MBSA - Microsoft Baseline Security Analyzer for XPe?

Posted: 09-09-2003, 07:16 PM

James

Guest
Posts: n/a

I have customers who are requesting this support for XP Embedded. After
applying QFE's the images show that vulnerabilities still exist.

How do I respond to my customers? Have I missed something or will support
be included in the future?

Thanks,
James Baber
Maxspeed Corp.

Reply With Quote

Responses to "MBSA - Microsoft Baseline Security Analyzer for XPe?"

Andy Allred [MS]

Guest
Posts: n/a

Re: MBSA - Microsoft Baseline Security Analyzer for XPe?

Posted: 09-09-2003, 08:46 PM

Since no one knows what the dependencies are for MBSA, it's not surprising
that it could report incorrectly. I'm not even sure it recognizes the
embedded platform as being valid, so perhaps this is adding to your problem.

I'll try it on a runtime soon and report back, but for now I'd let the
customer know that MBSA has not been componentized and there are no known
plans at the moment to componentize it. Also, for some security fixes (like
the RPC vulnerability the prevents the Blaster worm) those individual public
scanning tools are sometimes verified against the embedded platform as well
before the QFE is deployed. I know for a fact the Q823980 RPC vulnerability
patch public scanner tool works on XPe.

Andy

--

This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ========

"James" <j@j.com> wrote in message
news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...

> I have customers who are requesting this support for XP Embedded. After
> applying QFE's the images show that vulnerabilities still exist.
>
> How do I respond to my customers? Have I missed something or will support
> be included in the future?
>
> Thanks,
> James Baber
> Maxspeed Corp.
>
>

Reply With Quote

Doug Hoeffel

Guest
Posts: n/a

Re: MBSA - Microsoft Baseline Security Analyzer for XPe?

Posted: 09-09-2003, 10:07 PM

Is MBSA not running? Or is it running but showing vulnerabilities?

If it's not running then add the Windows Installer component if you don't
currently build with it. This will get you a long way in getting 3rd part
apps. etc. to run.

What vulnerabilities is this tool reporting? You may need to do some
tweaking above and beyond just applying QFE's.

HTH... Doug
"James" <j@j.com> wrote in message
news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...

> I have customers who are requesting this support for XP Embedded. After
> applying QFE's the images show that vulnerabilities still exist.
>
> How do I respond to my customers? Have I missed something or will support
> be included in the future?
>
> Thanks,
> James Baber
> Maxspeed Corp.
>
>

Reply With Quote

James

Guest
Posts: n/a

Re: MBSA - Microsoft Baseline Security Analyzer for XPe?

Posted: 09-10-2003, 02:57 AM

I can get the MBSA to run in HFNetChk mode in Command Line. One odd thing
is that it shows my XPe SP1 image as "XP Gold". When I compare an image
with all QFE's added to an image (XPe SP1 of course) without any QFE's
added, only a few items show as being patched successfully...

Windows Installer is included in the build.

James Baber
Maxspeed Corp.

"Doug Hoeffel" <doug.hoeffelNO@SPAMcamtronics.com> wrote in message
news:eh0CFYxdDHA.1932@TK2MSFTNGP10.phx.gbl...

> Is MBSA not running? Or is it running but showing vulnerabilities?
>
> If it's not running then add the Windows Installer component if you don't
> currently build with it. This will get you a long way in getting 3rd part
> apps. etc. to run.
>
> What vulnerabilities is this tool reporting? You may need to do some
> tweaking above and beyond just applying QFE's.
>
> HTH... Doug
> "James" <j@j.com> wrote in message
> news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...
> > I have customers who are requesting this support for XP Embedded. After
> > applying QFE's the images show that vulnerabilities still exist.
> >
> > How do I respond to my customers? Have I missed something or will

support

> > be included in the future?
> >
> > Thanks,
> > James Baber
> > Maxspeed Corp.
> >
> >
>
>

Reply With Quote

Reply

« Indexing Service? | Upgrade to XP Embedded with SP1 »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
trouble viewing reports in Baseline Security Analyzer	Jim Hampson	Windows XP Beta	1	04-15-2004 08:10 PM
FW: Try these security update for Microsoft Windows	MVZ Eduardo Gómez Linares	Windows XP Help & Support	0	10-06-2003 09:40 PM
FW: Try these security update for Microsoft Windows	MVZ Eduardo Gómez Linares	Windows XP Device Drivers	0	10-06-2003 09:40 PM
ANN: Critical Microsoft Security QFE available	Patrick	Windows XP Embedded	1	08-07-2003 08:32 PM
microsoft security updates	Lisa	Windows XP Security & Administration	0	07-02-2003 01:45 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90