RE: MBSA 1.2

I'm using Nessus 2.0.6. Where do you enable this feature? Is it only
in more recent versions of Nessus?

Mike Fetherston

> -----Original Message-----
> From: Todd [mailto:tod_at_megachump.com]
> Sent: Friday, February 13, 2004 6:59 PM
> To: security-basics_at_securityfocus.com
> Subject: Re: MBSA 1.2
>
> Which tool has a robust set of reporting features in relation to
multiple
> Windows hosts and their patches?
>
> On Thu, Feb 12, 2004 at 10:54:54AM -0500, Mike wrote:
> > I don't believe that Nessus scans for the presence of Windows
patches.
> > It's more of a general tool that looks for vulnerabilities in
services
> > offered. It also looks at general configuration problems that can
be
> > detected over a network link. I don't believe that it can inspect
the
> > registry or look at the filesystem. Take a look at HFNetChk or
MSBSA
> > for those purposes.
> >
> > I find Nessus to be a very good complement to these tools when
> > performing security scans as it will uncover issues that HFNetChk or
> > MSBSA don't even look for and vice versa, HFN and BSA look at items
that
> > Nessus can't/won't.
> >
> > Mike Fetherston
> >
> > > -----Original Message-----
> > > From: Aditya, ALD [Aditya Lalit Deshmukh]
> > > [mailto:aditya.deshmukh_at_online.gateway.technolabs.net]
> > > Sent: Wednesday, February 11, 2004 12:46 PM
> > > To: Nagy Gergely; security-basics_at_securityfocus.com
> > > Subject: RE: MBSA 1.2
> > >
> > > maybe you are using the wrong tool for this
> > >
> > > we use gfi languard which has the ability to scan for missing
patches
> > also
> > > download the latest update from the windows site
> > >
> > > the address is there in the gfi langurd options
> > >
> > > also there is a shareware avilabe for download from the website
> > >
> > > -aditya
> > >
> > > > -----Original Message-----
> > > > From: Nagy Gergely [mailto:gergely.nagy_at_is-energy.hu]
> > > > Sent: Tuesday, February 10, 2004 5:46 PM
> > > > To: security-basics_at_securityfocus.com
> > > > Subject: RE: MBSA 1.2
> > > >
> > > >
> > > > Does Nessus run on XP?
> > > > How can I set it to scan all the Microsoft patches on the given
> > system
> > > and
> > > > vulnerabilites?
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: Rohan Amin [mailto:rohan_at_rohanamin.com]
> > > > Sent: Thursday, February 05, 2004 1:51 AM
> > > > To: Nagy Gergely
> > > > Cc: security-basics_at_securityfocus.com
> > > > Subject: Re: MBSA 1.2
> > > >
> > > > A colleague and I have had success with using Nessus
> > > > (http://www.nessus.org) for this purpose. Just modify
> > smb_login.nasl
> > > > to use the various Administrator passwords that you have.
Nessus
> > > > already includes a few checks for some patches, but if you need
more
> > > > you can always write some (its quite easy using NASL). Of
course,
> > you
> > > > are trusting the registry to give you accurate information but
it
> > > > might be better than nothing.
> > > >
> > > > Hope this helps,
> > > >
> > > > Rohan
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > On Tue, Feb 03, 2004 at 04:01:46PM +0100, Nagy Gergely wrote:
> > > > > Hi all,
> > > > >
> > > > > I have a very heterogenous infrasturcture, with most PC's
> > > > logged into NDS.
> > > > > What is the use of MBSA (that requires local admin priv) if
all
> > the
> > > PC's
> > > > > have different local admin passwords?
> > > > > In this case, am I not able to scan the situation on the whole
> > > network?
> > > > > Then what else tool could I use to determine the state of
patches?
> > > > >
> > > > > Br,
> > > > >
> > > > > Gery
> > > > >
> > > > >
> > > > >
> > > > > Ez a level virusellenorzesen esett at!
> > > > >
> > > > > This message was checked against viruses!
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
------------------------------------------------------------------
> > > > ---------
> > > > > Ethical Hacking at InfoSec Institute. Mention this ad and get
> > > > $720 off any
> > > >
> > > > > course! All of our class sizes are guaranteed to be 10
students
> > > > or less.
> > > > > We provide Ethical Hacking, Advanced Ethical Hacking,
Intrusion
> > > > Prevention,
> > > > > and many other technical hands on courses.
> > > > > Visit us at http://www.infosecinstitute.com/securityfocus to
> > > > get $720 off
> > > > > any course!
> > > > >
> > > >
------------------------------------------------------------------
> > > > ----------
> > > > >
> > > >
> > > >
> > > >
> > > >
> > > > Ez a level virusellenorzesen esett at!
> > > >
> > > > This message was checked against viruses!
> > > >
> > > >
> > > >
> > > >
------------------------------------------------------------------
> > > > ---------
> > > > Free trial: Astaro Security Linux -- firewall with Spam/Virus
> > Protection
> > > >
> > > > Protect your network with the comprehensive security solution
that
> > > > integrates six applications for ease of use and lower TCO.
> > > >
> > > > Firewall - Virus protection - Spam protection - URL blocking -
VPN
> > > > - Wireless security.
> > > >
> > > > Download 30-day evaluation at:
> > > > http://www.astaro.com/php/contact/securityfocus.php
> > > >
------------------------------------------------------------------
> > > > ----------
> > > >
> > > >
> > > >
> > >
> > >
> > >
> >
________________________________________________________________________
> > > Delivered using the Free Personal Edition of Mailtraq
> > (www.mailtraq.com)
> > >
> > >
> >
------------------------------------------------------------------------
> > --
> > > -
> > > Free trial: Astaro Security Linux -- firewall with Spam/Virus
> > Protection
> > >
> > > Protect your network with the comprehensive security solution that
> > > integrates six applications for ease of use and lower TCO.
> > >
> > > Firewall - Virus protection - Spam protection - URL blocking - VPN
> > > - Wireless security.
> > >
> > > Download 30-day evaluation at:
> > > http://www.astaro.com/php/contact/securityfocus.php
> > >
> >
------------------------------------------------------------------------
> > --
> > > --
> >
> >
> >
------------------------------------------------------------------------
> ---
> > Free trial: Astaro Security Linux -- firewall with Spam/Virus
Protection
> >
> > Protect your network with the comprehensive security solution that
> > integrates six applications for ease of use and lower TCO.
> >
> > Firewall - Virus protection - Spam protection - URL blocking - VPN
> > - Wireless security.
> >
> > Download 30-day evaluation at:
> > http://www.astaro.com/php/contact/securityfocus.php
> >
------------------------------------------------------------------------
> ----
> >
>
>
------------------------------------------------------------------------

--
> -
> Free trial: Astaro Security Linux -- firewall with Spam/Virus
Protection
> 
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
> 
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
> 
> Download 30-day evaluation at:
> http://www.astaro.com/php/contact/securityfocus.php
>
------------------------------------------------------------------------
--
> --
---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.
Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.
Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------