Secunia Software Inspector OS Security Assessment problem
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Secunia Software Inspector OS Security Assessment problem
- From: "David ROBERT" <david@xxxxxxxxxxxxxx>
- Date: Mon, 26 Feb 2007 21:47:51 +0100
- Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=TsfP+WF5JGirdLy2bOS2FWthqc+4dYyVZs8yQnvjszDxBwBRGtLnqL1gVnFyffLB+5Vvsp2GHDWggln8cbHZ2+AMRK1e2if7e2BhFMI8BqRah3ruM+wKhyX33eHkNK4xv21bIGBSCsh9bfdSPWc9fi4IMTHaUfi951+FJIcH+YE=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=RG9/+n8+3HvQk7dkPwdR0BR99tQjuAg6HNWfW4G2oaXR6RST5HOd6g47hfkPbceiLlyq2tdLxmGk9XisbEkiPcXRW7GFfP3/YVW9XOY0AKkuU6cgcfZk9u+06LsrEzBXK2ikpZz/U8BAuyRzXm4FqWS7HhHz5vr0J7ig26D/530=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
- Sender: castlebbs@xxxxxxxxx
Hello,
Secunia Software Inspector is an online tool which detects insecure versions
of applications installed and verifies that all Microsoft patches are applied.
It runs through your browser, need java and no installation or
download is required.
The problem is that in case your computer can't connect to windows
update servers
(many reasons for that *) it will give you a wrong information that your Windows
Operation system is up to date with all security related patches from Microsoft
are installed even if this is not true (!).
So be careful about that, global status will report 1 error detected
about an error
while searching for missing windows updates. But Status for the OS patch
level will be Ok (green) ! :
Microsoft Windows is up-to-date, Your system has all security related patches
for Microsoft installed
(*) There can be many reasons (network problem, firewalls, etc.) for your
computer not to be able to connect to windows update servers.And a lot of
personal firewalls and anti virus tools (like Sophos, Mac Afee Virus scan)
will not allow svchost.exe to open a connexion to the wild world. svchost.exe
is the process which will try to connect to the windows update servers.
Secunia has been advised about this problem.
David ROBERT
http://ombrepixel.com/drobert/