Re: HfNetChk Message: File versions greater than expected:
From: Eric (ews@tellurian.net)Date: 05/07/02
- Previous message: Deus, Attonbitus: "Publishing Nimda Logs"
- In reply to: Secure Green: "HfNetChk Message: File versions greater than expected:"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 07 May 2002 09:18:25 -0700 To: "Secure Green" <sec_green@yahoo.com>, <focus-ms@securityfocus.com> From: Eric <ews@tellurian.net>
this has been discussed on the hfnetchk newsgroup (msnews.microsoft.com -
microsoft.public.security.hfnetchk)
mssecure.xml only contains information on security bulletin related
patches. In your situation, you are seeing the results of having applied
the Com+ SP1 from the Windows Udpate-Additional Patches section. This SP
includes 8 files that are also included in the 02-001 patch - but these 8
files are more recent than the ones in the SRP. Since the XML file doesn't
contain non-security-related patch data, this is expected outcome. You
can use '-s 2' to suppress all warning and note messages, if you'd like,
though this would suppress other warnings as well.
At 08:31 AM 5/7/2002 -0400, Secure Green wrote:
>System Info:
>
>Windows 2000 Pro, SP2
>All Critical Updates installed via Windows Update
>All HfNetChk suggested hotfixes installed.
>
>When running HfNetChk, using the latest xml file (XML data version =
>1.0.1.278 Last modified 5/6/2002), I get the following message:
>
>Warning MS02-001 Q311401
>
>File C:\WINNT\system32\catsrv.dll has a file version that is
>greater than what is expected.
>
>The above sentence is repeated for each of the following files:
>C:\WINNT\system32\catsrvut.dll
>C:\WINNT\system32\clbcatex.dll
>C:\WINNT\system32\clbcatq.dll
>C:\WINNT\system32\colbact.dll
>C:\WINNT\system32\comsvcs.dll
>C:\WINNT\system32\comuid.dll
>C:\WINNT\system32\dtcsetup.exe
>C:\WINNT\system32\es.dll
>
>This started happening around the time that I allowed WindowsUpdate to
>install the .NET Framework SP1, but I haven't done enough research to nail
>that down as the definite cause. Has anyone else seen this message? It
>would not appear to be a concern that files were "newer" than the ones
>expected, but it seems odd that Microsoft wouldn't update the xml file to
>account for the .NET Framework Service Pack since it was available on
>Windows Update. Any insight into this anomaly would be appreciated.
>
>regards,
>--SG
- Previous message: Deus, Attonbitus: "Publishing Nimda Logs"
- In reply to: Secure Green: "HfNetChk Message: File versions greater than expected:"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
