PT-2004-2987 · Microsoft · Baseline Security Analyzer

Publicado 2004-02-10 · Atualizado 2008-09-05 · CVE-2004-2091

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Baseline Security Analyzer (MBSA) version 1.2

Description The issue concerns a scenario where Microsoft Baseline Security Analyzer (MBSA) 1.2 fails to accurately identify systems that, despite being patched, remain susceptible to exploitation until a system reboot occurs. This inaccuracy could potentially lead administrators to believe their systems are secure when, in fact, they are not.

Recommendations For Microsoft Baseline Security Analyzer (MBSA) version 1.2, ensure that systems are rebooted after applying patches to guarantee the patches are effectively applied and the system is no longer vulnerable to exploitation.

Correção

Identificadores relacionados

CVE-2004-2091

Produtos afetados

Baseline Security Analyzer

Referências · 3

• http://securityfocus.com/archive/1/353324 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2091 · Nota de Segurança
• http://securityfocus.com/bid/9634 · Aviso do Fabricante