Patching and Scanning script available
From: Vijay Ramcharan (vramcharan_at_THEDEAL.COM)
Date: 10/20/03
- Previous message: Jean-Baptiste Marchand: "Re: MS03-043 Popup Messenger Servce buffer-overflow"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 20 Oct 2003 10:35:53 -0400 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
For those interested, I've written a patching/scanning script for
WinNT/2000/XP which can be downloaded from the FTP site below in the
'NetScripts\ScanPatchFix' directory.
Please note: Any computer which gets a service pack update from the
script WILL BE REBOOTED regardless if a user is logged in or not. Scan
your computers first and then determine an update schedule or notify
those users who will get a service pack update.
Let me know if you have any questions/comments.
Pluses:
Automates scanning/patching
Downloads and saves patches for future use so you don't have to download
the same files over and over
Supports patches found by MBSACLI
Always uses latest available version of MSSECURE.XML from Microsoft
Fairly extensive logging to Access database of all actions taken by the
script
Reports can be created in Access
Can be scheduled to run at your convenience
Minuses:
No Office Patches
If MSSECURE.XML does not contain a valid link to an "exe" patch then
you'll have to manually download the patch and place it in the correct
location. Not too many of these.
Uninstalls of patches NOT supported, may be integrated into a later
release if I get enough requests
Scans/Patches computers one at a time (could be remedied as explained in
the instructions)
Download the script, ActiveX file/page download component, instructions,
and related files via FTP from:
66.192.203.23
User: netscript
Pass: n3ts
Directory: Netscripts\ScanPatchFix
Please read the ScanPatchFix README file before using the script.
Be sure to test thoroughly BEFORE applying in a production network!!!
Vijay Ramcharan, MCSE, CCNP/DP
Network Manager, The Deal LLC
---- NTBugtraq subscribers save $103.00 off the TICSA exam by using promo code "NT1003" when registering to take the TICSA exam at www.2test.com. Prove to your employer and peers that you have the knowledge and abilities to be an active stakeholder in today's enterprise security. Become TICSA certified www.trusecure.com/ticsa. Promotion expires 12/31/03 and cannot be used in combination with other offers. ----
- Previous message: Jean-Baptiste Marchand: "Re: MS03-043 Popup Messenger Servce buffer-overflow"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
