RE: DLL versioning info

From: patrick.mannion@us.socgen.com
Date: 08/10/01 

From: patrick.mannion@us.socgen.com
To: RH <RH@beulah.org>
Message-ID: <85256AA4.006116FE.00@ganyc003.us.socgen.com>
Date: Fri, 10 Aug 2001 13:56:46 -0400
Subject: RE: DLL versioning info

filever (from the NT resource kit) does this nicely....

C:\ntreskit>filever
Prints file version information.

filever [/S] [/V] [/E] [/X] [/B] [/A] [/D] [[drive:][path][filename]]

/S Displays files in specified directory and all subdirectories.
/V List verbose version information if available.
/E List executables only.
/X Displays short names generated for non-8dot3 file names.
/B Uses bare format (no dir listing).
/A Don't display file attributes.
/D Don't display file date and time.

C:\ntreskit>filever c:\winnt\system32\mfc42u.dll
----- W32i DLL ENU 6.0.8665.0 shp 995,384 07-26-2000 mfc42u.dll

C:\ntreskit>filever \\server\c$\winnt\system32\mfc42u.dll
--a-- W32i DLL ENU 4.21.0.7160 shp 938,768 08-19-1997 mfc42u.dll

C:\ntreskit>

RH <RH@beulah.org> on 08/08/2001 14:51:07

To: "'MadHat'" <madhat@unspecific.com>, focus-ms@securityfocus.com
cc: (bcc: Patrick MANNION/us/socgen)
Subject: RE: DLL versioning info

This is something that Microsoft should make a tool for and put in plain
site on the patch area of their web site. It should should have remote
connect capabilities, and a virus-scanner-like "signature" database of
patches that can be kept auto-updated.
I know that several MS employees read this list, so how about it? :-)

Ric

-----Original Message-----
From: MadHat [mailto:madhat@unspecific.com]
Sent: Tuesday, August 07, 2001 3:47 PM
To: focus-ms@securityfocus.com
Subject: DLL versioning info

I have seen a few people mention that the only real way of verifying that a
hotfix is installed is by checking the version of the DLL, knowing that
info in the registry may not be accurate because of reinstall apps (like
IIS) may overwrite the newer DLL and the registry entry for the hotfix
would still exist. So with this in mind, does anyone know of a
comprehensive list of DLLs and the proper, most up to date versions, or
versions that fix problem X?

So a listing like

IDA/CodeRed, idq.dll, 5.0.2195.3645 on W2K, 5.0.1781.3 on NT 4.0

Thanks 

--
MadHat at unspecific.com

 **************************************************************************
The information contained herein is confidential and is intended solely
for the addressee(s).  It shall not be construed as a recommendation to
buy or sell any security.  Any unauthorized access, use, reproduction,
disclosure or dissemination is prohibited.

Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates
shall assume any legal liability or responsibility for any incorrect,
misleading or altered information contained herein.
 **************************************************************************

**************************************************************************
The information contained herein is confidential and is intended solely
for the addressee(s).  It shall not be construed as a recommendation to
buy or sell any security.  Any unauthorized access, use, reproduction,
disclosure or dissemination is prohibited.
Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates
shall assume any legal liability or responsibility for any incorrect,
misleading or altered information contained herein. 
**************************************************************************