OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Calanan, Michael (calanangogstats.org)
Date: Thu Aug 16 2001 - 09:16:37 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Re: http://support.microsoft.com/support/kb/articles/q303/2/15.asp

    Has anyone been able to spend some time with this beast? I have little,
    if any, faith in the previous scanner, "hfcheck.wsf," as in my
    experience (Win2K SP2 Server-based domain) it was frequently incorrect
    in its reporting, e.g. reporting a server had no missing hotfixes when I
    knew for certain that it was missing some. Without getting into a
    discussion about the flaws of that tool though, I'm more interested in
    knowing if you have found this new tool not only to be reliable in
    detecting missing hotfixes but also if it is able to properly check the
    state of currently-installed patches. I spot-ran it against a few of my
    servers and it _seems_ to be properly reporting the state patch
    applications - I plan to do some more thorough testing later this
    afternoon.

    Would anyone care to discuss this new tool, make constructive criticism,
    etc.?

    Also, I see MS has released an IIS 4.0/5.0 rollup in MS01-044,
    http://www.microsoft.com/technet/security/bulletin/MS01-044.asp
    Unfortunately my shop does not yet have the luxury of a test Win2K
    domain/environment and before I play guinea pig with it I would like to
    know if anyone has applied it and has found any problems with it.

    As a matter of fact, I'm curious to see how HFNetChk reports a Win2K
    server's IIS patches once MS01-044 is applied!

    Thanks,

    - mike

    Michael C. Calanan, Systems/Network Analyst
    mailto:calanangogstats.org
    Gynecologic Oncology Group, Statistical and Data Center at Roswell Park
    Cancer Institute
    Buffalo, NY