Re: MS02-065
From: Charles Otstot (saries@nc.rr.com)
Date: 11/20/02
- Next message: Bernt Lervik: "Re: How do I remove the server header in IIS6?"
- Previous message: Karl Levinson [x y] mvp: "Re: IISLock has disabled ASP & SQL"
- In reply to: Stephen Pak: "MS02-065"
- Next in thread: Stephen Pak: "Re: HFNETCHK -v"
- Reply: Stephen Pak: "Re: HFNETCHK -v"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Charles Otstot" <saries@nc.rr.com> Date: Wed, 20 Nov 2002 16:28:50 -0500
Hi Stephan,
The yellow X's simply says (as indicated) that the xml file used by MBSA
cannot *confirm* that the specific patch is installed. The referenced KB
article (Q306460) will (in general) cross-reference the KB article you can
use to confirm that said patch *is* installed (e.g. MS01-022 has multiple
versions of msdaipp.dll to be considered "patched", there is a KB article
detailing which versions are correct and which are not).
The red X indicates that (for a patch the xml file *can* confirm) one or
more criteria are not met within the xml file to consider the patch
(correctly) installed. Running hfnetchk with the "-v" option will indicate
*why* the xml file considers a patch not installed.
In the case of MS02-008 specifically, if you have IE 6 SP1 installed, the
patch will show up with a red X. SP1 installs a version of msxml3 that is
newer than the patched version of the file (the newer version is fine even
though it's not reflected in the xml file). Bear in mind that you may have
anywhere from 1-3 separate patches to install for this bulletin, so the
above may or may not apply in your case. Again, running hfnetchk with the
"-v" option will tell you why the xml file considers this specific patch not
installed.
Hope this helps,
Charlie
"Stephen Pak" <asiats@hotmail.com> wrote in message
news:#Q93I0MkCHA.1700@tkmsftngp09...
> Hello Everyone,
>
> I just installed the MS02-065 patch on my system. However, when I run the
> MS Baseline Security Analyzer, it tells me that the hotfix cannot confirm
> (Yellow X).
>
> In addition, the following hotfixes are either missing or cannot confirm:
>
> MS02-008 (Missing, Red X)
> MS01-022 (Cannot Confirm, Yellow X)
> MS02-053 (Cannot Confirm, Yellow X)
>
> I also tried to use the hfnetchk tool to vertify the above hotfixes.
> However, it tells me to refer to Q306460 for a detailed explanation.
>
> So, my question is ... Did I really apply the patches to my system? Or,
the
> way I apply the patches is not correct.
>
> Any help would be greatly appreciate.
>
> Thanks,
>
> Stephen
>
>
- Next message: Bernt Lervik: "Re: How do I remove the server header in IIS6?"
- Previous message: Karl Levinson [x y] mvp: "Re: IISLock has disabled ASP & SQL"
- In reply to: Stephen Pak: "MS02-065"
- Next in thread: Stephen Pak: "Re: HFNETCHK -v"
- Reply: Stephen Pak: "Re: HFNETCHK -v"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
