ran autopatcher, belarc advisor tells me 5...
six4withafro
15 Jul 2008
this program rocks and I would imagine that the issue is related to what I've read here about SP3 uninstalling some of the previous fixes, but when I ran Belarc Advisor after running autopatcher, it says I'm missing the following updates:
These required security hotfixes (using the 07/08/2008 Microsoft Security Bulletin Summary) were not found installed. Note: CIS benchmarks require that Critical and Important severity security hotfixes must be installed.
Q941693 - Important MS08-025: Vulnerability in Windows Kernel could allow elevation of privilege
Q945553 - Important MS08-020: Vulnerability in DNS client could allow spoofing
Q948590 - Critical MS08-021: Vulnerability in GDI could allow remote code execution
Q950749 - Critical MS08-028: Vulnerability in the Microsoft Jet Database Engine could allow remote code execution
Q951748 - Important MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008
I ran autopatcher again to see if maybe it needed to install the first batch before it installed these (I know that occasionally happens with software), but that wasn't the case. I'm pretty sure that the DNS client vulnerability was replaced by a version 2, but I don't know about the rest.
Thanks for any responses to this, I know it's complicated. (and perhaps a mod could move it if necessary to a more appropriate forum).
These required security hotfixes (using the 07/08/2008 Microsoft Security Bulletin Summary) were not found installed. Note: CIS benchmarks require that Critical and Important severity security hotfixes must be installed.
Q941693 - Important MS08-025: Vulnerability in Windows Kernel could allow elevation of privilege
Q945553 - Important MS08-020: Vulnerability in DNS client could allow spoofing
Q948590 - Critical MS08-021: Vulnerability in GDI could allow remote code execution
Q950749 - Critical MS08-028: Vulnerability in the Microsoft Jet Database Engine could allow remote code execution
Q951748 - Important MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008
I ran autopatcher again to see if maybe it needed to install the first batch before it installed these (I know that occasionally happens with software), but that wasn't the case. I'm pretty sure that the DNS client vulnerability was replaced by a version 2, but I don't know about the rest.
Thanks for any responses to this, I know it's complicated. (and perhaps a mod could move it if necessary to a more appropriate forum).
James
15 Jul 2008
six4withafro, on Jul 15 2008, 08:14 AM, said:
this program rocks
For the rest of your post, my first impression is that Belarc is a little confused as to what updates apply to Windows XP SP3.
KB941693, for example, is only applicable to SP2. KB948590 is linked to KB941693 and the same applies.
Have you confirmed the missing updates with anything else (like MBSA or Windows Update)?
KB951748 is definitely in AutoPatcher. There was a slight delay in including this whilst the ZoneAlarm fiasco was sorted out (by ZoneAlarm).
When did you last run APUP?
--
DesertJerry
16 Jul 2008
Ran APUP then AutoPatcher yesterday.
Ran Belarc ten minutes ago - no updates/etc were missing.
Running XP Pro w/SP3.
Have no ready explanation for differences.
Ran Belarc ten minutes ago - no updates/etc were missing.
Running XP Pro w/SP3.
Have no ready explanation for differences.
