SUS Activity Last night

From: Bailey, Matthew (MBailey_at_CSKAUTO.COM)
Date: 12/10/03

  • Next message: Martin Christopher: "Re: IE URL obfuscation" 
    Date:         Wed, 10 Dec 2003 07:19:50 -0700
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Good Morning Russ,

    I was wondering if you or anybody else saw some weird activity with SUS
    updates last night. Monday I received a notice from my Microsoft TAM
    that no security updates were to be released for the month. When I
    arrived in this morning the log on my SUS server showed this:

    Automatic Sync Started- Wednesday, December 10, 2003 1:00:00 AM
    Successful
    Updates Added:
     Critical Update for Windows XP Media Center Edition 2004 (KB830786) -
    KB830786_WXP_MCE2_ENU_c512cb910f28d8b60515375195560b3.EXE
    Updates Removed:
     810847: February 2003, Cumulative Patch for Internet Explorer 5.01
    Service Pack 3 - Q810847_B3CA04E8D113EBDE0D561AB3AFAA02EBC3922F36.EXE
     813489: April 2003, Cumulative Patch for Internet Explorer 5.01 Service
    Pack 3 - q813489_7526690df0c1e078957b0d83f8018c0.exe
     818529: June 2003, Cumulative Patch for Internet Explorer 5.01 Service
    Pack 3 - q818529_1d67aa22e752bb5ca55eba289ee1e9f.exe
     Q324929: December 2002, Cumulative Patch for Internet Explorer 5.5 -
    Q324929_E34CB7562E3FADE04E0FBA7A8DF20236ABFC6C46.EXE
     810847: February 2003, Cumulative Patch for Internet Explorer 5.5
    Service Pack 2 - Q810847_102065CAD52C737EBBF4422AEF2CAC5E100B6EFA.EXE
     813489: April 2003, Cumulative Patch for Internet Explorer 5.5 Service
    Pack 2 - q813489_8ebdafa9c0f5c09d0678826b4c04de5.exe
     818529: June 2003, Cumulative Patch for Internet Explorer 5.5 Service
    Pack 2 - q818529_d8d150d39cc718ff858be51239ea081.exe
     Q324929: December 2002, Cumulative Patch for Internet Explorer 6 -
    Q324929_55049C7F14E3EFF258F10F95FE0A3C179833CB17.EXE
     Q324929: December 2002, Cumulative Patch for Internet Explorer 6 SP1 -
    Q324929_A90F1A87F766965A4D0FC5F1395F3E808ABE7D27.EXE
     810847: February 2003, Cumulative Patch for Internet Explorer 6 -
    Q810847_DDE9BE0E09FF7E261B1E32AFF6F597FA27A72B6A.EXE
     810847: February 2003, Cumulative Patch for Internet Explorer 6 Service
    Pack 1 - Q810847_C3902604B28A9E2AAD419E883ACC553FD69B84F9.EXE
     813489: April 2003, Cumulative Patch for Internet Explorer 6 -
    q813489_2fd2c598d4beecc513c2798f443cf8e.exe
     813489: April 2003, Cumulative Patch for Internet Explorer 6 Service
    Pack 1 - q813489_3a4cba12c72c64d461b611365375bc9.exe
     818529: June 2003, Cumulative Patch for Internet Explorer 6 -
    q818529_5a71949492d46d5a9ed0713ed68cc98.exe
     818529: June 2003, Cumulative Patch for Internet Explorer 6 Service
    Pack 1 - q818529_94327511db0b86d509decf6a3becf73.exe
     818529: June 2003, Cumulative Patch for Internet Explorer -
    WindowsServer2003-KB818529-x86-ENU_0f07225ca313bf45fe205783dd059d0.exe
    Reissued Update(s):
     Security Update, February 14, 2002 (Internet Explorer 5.5) -
    VBS55NEN_A76B47D34E497BB2C14BA3CBED923CC042406C8B.EXE
     Security Update, March 7, 2002 -
    Q313829_F56D00FEAAE71A0F246EA0A042B92AEEEC822F9D.exe
     814078: Security Update (Microsoft Jscript version 5.1, Windows 2000) -
    js51nen_8812c08817b46676876f0e06a3cda5b.exe
     814078: Security Update (Microsoft Jscript version 5.6, Windows 2000,
    Windows XP) - JS56_DB18C6EA0F4E8522715BEEA284F6843ECE71D944.EXE
     Windows 2000 Service Pack 4 Network Install for IT Professionals -
    w2ksp4_en_7f12d2da3d7c5b6a62ec4fde9a4b1e6.exe
     Flaw In Windows Media Player May Allow Media Library Access (819639) -
    WindowsMedia9-KB819639-x86-ENU_bfd620da8e1529c3e4ffadfb93f33fa.exe
     Q329390: Security Update -
    Q329390_WXP_3F60064794271F0053892985402FE5B6679D3F2D.EXE
     Q329115: Security Update (Windows XP) -
    Q329115_WXP_SP2_X86_1D09793FAF21249FEBCC160D341612338DFD3154.EXE
     Security Update for Windows XP (KB810217) -
    WindowsXP-KB810217-x86-ENU_696190f151ea0bcb063f0a89471e45b.exe
     Q811114: Security Update (Windows XP or Windows XP Service Pack 1) -
    Q811114_WXP_SP2_x86_ENU_63cfc7cfc1fb0ad0b7df3c483b75760.exe
     Detailed item description files (Read This First and End User License
    Agreement for all items) - aurtf1.cab
    Sync Finished-Wednesday, December 10, 2003 1:09:01 AM

    Do you have any other reports of this? Or can you shed any light on it?

    Thanks,

    - Matt

    Matthew Bailey
    LAN Engineer
    CSK Auto, Inc.
    *: 602.631.7486
    * : 602.294.7486
    *: mbailey@cskauto.com 

    ----
NTBugtraq subscribers save $103.00 off the TICSA exam by using promo
code "NT1003" when registering to take the TICSA exam at www.2test.com.
Prove to your employer and peers that you have the knowledge and
abilities to be an active stakeholder in today's enterprise security.
Become TICSA certified www.trusecure.com/ticsa.  Promotion expires
12/31/03 and cannot be used in combination with other offers.
----
  • Next message: Martin Christopher: "Re: IE URL obfuscation"

    Relevant Pages

    • How to re-enable username:password@ after Patch disables it
      ... Cumulative Security Update for Internet Explorer ... other updates of the cumulative patch. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: New install of winxp home.....
      ... Download the SP2 and all subsequent patches on another already secured ... Turn on "Automatic Updates" and create the following registry key to be ... If you are going to use Internet Explorer and Outlook Express: ...
      (microsoft.public.security)
    • Re: sluggish computer net clr problem
      ... I am using Windows XP and Internet Explorer 6 I can't ... As for the updates - change the way Automatic Updates work - tell it not to ... Visit http://windowsupdate.microsoft.com/ and if told you need to install ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: sluggish computer net clr problem
      ... I am using Windows XP and Internet Explorer 6 I can't ... As for the updates - change the way Automatic Updates work - tell it not to ... Visit http://windowsupdate.microsoft.com/ and if told you need to install ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: POSSIBLE AND COSTLY IE7 installation!
      ... If you would like - please describe your issues when attempting to install ... Internet Explorer 7 on your Windows XP Professional with SP3 machine. ... I can suggest getting most of the "Optional Software" updates as well ...
      (microsoft.public.windowsupdate)