Nessus
[Top] [All Lists]

Re: POSSIBLE MS FALSE-POSITIVE

To: Nessus <nessus@list.nessus.org>
Subject: Re: POSSIBLE MS FALSE-POSITIVE
From: Nicolas Pouvesle <npouvesle@tenablesecurity.com>
Date: Thu, 8 Feb 2007 22:19:45 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
In-reply-to: <169658C0C845EC438759DB8B8BC706540A0D88ED@NOC-EXCH1.24hourfit.com>
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <169658C0C845EC438759DB8B8BC706540A0D88ED@NOC-EXCH1.24hourfit.com>
Sender: nessus-bounces@list.nessus.org

On Feb 8, 2007, at 10:06 PM, John Scherff wrote:

Our Windows 2003 Server systems were recently patched with MS06-057 (KB923191).  Nessus continues to report the patch missing (NID 22530).  Patch installation verified with command "wmic qfe | find 923191."

I also manually checked the version of c:\windows\system32\comctl32.dll.  It is the correct version for Windows 2003 Standard Edition with SP1: 5.82.3790.2778 (per http://www.microsoft.com/technet/security/Bulletin/MS06-057.mspx), which matches the check in plugin smb_nt_ms06-057.nasl for Windows 2003 SE SP1 (os:"5.2", sp:1).

I also manually verified that SP1 is, indeed, installed.

 


Could you save the KB when scanning this system and send it (privately) so I can check the problem ?


Thanks,

Nicolas
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
<Prev in Thread] Current Thread [Next in Thread>