Security Hero Rotating Header Image

Windows Patch Auditing amp quotFile and Print Sharingquot disabled

Re: Windows Patch Auditing amp quotFile and Print Sharingquot disabled

Posted by Mike Drugov on Apr 30

Alright

List of tools that failed

Nessus
FoundStone
GFI
MBSA

Please keep in mind that on remote nodes "Windows Update Service" is disabled and stopped as well as "Client for File & Print Sharing" is uninstalled

I think my last resort will be to run WMI scripts pull…

URL: http://seclists.org/pen-test/2009/Apr/0195.html

3 Comments

  1. "Penetration Testing (pen-test) Mailing List" says:

    Re: Windows Patch Auditing amp quotFile and Print Sharingquot disabled

    Posted by Jeffrey Walton on Apr 30

    Hi Jerry,

    A lot of issues you may encounter are the same as those with MBSA.
    Nessus may simply fail the test, while MBSA will fail and return an
    error code. Take a look at Microsoft’s MBSA faq:
    http://technet.microsoft.com/en-us/security/cc184922.aspx

    Jeff

    > —–Original Message—–

    URL: http://seclists.org/pen-test/2009/Apr/0197.html

  2. "Penetration Testing (pen-test) Mailing List" says:

    Re: Windows Patch Auditing amp quotFile and Print Sharingquot disabled

    Posted by Christian Eric Edjenguele on Apr 30

    Have you tried OpenVAS ?
    Please note that it’s also possible to retrieve such update via snmp,
    with snmpwalk, I think snmp is enabled by default on windows machine, I
    don’t remember.

    Mike Drugov wrote:
    > Alright
    >
    > List of tools that failed
    >
    > Nessus
    > FoundStone

    URL: http://seclists.org/pen-test/2009/Apr/0199.html

  3. "Penetration Testing (pen-test) Mailing List" says:

    Re: Windows Patch Auditing amp quotFile and Print Sharingquot disabled

    Posted by Kurt Buff on Apr 30

    Worth a try:

    psinfo and/or psexec – http://www.microsoft.com/sysinternals

    I can’t remember if they depend on file/print sharing, or just an IPC$
    connection, but they’re free, and useful anyway, along with all the
    rest of the sysinternals tools.

    Kurt

    On Thu, Apr 30, 2009 at 09:01, Mike Drugov…

    URL: http://seclists.org/pen-test/2009/Apr/0201.html

Leave a Reply

Your email address will not be published. Required fields are marked *