Re: MS03-049 Scanner?

From: Craig Janssen (cjanssen_at_mail.millikin.edu)
Date: 11/18/03

  • Next message: Mike Theriault: "RE: Hiding MS SQL databases in Enterprise Manager" 
    Date: Tue, 18 Nov 2003 11:33:40 -0600
To: <focus-ms@securityfocus.com>, <smason@state.mt.us>

    HFNETCHK.EXE, developed by Shavlik Technologies, is a free utility that
    will scan Windows workstations and servers and report on missing patches
    and service packs. Check it out at
    http://hfnetchk.shavlik.com/default.asp

    You can also look into the MBSA, Microsoft Baseline Security Analyzer,
    which in addition to checking patch and service pack compliance checks
    for common vulnerabilities in Windows systems, like netbios null
    sessions and IIS vulnerabilities inherent to default installations.
    Check it out at
    http://www.microsoft.com/downloads/details.aspx?FamilyID=9a88e63b-92e3-4f97-80e7-8bc9ff836742&displaylang=en

    Hope this helps,

    Craig

    ______________________________
    Craig Janssen, MCP, A+
    Network and Internet Services Manager
    Millikin University Information Technology Dept
    (217) 362-6488
    cjanssen@mail.millikin.edu

    >>> "Mason, Samuel" <smason@state.mt.us> 11/17/03 01:33PM >>>
    All,

    Is there a free tool available for identifying machines vulnerable to
    MS03-049 on local networks yet or are we even expecting someone to
    develop
    one?

    Thanks!

    Samuel Mason
    Information Technology Security Office
    State of Montana
     

    ---------------------------------------------------------------------------
    Network with over 10,000 of the brightest minds in information
    security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions
    and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_focus-ms_031027
    and use priority code SF4.
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    Network with over 10,000 of the brightest minds in information security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_focus-ms_031027
    and use priority code SF4.
    ---------------------------------------------------------------------------

  • Next message: Mike Theriault: "RE: Hiding MS SQL databases in Enterprise Manager"

    Relevant Pages