eEye Digital Security

  Hi, Here is the DISA statement. DCOM calls are executed under the security context of the calling user by default.  If the RunAs key has been altered, the DCOM calls can be executed under the user context of the currently logged in user, or as a third user.  If present, the RunAs value tells the COM Service Control Manager ...

  Hi, Running Windows 2003 Enterprise Edition SP2 Retina Version 5.10.17.2128 Please see http://support.microsoft.com/kb/952069/  states wmvcore is 10.0.0.4001 for Windows 2003 SP 2 My version of wmvcore.dll is version 10.0.0.4005 Also http://support.microsoft.com/kb/968816 Ahhh.... this may be the cause....  (see ...

  Hi, Running Windows 2003 Enterprise Edition SP2 Retina Version 5.10.17.2128 Please see http://support.microsoft.com/kb/952069/  states wmvcore is 10.0.0.4001 for Windows 2003 SP 2 My version of wmvcore.dll is version 10.0.0.4005 Also http://support.microsoft.com/kb/968816 Ahhh.... this may be the cause....  (see ...

 

 

 Hi,   Checked with Microsoft Windows Media Home page.   The correct version of Media Player is 10 for windows 2003 server sp1 & sp2.   http://www.microsoft.com/windows/windowsmedia/player/versions.aspx   It is looking to me like a false positive for Windows 2003 and media player 10.   Further advice is ...

 Hi,   wmvcore.dll is version 10.0.0.4005   A new retina scan shows the issue still exists.  Reading the MS08-076 notes it does not say anything about Windows Media 10.  This machine is a windows 2003 server and the media player may be old because it is never used.   Any ideas would be welcome. Thanks, Jim

 Hi, I have installed KB952069 and KB954600.   I am running Windows 2003 with Media Player 10.0.0.3997 What do I need to update to fix Audit ID 7462 aka MS08-076 aka KB959807 aka CVE-2008-3009 and CVE-2008-3010. Could this be a false positive? Thanks, Jim

 Hi, Audit ID 5329: Ensures that all keys under HKLM\Software\Classes\AppId do not have a "RunAs" value. Retina identifies all items that have "RunAs". I think this is only a problem if "RunAs" has a value other than Interactive User. If this is correct maybe a small modification to Audit 5329 --- RunAs exits ...

 Hi,   How do you save the current permissions prior to changing them?    Is exporting the registry enough?    Does making these changes cause problems? Thanks, Jim