OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: MS03-049 Scanner?

From: Vidar Tyldum (vidartyldum.com)
Date: Tue Nov 18 2003 - 09:56:59 CST

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mason, Samuel wrote:

> All,
>
> Is there a free tool available for identifying machines vulnerable to
> MS03-049 on local networks yet or are we even expecting someone to develop
> one?

According to Nessus <http://nessus.org> this vulnerability can not be
remotely checked without trying to trigger en vulnerability. Only
'passive' way to check for it is to check the registry.

More info: <http://cgi.nessus.org/plugins/dump.php3?id=11921>

> Thanks!
>
> Samuel Mason
> Information Technology Security Office
> State of Montana

- --
Vidar Tyldum
EOF
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1-nr1 (Windows XP)

iD8DBQE/ukFYsJJnSzEQqpgRArbPAJ9cFlauQm2oMZcOisyhCxPdjQYOxQCeKr92
Deqkne6C5VZwG+FDRfYifXs=
=/Emx
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ms_031027
and use priority code SF4.
---------------------------------------------------------------------------