Free Scanning Tools for MS Vulnerabilitys

These might be useful to Check/Double check and see how you measure up. They seem well made with plenty of options, and look very Pro as you may expect from Foundstone.

They work on other OS's apart from the stated XP/2000 as i've tried them both, even though the others are not supposed to be at risk, and i wasn't.

Should be interesting to hear what your results are.

Lots of other goodies available for Free on there too !

. . .

Microsoft MS05-051 MSDTC and COM+ Vulnerability Detection Utility

MS05-051 Scan 1.0

MS05-051 Scan 1.0 is a Windows based detection and analysis utility that can quickly and accurately identify Microsoft operating systems that are vulnerable to the vulnerabilities released in the MS05-051 bulletin.

Using a null session, an attacker could make an RPC request to the DTC interface on a Microsoft Windows system and potentially execute arbitrary code.

This Foundstone check detects the absence of the patch by attempting to trigger the vulnerability in a nonintrusive manner over RPC.

Affected systems:

Microsoft Windows 2000 (All Versions)

. . .

Microsoft UPnP MS05-039 Vulnerability Detection Utility

MS05-039 Scan 1.0

MS05-039 Scan 1.0 is a Windows based detection and analysis utility that can quickly and accurately identify Microsoft operating systems that are vulnerable to the multiple buffer overflow vulnerabilities released in the MS05-039 bulletin.

Using a null session, an attacker could make an RPC request to the PnP interface on a Microsoft Windows system that could potentially execute arbitrary code.

This Foundstone check detects the absence of the patch by attempting to trigger the vulnerability in a nonintrusive manner over RPC.

Affected systems:

Microsoft Windows Server 2003 (All Versions)
Microsoft Windows XP (All Versions)
Microsoft Windows 2000 (All Versions)

http://www.foundstone.com/


StevieO