PT-2004-2987 · Microsoft · Baseline Security Analyzer

Published 2004-02-10 · Updated 2008-09-05 · CVE-2004-2091

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Baseline Security Analyzer (MBSA) version 1.2

Description The issue concerns a scenario where Microsoft Baseline Security Analyzer (MBSA) 1.2 fails to accurately identify systems that, despite being patched, remain susceptible to exploitation until a system reboot occurs. This inaccuracy could potentially lead administrators to believe their systems are secure when, in fact, they are not.

Recommendations For Microsoft Baseline Security Analyzer (MBSA) version 1.2, ensure that systems are rebooted after applying patches to guarantee the patches are effectively applied and the system is no longer vulnerable to exploitation.

Fix

Related Identifiers

CVE-2004-2091

Affected Products

Baseline Security Analyzer

References · 3

• http://securityfocus.com/archive/1/353324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2091 · Security Note
• http://securityfocus.com/bid/9634 · Vendor Advisory