Mailing List Archive

"Automatic" Microsoft Bulletin Update via mssecure.xml from hfnetchk - yust an RFC
Hi,

I don't know the License and it's only a idea, but would it be possible
to use mssecure.xml from the Hfnetchk Tool?

It contains:
The Bulletins
With Description
URL's
The Hotfixes
The affected Registry Keys
The affected Files: Name, Path, Version and Checksum
The Service Packs
The Products and Product Families (Operating System, Office, ...)
and last but not least, the coherences.

I think it could be used in two different way's:

1. The Plugins could be generated by an XSLT.

2. A Plugin could pars and interpret it.


My point of view, after spending some time searching the CVS:

Apart from the parsing-stuff only a Method for extracting the File
Version (stored somewhere in the .EXE, .DLL, ... files ) and optionally
for calculating the checksum, would be required.

If you want to take a look at it:
I prefer Pollo http://pollo.sourceforge.net/



so what do you think?

( terrible English, i know :-) )

David
"Automatic" Microsoft Bulletin Update via mssecure.xml from hfnetchk - yust an RFC [ In reply to ]
Hi,

I don't know the License and it's only a idea, but would it be possible
to use mssecure.xml from the Hfnetchk Tool?

It contains:
The Bulletins
With Description
URL's
The Hotfixes
The affected Registry Keys
The affected Files: Name, Path, Version and Checksum
The Service Packs
The Products and Product Families (Operating System, Office, ...)
and last but not least, the coherences.

I think it could be used in two different way's:

1. The Plugins could be generated by an XSLT.

2. A Plugin could pars and interpret it.


My point of view, after spending some time searching the CVS:

Apart from the parsing-stuff only a Method for extracting the File
Version (stored somewhere in the .EXE, .DLL, ... files ) and optionally
for calculating the checksum, would be required.

If you want to take a look at it:
I prefer Pollo http://pollo.sourceforge.net/



so what do you think?

( terrible English, i know :-) )

David
"Automatic" Microsoft Bulletin Update via mssecure.xml from hfnetchk - yust an RFC [ In reply to ]
Hi,

I don't know the License and it's only a idea, but would it be possible
to use mssecure.xml from the Hfnetchk Tool?

It contains:
The Bulletins
With Description
URL's
The Hotfixes
The affected Registry Keys
The affected Files: Name, Path, Version and Checksum
The Service Packs
The Products and Product Families (Operating System, Office, ...)
and last but not least, the coherences.

I think it could be used in two different way's:

1. The Plugins could be generated by an XSLT.

2. A Plugin could pars and interpret it.


My point of view, after spending some time searching the CVS:

Apart from the parsing-stuff only a Method for extracting the File
Version (stored somewhere in the .EXE, .DLL, ... files ) and optionally
for calculating the checksum, would be required.

If you want to take a look at it:
I prefer Pollo http://pollo.sourceforge.net/



so what do you think?

( terrible English, i know :-) )

David
Re: "Automatic" Microsoft Bulletin Update via mssecure.xml from hfnetchk - yust an RFC [ In reply to ]
On Sep 30, 2005, at 8:04 AM, David Möller wrote:

> Hi,
>
> I don't know the License and it's only a idea, but would it be
> possible
> to use mssecure.xml from the Hfnetchk Tool?
>

Yes, it would be possible ... but I don't think it would be legal to
do that.

>
>
> My point of view, after spending some time searching the CVS:
>
> Apart from the parsing-stuff only a Method for extracting the File
> Version (stored somewhere in the .EXE, .DLL, ... files ) and
> optionally
> for calculating the checksum, would be required.


I added file version check in all MS05-MS04-MS03-MS02 this week. So
if you do a scan with admin credentials (you need to connect to C$)
Nessus will do a file version check instead of a registry check to
detect if Microsoft patches are installed.


Nicolas