Feeds

MS patch-scanner for Win-NT, 2K, IIS, SQL

And not a moment too soon

  • alert
  • submit to reddit

Internet Security Threat Report 2014

We've been eager to spill the beans about this for weeks, and even hinted at it in a previous story. Today it's official; MS has released a command-line application, HFNetChk, which will scan all NT and/or 2K machines in a network from a single location and compare their currently-installed patches with the latest ones available, making it easy for admins to identify and patch vulnerable machines.

The app was designed by MS Security Program Manager Eric Schultze and executed by Shavlik Technologies. We gave it a whirl over the weekend and it performed as advertised. It covers Win-NT and 2K; IIS 4.0 and 5.0; SQL Server 7.0 and 2000 (including MS Data Engine); and Internet Explorer 5.01 and later.

The tool accesses an XML file, which it downloads automatically, and which contains information such as the files in each patch and their file versions and checksums, registry keys that would be applied by the hotfix, information about which patches supersede others, related Microsoft Knowledge Base article numbers, and the like.

If any of the file or registry details on a scanned machine don't match the information in the XML file, the associated security patch is identified as not installed and the results are displayed on the screen. The corresponding Knowledge Base article number is also displayed.

Switches can be used specify groups of computers to scan, output format, engine speed, types of checks, the location of the XML file and so on, according to the complete instructions, which should be available from MS later today. ®

Related Links

The progie
The instructions (note: going live some time Wednesday)

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.