Microsoft KB Archive/306460

From BetaArchive Wiki
< Microsoft KB Archive
Revision as of 17:41, 18 July 2020 by 3155ffGd (talk | contribs) (importing KB archive)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Article ID: 306460

Article Last Modified on 1/9/2007



APPLIES TO

  • Microsoft Systems Management Server 2.0 Standard Edition
  • Microsoft Systems Management Server 2003
  • Microsoft Baseline Security Analyzer 1.2



This article was previously published under Q306460

INTRODUCTION

The Microsoft Baseline Security Analyzer (MBSA) determines the installation status of a software update by evaluating specific registry keys, file versions, and file checksums that are associated with a specific security update. There are some instances where MBSA cannot determine the installation status of the update because the detailed file and registry key information is not available for the specified security bulletin or for the update. A note message that is similar to the following note message is generated in situations where the Mssecure.xml file does not contain this information:

NOTE MS01-022 Q296441
Please read KB article 306460

Important The Microsoft Baseline Security Analyzer (MBSA) 1.2.1 tool will reach its end of life six months after the release of a new MBSA 2.0 add-in tool to support gaps in MBSA 2.0, Microsoft Update and WSUS detection. See the MBSA home page for more information. After these six months have elapsed, MBSA 1.2.1 will no longer be supported. Additionally, the Mssecure.xml file that MBSA 1.2 automatically downloads will no longer be updated to include new security bulletins. We encourage you to migrate to MBSA 2.0 as soon as possible, well in advance of the six-month migration time provided after the release of the MBSA 2.0 add-in tool.

Special note to users of the Software Update Services (SUS) Feature Pack for Systems Management Server (SMS) 2.0: Microsoft is committed to providing accurate security update detection and deployment for all Microsoft Security Resource Center (MSRC) security updates. Catalog data for SMS 2.0 with the SUS Feature Pack will continue to be updated to ensure continued security update detection for customers who are using SMS 2.0.

In addition to continued catalog updates for SMS, the Extended Security Update Inventory Tool will also be updated to ensure comprehensive detection and deployment for all Microsoft security issues that are listed on the following Microsoft Web site:

Microsoft is committed to providing detection for and enabling deployment of security updates for all SMS clients.

MORE INFORMATION

The Microsoft Network Security Hotfix Checker (Hfnetchk) is included as part of the MBSA V1.1 tool. Users can perform scans with the Hfnetchk tool by using the following command in the MBSA command-line interface:

mbsacli.exe /hf


Note for Microsoft Systems Management Server (SMS) users: Microsoft Systems Management Server 2003 and Microsoft Systems Management Server 2.0 (with the Software Update Services Feature Pack) use scan results that are obtained from MBSA to inventory and deploy patches. SMS can inventory only those patches that are detected by MBSA. SMS does not detect an update if either of the following conditions is true:

  • MBSA does not support the product (so no detection result is returned).
  • MBSA supports the product but returns a note message for the update.

Note messages do not indicate that the computer that you are scanning is not secure. Note messages indicate that for technical reasons, MBSA cannot determine whether the appropriate update or workaround was applied. Remediation of these issues typically involves a configuration change or a workaround instead of an update. You can ignore note messages after you apply the update or after you evaluate your computer and make configuration changes.

Programs that are supported in MBSA v1.1.1 and in MBSA v1.2

To determine whether MBSA detects an update, locate the appropriate item in the following table, based on the product that the security bulletin applies to. The table does not contain a complete listing of all Microsoft products.

Note for Microsoft Systems Management Server (SMS) users: SMS does not use MBSA to detect Microsoft Office updates.

Product or component MBSA v1.1.1 MBSA v1.2
Microsoft .NET Framework, Version 1.0 No No
Microsoft .NET Framework, Version 1.1 No No
Microsoft BackOffice Resource Kit SE No No
Microsoft BackOffice Server 2000 No No
Microsoft BackOffice Server 4.0 No No
Microsoft BizTalk Server 2000 No Yes
Microsoft BizTalk Server 2002 No Yes
Microsoft BizTalk Server 2004 No Yes
Microsoft Business Solutions CRM 1.2 No No
Microsoft Commerce Server 2000 No Yes
Microsoft Commerce Server 2002 No Yes
Microsoft Commercial Internet System 2.0 No No
Microsoft Commercial Internet System 2.5 No No
Microsoft Connection Manager No No
Microsoft Content Management Server 2001 No Yes
Microsoft Content Management Server 2001 Site Builder No Yes
Microsoft Content Management Server 2001 Site Stager No Yes
Microsoft Content Management Server 2002 No Yes
Microsoft Data Access Components (MDAC) 2.1 No No
Microsoft Data Access Components (MDAC) 2.5 No Yes
Microsoft Data Access Components (MDAC) 2.6 No Yes
Microsoft Data Access Components (MDAC) 2.7 No Yes
Microsoft Data Access Components (MDAC) 2.8 No Yes
Microsoft Digital Image Pro Version 7.0 No No
Microsoft Digital Image Pro Version 9 No No
Microsoft Digital Image Suite Version 9 No No
Microsoft DirectX No No
Microsoft Entourage 2001 for Macintosh No No
Microsoft Entourage v. X for Macintosh No No
Microsoft Excel 2001 for Macintosh No No
Microsoft Excel 2002 No Yes
Microsoft Excel v. X for Macintosh No No
Microsoft Exchange 2000 Server Yes Yes
Microsoft Exchange Server 2003 No Yes
Microsoft Exchange Server 5.5 Yes Yes
Microsoft FrontPage 2000 No No
Microsoft FrontPage 2000 Server Extensions No No
Microsoft FrontPage 97 No No
Microsoft FrontPage 97 Personal Web Server 1.0 No No
Microsoft FrontPage 97 Server Extensions No No
Microsoft FrontPage 98 No No
Microsoft FrontPage 98 Personal Web Server 1.0 No No
Microsoft FrontPage 98 Server Extensions No No
Microsoft FrontPage Server Extensions 2002 No No
Microsoft Greetings 2000 No No
Microsoft Greetings 2002 No No
Microsoft Home Publishing 2000 No No
Microsoft Host Integration Server 2000 No Yes
Microsoft Host Integration Server 2004 No Yes
Microsoft Interix 2.2 No No
Microsoft Internet Explorer 4.0 No No
Microsoft Internet Explorer 4.5 for Macintosh No No
Microsoft Internet Explorer 5 Yes Yes
Microsoft Internet Explorer 5.01 Yes Yes
Microsoft Internet Explorer 5.1 for Macintosh No No
Microsoft Internet Explorer 5.1 for Macintosh OS 8 and 9 No No
Microsoft Internet Explorer 5.1 for Macintosh OS X No No
Microsoft Internet Explorer 5.5 Yes Yes
Microsoft Internet Explorer 6 Yes Yes
Windows Internet Explorer 7 No No
Microsoft Internet Information Server (IIS) 4.0 Yes Yes
Microsoft Internet Information Services (IIS) 5.0 Yes Yes
Microsoft Internet Information Services (IIS) 5.1 Yes Yes
Microsoft Internet Information Services (IIS) 6.0 Yes Yes
Microsoft Internet Security and Acceleration (ISA) Server 2000 No No
Microsoft Internet Security and Acceleration (ISA) Server 2004 No No
Microsoft Metadirectory Services 2.2 No No
Microsoft Money 2000 No No
Microsoft Money 2001 No No
Microsoft Money 2004 No No
Microsoft Money 2005 No No
Microsoft NetMeeting No No
Microsoft Office 2000 No Yes*
Microsoft Office 2000 Service Release-1 (SR-1) No Yes*
Microsoft Office 2001 for Macintosh No No
Microsoft Office 95 No No
Microsoft Office 97 No No
Microsoft Office 97 SR-1 No No
Microsoft Office 97 SR-2/SR-2b No No
Microsoft Office 98 for Macintosh No No
Microsoft Office System 2003 No Yes*
Microsoft Office v. X for Macintosh No No
Microsoft Office v. X for Macintosh SR 1 No No
Microsoft Office Web Components 2000 No Yes*
Microsoft Office Web Components 2002 No Yes*
Microsoft Office XP No Yes*
Microsoft Operations Manager (MOM) 2000 No No
Microsoft Operations Manager (MOM) 2005 No No
Microsoft Outlook 2002 No Yes*
Microsoft Outlook 2003 with Business Contact Manager No No
Microsoft Outlook 98 No No
Microsoft Outlook Express 5 for Macintosh No No
Microsoft Outlook Express 5.5 No No
Microsoft Outlook Express 6.0 No No
Microsoft Personal Web Server 4.0 No No
Microsoft Photo Draw 2000 Version 1 No No
Microsoft Photo Draw 2000 Version 2 No No
Microsoft Picture It 2002 No No
Microsoft Picture It Version 7.0 No No
Microsoft Picture It version 9 (including Picture It Library) No No
Microsoft Picture It 2000 No No
Microsoft Platform SDK Redistributable: GDI+ No No
Microsoft PowerPoint 2000 No Yes*
Microsoft PowerPoint 2001 for Macintosh No No
Microsoft PowerPoint 2002 No Yes*
Microsoft PowerPoint 97 No No
Microsoft PowerPoint 98 No No
Microsoft PowerPoint 98 for Macintosh No No
Microsoft PowerPoint v. X for Macintosh No No
Microsoft Producer for Microsoft Office PowerPoint No No
Microsoft Project 2000 No Yes*
Microsoft Project 2002 No Yes*
Microsoft Project 2003 No Yes*
Microsoft Project 98 No No
Microsoft Project Server 2002 No Yes*
Microsoft Proxy Server 2.0 No No
Microsoft Publisher 2000 No Yes*
Microsoft Publisher 99 No No
Microsoft Routing and Remote Access Server for Windows NT 4.0 No No
Microsoft Services for Unix 2.0 (NT) No No
Microsoft Services for Unix 2.0 (Win2K) No No
Microsoft Services for Unix 2.2 No No
Microsoft Services For Unix 3.0 No No
Microsoft Services For Unix 3.5 No No
Microsoft Site Server 3.0 No No
Microsoft Small Business Server 2000 No No
Microsoft SNA Server 4.0 No Yes
Microsoft SQL Server 2000 Yes Yes
Microsoft SQL Server 2005 No No
Microsoft SQL Server 7.0 Yes Yes
Microsoft Systems Management Server (SMS) 1.2 No No
Microsoft Systems Management Server (SMS) 2.0 No No
Microsoft Systems Management Server (SMS) 2003 No No
Microsoft Terminal Services Advanced Client (TSAC) ActiveX control No No
Microsoft Virtual Machine (VM) No Yes
Microsoft Visio 2002 No Yes*
Microsoft Visio 2003 No Yes*
Microsoft Visual Basic .NET Standard 2002 No No
Microsoft Visual Basic .NET Standard 2003 No No
Microsoft Visual Basic 5.0 No No
Microsoft Visual Basic 6.0 No No
Microsoft Visual C# .NET Standard 2002 No No
Microsoft Visual C# .NET Standard 2003 No No
Microsoft Visual C++ .NET Standard 2002 No No
Microsoft Visual C++ .NET Standard 2003 No No
Microsoft Visual FoxPro 6.0 No No
Microsoft Visual J# .NET Standard 2003 No No
Microsoft Visual Studio .NET 2002 No No
Microsoft Visual Studio .NET 2003 No No
Microsoft Visual Studio 6.0 No No
Microsoft Windows 2000 Advanced Server Yes Yes
Microsoft Windows 2000 Professional Yes Yes
Microsoft Windows 2000 Server Yes Yes
Microsoft Windows 95 No No
Microsoft Windows 95 SR 2.1 No No
Microsoft Windows 95 SR 2.5 No No
Microsoft Windows 98 No No
Microsoft Windows 98 Resource Kit No No
Microsoft Windows 98 Resource Kit Sampler No No
Microsoft Windows 98 Second Edition No No
Microsoft Windows Media Encoder 4.0 No No
Microsoft Windows Media Encoder 4.1 No No
Microsoft Windows Media Player 6.4 Yes Yes
Microsoft Windows Media Player 6.4 for Windows 2000 No Yes
Microsoft Windows Media Player 6.4 for Windows Server 2003 No Yes
Microsoft Windows Media Player 6.4 for Windows XP No Yes
Microsoft Windows Media Player 7.0 Yes Yes
Microsoft Windows Media Player 7.1 Yes Yes
Microsoft Windows Media Player 9 Series Yes Yes
Microsoft Windows Media Player 9 Series for Windows Server 2003 No Yes
Microsoft Windows Media Player 9 Series for Windows XP No Yes
Microsoft Windows Media Player 10 No No
Microsoft Windows Media Player for Windows XP Yes Yes
Microsoft Windows Media Rights Manager 1 No No
Microsoft Windows Media Services 4.0 Yes Yes
Microsoft Windows Media Services 4.1 Yes Yes
Microsoft Windows Messenger No No
Microsoft Windows Millennium Edition (Me) No No
Microsoft Windows NT Server 4.0 Yes Yes
Microsoft Windows NT Server 4.0, Enterprise Edition Yes Yes
Microsoft Windows NT Server 4.0, Terminal Server Edition Yes Yes
Microsoft Windows NT Workstation 4.0 Yes Yes
Microsoft Windows Script 5.1 No No
Microsoft Windows Script 5.5 No No
Microsoft Windows Script 5.6 No No
Microsoft Windows Server 2003, 64-Bit Edition No No
Microsoft Windows Server 2003, Datacenter Edition Yes Yes
Microsoft Windows Server 2003, Enterprise Edition Yes Yes
Microsoft Windows Server 2003, Standard Edition Yes Yes
Microsoft Windows Server 2003, Web Edition Yes Yes
Microsoft Windows SharePoint Services No No
Microsoft Windows SharePoint Team Services No Yes*
Microsoft Windows Small Business Server 2003 Yes Yes
Microsoft Windows XP 64-Bit Edition No No
Microsoft Windows XP Embedded Edition No No
Microsoft Windows XP Home Edition Yes Yes
Microsoft Windows XP Professional Yes Yes
Microsoft Word 2000 No Yes*
Microsoft Word 2001 for Macintosh No No
Microsoft Word 2002 No Yes*
Microsoft Word 97 No No
Microsoft Word 98 No No
Microsoft Word 98 for Macintosh No No
Microsoft Works 2000 No No
Microsoft Works 2001 No No
Microsoft Works 2002 No No
Microsoft Works 2003 No No
MSN Messenger No No
MSXML 2.5 No No
MSXML 2.6 No Yes
MSXML 3.0 No Yes
MSXML 4.0 No Yes
MSXML 5.0 No Yes
MSXML 6.0 No Yes


Note The detection of Microsoft Office programs is not supported if you use the mbsacli.exe command-line command with the /hf option. The detection of Microsoft Office programs is supported in MBSA v1.2 if you use the Office Update Inventory Tool. For more information about how to obtain and use the Office Update Inventory Tool, visit the following Microsoft Web site:

  • Items with an asterisk in the MBSA version number column are detected by using a local computer scan only.

MBSA detection exceptions (notes and warnings)

To determine whether MBSA will generate a note message or a warning message when it detects an update, locate the appropriate item in the following table. Only programs that are supported by MBSA v1.1.1 or by MBSA v1.2 are included in this table. A note message is generated in situations where, for technical reasons, MBSA cannot determine whether the appropriate update or workaround was applied. A warning message is generated in situations where the version number of the file that is detected is a version number that is later than the versions of the file that are listed in the Mssecure.xml file.

Note SMS does not detect the security update if MBSA returns a note message for that particular update. In this situation, you can use SMS software inventory to audit the environment for file names and versions, and you can manually build Collections by using the file information from the Microsoft Knowledge Base article that documents the security update.

Bulletin(s) Product or component MBSA v1.1.1 MBSA v1.2
MS98-001 (Service Pack 6a [SP6a]) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS98-007 (original release and Service Pack 1 [SP1]) Microsoft Exchange Server 5.5 Note Supported
MS99-025 (Service Pack 6a [SP6a]) Microsoft Internet Information Server 4.0 Note Supported
MS99-036 (Service Pack 6 [SP6]) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Note
MS99-036 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS99-041 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS99-050 (original release) Microsoft Internet Explorer 5.01 Note Supported
MS00-025 (SP6a) Microsoft Internet Information Server 4.0 Note Supported
MS00-028 (SP6a) Microsoft Internet Information Server 4.0 Note Supported
MS01-022 (original release, Service Pack 1 [SP1], SP2, and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Supported
MS01-022 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Supported
MS01-022 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Supported
MS01-041 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Supported
MS01-047 (SP4) Microsoft Exchange Server 5.5 Note Supported
MS02-006 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Supported
MS02-008 (original release and Service Pack 1 [SP1]) Microsoft Windows XP Home Edition; Windows XP Professional Edition Note Supported
MS02-008 (original release, SP1, SP2, and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Supported
MS02-008 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Supported
MS02-008 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Supported
MS02-029 Microsoft Windows NT 4.0 (all versions) Non-critical warning if running RRAS (English only) Non-critical warning if running RRAS (English only)
MS02-030 (Service Pack 2 [SP2]) Microsoft SQL Server 2000 Note Supported
MS02-035 (original release, Service Pack 1 [SP1], SP2, SP3, and SP4) Microsoft SQL Server 7.0 Note Note
MS02-035 (original release, SP1, and SP2) Microsoft SQL Server 2000 Note Note
MS02-040 (SP2) Microsoft SQL Server 2000 Note Supported
MS02-040 (SP4) Microsoft SQL Server 7.0 Note Supported
MS02-053 (original release) Microsoft Windows XP Home Edition; Windows XP Professional Edition Note Note
MS02-053 (SP2 and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Note
MS02-053 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Note
MS02-053 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS02-064 (original release, SP1, SP2, and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Note
MS02-065 (original release, SP1, SP2, and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Supported
MS02-065 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Supported
MS02-065 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Supported
MS03-008 (original release and SP1) Microsoft Windows XP Home Edition; Windows XP Professional Edition Note Note
MS03-008 (SP2 and SP3) Microsoft Windows 2000 Server, Windows 2000 Professional, Windows 2000 Datacenter Server, Windows 2000 Advanced Server Note Note
MS03-008 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Note
MS03-008 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS03-010 (SP6) Microsoft Windows NT Server 4.0 Terminal Server Edition Note Note
MS03-010 (SP6a) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 Note Note
MS03-030 Microsoft DirectX Note Note
MS03-051 Microsoft FrontPage Server Extensions Note Note
MS04-011 (CAN-2004-0117 only) Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0 See bulletin FAQ See bulletin FAQ
MS04-016 Microsoft DirectX [Microsoft Windows XP (all versions); Microsoft Windows 2000 (all versions); Microsoft Windows Server 2003 (all versions)] Not supported Note
MS04-022 Internet Explorer 6 when installed on Microsoft Windows NT Server 4.0; Windows NT Server, Enterprise Edition 4.0; Windows NT Workstation 4.0; Microsoft Windows NT Server 4.0, Terminal Server Edition Not supported Note
MS04-026 Outlook Web Access (OWA) Not supported Exchange Server 5.5 must also be present
MS04-028 Windows XP (original release and SP1), Windows Server 2003 (original release), Internet Explorer 6.0 SP1 Not supported Note
MS04-039 ISA Server 2000 Not supported Not supported
MS05-006 WSS and STS Not supported WSS not supported, STS supported
MS05-009 LibPNG, which includes Windows Messenger, MSN Messenger and WMP Not supported Note message for Windows Messenger 4.7, 5.x and MSN Messenger – full detection for Windows Media Player 9
MS05-022 MSN Messenger Not supported Not supported
MS05-029 Outlook Web Access (OWA) Not supported Exchange Server 5.5 must also be present
MS05-030 Outlook Express Not supported Not supported
MS05-031 Microsoft Interactive Training (Step-by-Step) Not supported Not supported
MS05-033 Services for Unix 2.2, 3.0, and 3.5 Not supported Not supported
MS05-034 ISA Server Not supported Not supported
MS05-044 Windows FTP Client Not supported Not supported
MS05-050 Microsoft DirectX Not supported Not supported
MS06-005 Windows Media Player 10 Not supported Not supported
MS06-014 MDAC (on Windows 2000 or Windows XP SP1) Not supported Not supported
MS06-016 Outlook Express Not supported Not supported
MS06-017 Microsoft FrontPage Server Extensions 2002 Not supported Not supported
MS06-020 Macromedia Flash Player Not supported Not supported
MS06-023 JScript Not supported Not supported
MS06-024 Windows Media Player 10 Not supported Not supported
MS06-033 .Net Framework 2.0 Not supported Not supported
MS06-043 Outlook Express Not supported Not supported
MS06-055 Microsoft Vector Markup Language Not supported Not supported
MS06-056 .Net Framework 2.0 Not supported Not supported
MS06-069 Macromedia Flash Player Not supported Not supported

For a comparison of MBSA 1.2.1, EST and MBSA 2.0 support, see the following Microsoft Knowledge Base article:

895660 Microsoft Baseline Security Analyzer (MBSA) 2.0 is available


Suppress note messages

After you review each of the security bulletins that are associated with note messages and after you have tried to resolve the issues, you can suppress note messages in the Hfnetchk output, if you want to. To suppress note messages, follow these steps:

  1. Click Start, and then click Run.
  2. In the Open box, type the following command, and then click OK:

    mbsacli.exe /hf -v -s 1


Keywords: kberrmsg kbenv kbinfo KB306460