MS RPC Patch (Mis-)Reporting

[Beirne Konarski]

On Thursday 11 September 2003 01:24 pm, Beirne Konarski wrote:
> On Thursday 11 September 2003 09:02 am, Hemsley, Trevor wrote:
> > I have a Windows NT 4.0 machine that is reporting false positives for
> > this test and for ms03-026.
>
> I'm having the same problems with Windows NT 4.0.  The patches for 026 and
> 039 are both installed and the PC was rebooted.  When I run the
> msrpc_dcom2.nasl plugin v1.6 against it all I get back is "Success".  I'll
> look into this further and can provide additional info if needed.

OK, version 1.8 fixes the problem.  I noticed, though, that I get a false 
positive from a Solaris system running the HP dced.  Since they all started 
with the same code the dced may actually be susceptible to the problem, but 
that is unclear at this point.

Beirne

-- 
Beirne "Bern" Konarski  
beirne at neo.rr.com	"Untouched by Scandal"