MBSA - Microsoft Baseline Security Analyzer for XPe?

Posted: 09-09-2003, 07:16 PM
I have customers who are requesting this support for XP Embedded. After
applying QFE's the images show that vulnerabilities still exist.

How do I respond to my customers? Have I missed something or will support
be included in the future?

Thanks,
James Baber
Maxspeed Corp.


Reply With Quote

Responses to "MBSA - Microsoft Baseline Security Analyzer for XPe?"

Andy Allred [MS]
Guest
Posts: n/a
 
Re: MBSA - Microsoft Baseline Security Analyzer for XPe?
Posted: 09-09-2003, 08:46 PM
Since no one knows what the dependencies are for MBSA, it's not surprising
that it could report incorrectly. I'm not even sure it recognizes the
embedded platform as being valid, so perhaps this is adding to your problem.

I'll try it on a runtime soon and report back, but for now I'd let the
customer know that MBSA has not been componentized and there are no known
plans at the moment to componentize it. Also, for some security fixes (like
the RPC vulnerability the prevents the Blaster worm) those individual public
scanning tools are sometimes verified against the embedded platform as well
before the QFE is deployed. I know for a fact the Q823980 RPC vulnerability
patch public scanner tool works on XPe.

Andy

--

This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ========


"James" <j@j.com> wrote in message
news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...
> I have customers who are requesting this support for XP Embedded. After
> applying QFE's the images show that vulnerabilities still exist.
>
> How do I respond to my customers? Have I missed something or will support
> be included in the future?
>
> Thanks,
> James Baber
> Maxspeed Corp.
>
>

Reply With Quote
Doug Hoeffel
Guest
Posts: n/a
 
Re: MBSA - Microsoft Baseline Security Analyzer for XPe?
Posted: 09-09-2003, 10:07 PM
Is MBSA not running? Or is it running but showing vulnerabilities?

If it's not running then add the Windows Installer component if you don't
currently build with it. This will get you a long way in getting 3rd part
apps. etc. to run.

What vulnerabilities is this tool reporting? You may need to do some
tweaking above and beyond just applying QFE's.

HTH... Doug
"James" <j@j.com> wrote in message
news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...
> I have customers who are requesting this support for XP Embedded. After
> applying QFE's the images show that vulnerabilities still exist.
>
> How do I respond to my customers? Have I missed something or will support
> be included in the future?
>
> Thanks,
> James Baber
> Maxspeed Corp.
>
>

Reply With Quote
James
Guest
Posts: n/a
 
Re: MBSA - Microsoft Baseline Security Analyzer for XPe?
Posted: 09-10-2003, 02:57 AM
I can get the MBSA to run in HFNetChk mode in Command Line. One odd thing
is that it shows my XPe SP1 image as "XP Gold". When I compare an image
with all QFE's added to an image (XPe SP1 of course) without any QFE's
added, only a few items show as being patched successfully...

Windows Installer is included in the build.

James Baber
Maxspeed Corp.



"Doug Hoeffel" <doug.hoeffelNO@SPAMcamtronics.com> wrote in message
news:eh0CFYxdDHA.1932@TK2MSFTNGP10.phx.gbl...
> Is MBSA not running? Or is it running but showing vulnerabilities?
>
> If it's not running then add the Windows Installer component if you don't
> currently build with it. This will get you a long way in getting 3rd part
> apps. etc. to run.
>
> What vulnerabilities is this tool reporting? You may need to do some
> tweaking above and beyond just applying QFE's.
>
> HTH... Doug
> "James" <j@j.com> wrote in message
> news:e74C55vdDHA.1472@TK2MSFTNGP12.phx.gbl...
> > I have customers who are requesting this support for XP Embedded. After
> > applying QFE's the images show that vulnerabilities still exist.
> >
> > How do I respond to my customers? Have I missed something or will
support
> > be included in the future?
> >
> > Thanks,
> > James Baber
> > Maxspeed Corp.
> >
> >
>
>

Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
trouble viewing reports in Baseline Security Analyzer Jim Hampson Windows XP Beta 1 04-15-2004 08:10 PM
FW: Try these security update for Microsoft Windows MVZ Eduardo Gómez Linares Windows XP Help & Support 0 10-06-2003 09:40 PM
FW: Try these security update for Microsoft Windows MVZ Eduardo Gómez Linares Windows XP Device Drivers 0 10-06-2003 09:40 PM
ANN: Critical Microsoft Security QFE available Patrick Windows XP Embedded 1 08-07-2003 08:32 PM
microsoft security updates Lisa Windows XP Security & Administration 0 07-02-2003 01:45 AM


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90