We found with the MS03-039 patch that if check the file versions in the KB
article against those on your machine, not all the files update all the
time.

We had a lot of issues with NT4 and some 2000 machines not actually
updating.  From my experience, the scanner is correct.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, May 12, 2004 11:09 AM
To: [EMAIL PROTECTED]
Subject: RPC False Positives?

I have a group of WindowsNT PCs that are patched for MS03-039, RPC, and
confirmed with Shavliks HFNetCheck.  They are using the same disk image as
a larger group.  But about 10 percent of them are consistently showing
vulnerable to Plugin 11835.  If these were false positives, would not the
same group of PCs not show up on every scan.  Or is this indicative that
the PCs are truly vulnerable for some reason.

Daniel J. Campbell
Sr. Technical Analyst
FXG AntiVirus and Patch Management
412-262-7301

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to