RE: [Plugins-writers] Checking Windows Patches Using Registry

From: hallnk@private
Date: Wed May 19 2004 - 08:24:35 PDT


It is still only checking for one hotfix. I have attached an updated
version which is hopefully easier to read, along with the diff file.
There are a few other plugins which have similar problems. I plan to fix
these as well. What is the best way to submit patches?

Nathan

-----Original Message-----
From: plugins-writers-bounces@private
[mailto:plugins-writers-bounces@private] On Behalf Of Renaud
Deraison
Sent: Thursday, May 13, 2004 3:33 PM
To: plugins-writers@private
Subject: Re: [Plugins-writers] Checking Windows Patches Using Registry

On Thu, May 13, 2004 at 03:24:50PM -0400, hallnk@private wrote:
> There are some patches for Windows which are covered by more than one
> hotfix. Accurately checking for these patches requires checking
multiple
> keys in the windows registry. One example of this is MS03-027 (Nessus
> plug-in #11792). This hotfix is also included in the Windows XP Update
> Rollup 1 (see http://support.microsoft.com/?kbid=826939). Therefore to
> check if the hotfix is applied both the key
> "HKLM\SOFTWARE\Microsoft\Updates\Windows XP\SP2\Q811493" and
> "HKLM\SOFTWARE\Microsoft\Updates\Windows XP\SP2\K826939" must be
> checked. If either key is present the vulnerability is patched.
Between
> the XP Update Rollup and some cases where one patch supersedes another
> there is the possibility of false positives in scans.
> 

Good point - I've integrated your patch, thanks !
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers





_______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2b30 : Wed May 19 2004 - 08:26:57 PDT