MS04-028 - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Lounge » MS04-028

Page 1 of 1

1

Topic Options

#126706 - 2004-09-15 12:20 AM MS04-028
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Just out of curiosity, anyone took a look at the newest MS critical patch posted today and thought about how to script the install of it? Oh what fun it appears to be... MS04-028
Top

#126707 - 2004-09-15 02:30 AM Re: MS04-028
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	Nope, but luckily we now have a Team that does that type of rollout packaging for us with SMS now. Yep, doesn't look like an easy one with just quick glance.
Top

#126708 - 2004-09-15 03:03 AM Re: MS04-028
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Yea we have a team that rolls out all of the patches via kix scripting...and youre looking at it Had hopes for SMS but i dont think its going to be approved anytime soon due to budget
Top

#126709 - 2004-09-17 11:16 PM Re: MS04-028
Bryce Bryce KiX Supporter Registered: 2000-02-29 Posts: 3167 Loc: Houston TX	and there are worms out already it seems...... http://vil.nai.com/vil/content/v_128461.htm
Top

#126710 - 2004-09-18 12:15 AM Re: MS04-028
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Doh! That was the fastest yet i think...2 days from patch till exploit. fantastic.
Top

#126711 - 2004-09-18 12:29 PM Re: MS04-028
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	damn, the manual update is huge pain. _________________________ ! download KiXnet
Top

#126712 - 2004-09-19 07:13 PM Re: MS04-028
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	FYI How to create and use a batch file to silently install multiple GDI+ security updates http://support.microsoft.com/?id=885885
Top

#126713 - 2004-09-20 12:25 PM Re: MS04-028
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	there should be also "how to know what security updates you need to get this gdi+ sh*t updated in your organisation?" _________________________ ! download KiXnet
Top

#126714 - 2004-09-20 08:25 PM Re: MS04-028
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	MS is working on it, but with a conference call last week they did not know themselves how to easily do it. Hopefully something will come out this week to make it easier.
Top

#126715 - 2004-09-20 09:02 PM Re: MS04-028
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	This one could get ugly to deploy. Since it involves Office Update it is sure to prompt for the CD on any other than a well planned out corporate install of Office. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#126716 - 2004-09-21 12:35 AM Re: MS04-028
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	well, doing office security patches is something I've totally skipped as it's a pain anyways for admin installation point installations. _________________________ ! download KiXnet
Top

#126717 - 2004-09-22 09:21 PM Re: MS04-028
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	Well to properly patch your systems now you won't be able to bypass Office patching. OS needs patching, Office needs patching, many individual apps need patching. What a pain. So far have not heard back from MS with any specific tool. Have not seen any reports yet for an actual in the wild exploit of this.
Top

#126718 - 2004-09-25 02:30 AM Re: MS04-028
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	It's out now. See http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.exploit.13.html _________________________ There are two types of vessels, submarines and targets.
Top

#126719 - 2004-09-26 08:17 PM Re: MS04-028
masken masken MM club member Registered: 2000-11-27 Posts: 1222 Loc: Gothenburg, Sweden	Regarding MS Office, if you deploy it with an MST and provide alternate paths in there, you dont need any media. You should be able to do that afterwards too.. Office 2k3 cached install files feature is really good too. _________________________ The tart is out there
Top

#126720 - 2004-09-28 02:27 PM Re: MS04-028
masken masken MM club member Registered: 2000-11-27 Posts: 1222 Loc: Gothenburg, Sweden	Not much help perhaps.. but there's a GDI scanner, both GUI and cmd-line versions available here: http://isc.sans.org/gdiscan.php Has anyone whipped together some script handling the most common applications? _________________________ The tart is out there
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart

Hop to:

Shout Box

Who's Online

0 registered and 1046 anonymous users online.

Newest Members

Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.064 seconds in which 0.023 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking