in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Handling vulnerability item, "Microsoft Windows Domain Name System (DNS) Spoofing (953230) - Client"

Last post 01-20-2009 1:51 PM by Ziad. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next
  • 01-12-2009 12:58 PM

    Handling vulnerability item, "Microsoft Windows Domain Name System (DNS) Spoofing (953230) - Client"

     Even when updated fully per Microsoft Update, Microsoft Update would not show an update to handle this item.  (WinXP Pro SP3.)  However, using the Secunia Advisory link for this item (Secunia Advisory 30925) leads to a Microsoft link to an update that can be applied directly and the next scan of Blink did not show this vulnerability.

    Filed under:
  • 01-12-2009 2:14 PM In reply to

    Re: Handling vulnerability item, "Microsoft Windows Domain Name System (DNS) Spoofing (953230) - Client"

    Hmmm, that must be one of those updates that are considered less severe that they are not pushing via Microsoft Update ... that is weird though since Secunia gave you a backdoor link to it.

  • 01-20-2009 1:51 PM In reply to

    • Ziad
    • Top 75 Contributor
    • Joined on 01-19-2009
    • Posts 12

    Re: Handling vulnerability item, "Microsoft Windows Domain Name System (DNS) Spoofing (953230) - Client"

    I think I can help again here.

    Run the Microsoft Baseline Security Analyzer: 

    http://technet.microsoft.com/en-us/security/cc184924.aspx

    Not only will it sometimes identify why certain patches are not installing, but it also gives an alternate view of vulnerabilities to Blink and Secunia.

    Let us know how it goes.

    Open question: Are there any other good vulnerability detection tools?

Page 1 of 1 (3 items)
© 1995 - 2009 eEye Incorporated