
RE: Yet another MS03-026 Question - 19.Aug.2003 2:19:00 PM
|
|
|
alexwc4
Posts: 2
Joined: 18.Aug.2003
From: Dallas TX
Status: offline
|
1. Version: 3.3 Build 20030716 2. Yes, auto and GFI 3. Domain Admin username
Actually, on the larger scan it did show 823980 as missing, I can still see it in the HTML saved version. What did not happen is I did not get offered the 823980 patch for NT workstations on the list of patches when I chose patch all. I did get and deploy the server version.
I did see a discrepancy on the Microsoft site for the patch. NT Workstation is listed as affected in MS03-026, but the requirements for 823980i.exe say NT server. No workstation patch is mentioned. When I scanned 1 workstation, the 823980i.exe file is what NSS used to patch it. That one replied as completed successfully. These facts do not add up well for me, I need to take more math.
I know that MSBlaster/LoveSan did not target NT, but what about next week's worm?
|
|
|
|
RE: Yet another MS03-026 Question - 19.Aug.2003 5:07:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
will pass it onto development, might be an issue with the mssecure.xml file, but I'm not sure right now (currently looking through packet captures for ICMP packets and blaster.d stuff, oh boy fun, 50+ and going... universities are so nicely setup for these things....)...
eric
|
|
|
|
RE: Yet another MS03-026 Question - 20.Aug.2003 8:45:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
what SP level are you NT4 WS at?
eric
|
|
|
|
RE: Yet another MS03-026 Question - 26.Aug.2003 1:53:00 PM
|
|
|
Greg_SD
Posts: 1
Joined: 25.Aug.2003
From: San Diego
Status: offline
|
quote: I did see a discrepancy on the Microsoft site for the patch. NT Workstation is listed as affected in MS03-026, but the requirements for 823980i.exe say NT server. No workstation patch is mentioned.
You wonÆt see workstation listed anymore. Support for workstation has been officially dropped. Server is still supported. The patches will be the same since they both use the same kernel, registry setup, etcà That is the right patch for WS.
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|