OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bil Corry (bilBILCORRY.COM)
Date: Wed Dec 19 2001 - 10:41:15 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Russ,

    This is odd. I have the Windows Critical Updates Alert installed on my W2K box (which directs you to windowsupdate.microsoft.com when a "critical update" is available). It just alerted me to install:

    > Security Update, November 13, 2001 (Internet Explorer 6)
    > 447 KB/ Download Time: 1 min
    > This update resolves the "13 November 2001 Cumulative Patch for Internet Explorer"
    > security vulnerability in Internet Explorer 6, and is discussed in Microsoft
    > Security Bulletin MS01-055. Download now to prevent a malicious user from reading
    > or altering the cookies on your computer.

    However, HFNETCHK shows that I'm fully patched:

    > * Internet Explorer 6 Gold
    >
    > INFORMATION
    > All necessary hotfixes have been applied.

    Yesterday I installed IE6.0 (upgraded from IE5.5) then installed MS01-58. I never did install MS01-55 since MS01-58 was "Cumulative" and HFNETCHK showed that I was patched.

    So which is right? Critical Update or HFNETCHK?

    <sigh>

    - Bil

    ======================================
    Delivery co-sponsored by VeriSign - The Internet Trust Company
    ======================================
    Protect your servers with 128-bit SSL encryption!
    Get VeriSign's FREE guide, "Securing Your Web Site for Business." You will
    learn everything you need to know about using SSL to encrypt your e-commerce
    transactions for serious online security. Click here!
    http://www.verisign.com/cgi-bin/go.cgi?a=n016065650057000
    ======================================