OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: XP SP2 - Statement of the NTBugtraq list

From: Nick FitzGerald (nickVIRUS-L.DEMON.CO.UK)
Date: Thu Aug 12 2004 - 20:36:52 CDT


Dan Houtz wrote:

<<snip>>
> Forgot to add that I did find a problem with MSBA. When selecting to print
> a report, it appears to fail. When looking closer, I found that another
> window opened that wasn't viewable - I had to right click on it on the
> taskbar a select "Maximize". Then, in the new windows choose to Allow the
> ActiveX control. After doing this, the print dialogue box appeared and
> everything worked.

Ummmm, there's a note on the TechNet security page:

   http://www.microsoft.com/technet/security/default.mspx

on need to update MBSA to the new, yet to be released, version 1.2.1
for use on XP SP2:

   New Version of MBSA (1.2.1) Needed for Windows XP SP2 Compatibility

   Users of Windows XP Service Pack 2 will need to update their
   Microsoft Baseline Security Analyzer to version 1.2.1 for
   compatibility and deeper integration with SP2 security improvements.

It sounds as if you struck a problem related to the significant
tightening of the default security settings of the My Computer security
zone. Presumably this MBSA issue (and others) will be fixed in the
new version?

--
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

-----
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
-----