navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Secunia PSI still showing already patched applications

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft .NET Framework 2.x

This thread has been marked as resolved.
D-K-G Secunia PSI still showing already patched applications
Member 16th Oct, 2011 06:25
Ranking: 0
Posts: 3
User Since: 16th Oct, 2011
System Score: N/A
Location: US
I use 32- and 64-bit Windows 7 and Secunia PSI, version 2.0, shows .Net Framework and IE as needing the same patches. But I checked, and those patches are already installed. Rescanning doesn't help, even after a complete shutdown and restart. Can anyone help?

Post "RE: Secunia PSI still showing already patched applications" has been selected as an answer.
Maurice Joyce RE: Secunia PSI still showing already patched applications
Handling Contributor 16th Oct, 2011 08:55
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Can U please publish any troubleshooting reports.


FINDING A FILE PATH

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum.
OR THIS METHOD WHICH GIVES A HELPER MORE INFORMATION
4a Below DETECTED INSTANCES you will see You can double click this row for additional information & options>double click it>a box will appear>click TROUBLESHOOT REPORT>Now highlight the information revealed from START to END & copy it (CTRL+C) then post it to the Forum (CTRL+V)

The end result U post to the Forum should look like this:
---START---

Program Name:
Apple iTunes 10.x

Security State:
Insecure

Download Link:
http://appldnld.apple.com/iTunes10/061-9638.201103...

Instances Found:
C:\Program Files\iTunes\iTunes.exe, version: 10.1.2.17

Last System Scan (localtime):
3. Mar 2011, 16:47

Operating System:
Microsoft Windows XP Home Edition, Service Pack 3

---END---
Update 9 09:33 13/03/2011

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
D-K-G RE: Secunia PSI still showing already patched applications
Member 16th Oct, 2011 16:15
Score: 0
Posts: 3
User Since: 16th Oct 2011
System Score: N/A
Location: US
Here is the requested information. My comments are in all caps, to distinguish them.


.NET framework 2.x FOR BOTH 32- AND 64-BIT:

Detected Instances:
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe, version 2.0.50727.5420

Microsoft Security Patches Not Installed:
KB2572077
KB2572078

This program was detected as Insecure, it is strongly recommended that you apply the latest security patch from the vendor of the program.

The version detected of Microsoft .NET Framework 2.x was 2.0.50727.5420 while the latest version including one or more security fixes is .

NOTE THAT THERE'S NO FIX LISTED AFTER "security fixes is ."

.NET framework 3.x FOR BOTH 32- AND 64-BIT:

Detected Instances:
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe, version 3.0.4506.4926
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe, version 3.0.4506.5420

Microsoft Security Patches Not Installed:
KB2572077
KB2572078

The version detected of Microsoft .NET Framework 3.x was 3.0.4506.4926 while the latest version including one or more security fixes is .

THIS SUPPOSEDLY IS MISSING THE SAME PATCHES.

IE 9 32- AND 64-BIT:

Detected Instances:
C:\Program Files (x86)\Internet Explorer\iexplore.exe, version 9.0.8112.16421
C:\Windows\winsxs\wow64_microsoft-windows-i..etexp lorer-optional_31bf3856ad364e35_9.4.8112.16421_non e_17a944edb4ca4c7a\iexplore.exe, version 9.0.8112.16421

Microsoft Security Patches Not Installed:
KB2586448

The version detected of Microsoft .NET Framework 2.x was 2.0.50727.5420 while the latest version including one or more security fixes is .

NOTE THAT THERE'S NO FIX LISTED AFTER "security fixes is ." for all "insecure" programs.


THIS ONE IS NEW:

Microsoft Windows 7 1 Insecure Microsoft Windows 7 Microsoft Update
Detected Instances:
Microsoft Windows 7

Microsoft Security Patches Not Installed:
KB2564958
KB2579686
KB2567053


FROM WINDOWS UPDATE, VIEW UPDATE HISTORY:
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2572077)
Installation date: 10/13/11 07:29
Installation status: Successful
Update type: Important

Security Update for Windows 7 for x64-based Systems (KB2564958)
Installation date: 10/13/11 08:58
Installation status: Successful
Update type: Important

Security Update for Windows 7 for x64-based Systems (KB2579686)
Installation date: 10/13/11 08:58
Installation status: Successful
Update type: Important

Security Update for Windows 7 for x64-based Systems (KB2567053)
Installation date: 10/13/11 09:02
Installation status: Successful
Update type: Important


THE KBKB2572078 PATCH ISN'T LISTED, BUT, AS I SAID IN THE ORIGINAL POST, WINDOWS UPDATE SAYS THERE ARE NO PATCHES TO INSTALL.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Secunia PSI still showing already patched applications
Handling Contributor 16th Oct, 2011 18:38
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Thank you. Not too surprised by what you are showing - .NET can sometimes get in a muddle.

Can you please install/reinstall KB2572078 on both from this link:

http://www.microsoft.com/download/en/details.aspx?...

(Use the 22.0MB link for 64 Bit & 10MB for 32Bit)

Once installed reboot then run a full PSI scan.

What,if any,problems remain?

All I really need to know is the KB numbers that still show as missing/require installation.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
D-K-G RE: Secunia PSI still showing already patched applications
Member 19th Oct, 2011 16:42
Score: 0
Posts: 3
User Since: 16th Oct 2011
System Score: N/A
Location: US
I downloaded and installed all the .NET Framework updates, including the one(s) that came out after your reply. That did it. I find it strange that patches that are for versions 2 and 3 don't "take" until you download the version 4 patch.

Thank you.
Was this reply relevant?
+0
-0
Anthony Wells RE: Secunia PSI still showing already patched applications
Expert Contributor 19th Oct, 2011 16:53
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

FYI , on my XP system on patch Tuesday , I was forced to reboot after a .NET 4 update before I could get the rest of the .Net updates installed . The update installing order of the KB's was not the same as the listed download order at M$Updates .

Otherwise , no problems .

As Maurice says , .NET can be a tricksy beast .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Maurice Joyce RE: Secunia PSI still showing already patched applications
Handling Contributor 19th Oct, 2011 17:39
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Pleased to say it looks like your problem has been resolved. I will lock this thread for U in a few hours time unless U post back asking for it to be left open.

This will protect your mail box from update emails from Forum "tag on" posts & spammers.

You can of course lock your own threads yourself. Just click the ACCEPT button in the post of the helper who offered U the best solution/advice to solve your problem.

Secunia Support can always reopen threads by applying by email to: support@secunia.com

For what it is worth, Microsoft now "manage" .NET. Provided U update as & when Windows Update offer them, then reboot, U should have no further issues like this.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Maurice Joyce RE: Secunia PSI still showing already patched applications
Handling Contributor 19th Oct, 2011 17:58
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Sorry - I missed answering your other question. This snippet from a post I created some time ago explains how .NET operates. On that basis it is very likely that an update for .NET4 will alter files in .NET 2 & 3.

Hope it helps.

.NET FRAMEWORK PROBLEMS

A bit of background information worth knowing before trying to fix .NET issues with Windows XP,Vista & Windows 7

Microsoft created .NET Framework to provide building blocks for applications. .NET is not a component of Windows itself. I strongly recommend that you avoid downloading .NET until you install an application that requires one, at which time the programme will likely install the necessary version for you or notify U that .NET version xxx is required in which case U get it from MS.


1. .NET Framework 1.0, 1.1 and 2.0 are all side-by-side versions that can be installed and uninstalled without affecting the others. This means that if you are running into an issue in .NET Framework 2.0, for example, you do not necessarily need to remove .NET Framework 1.0 and 1.1 in addition to removing 2.0.

2. .NET Framework 3.0 is an add-on that requires .NET Framework 2.0 to be present as a prerequisite. If you have .NET Framework 3.0 installed, you will not be allowed to uninstall .NET Framework 2.0 until you first uninstall .NET Framework 3.0.

3. .NET Framework 3.5 is an add-on that requires .NET Framework 2.0 SP1 and .NET Framework 3.0 SP1 to be present as prerequisites. If you have .NET Framework 3.5 installed, you will not be allowed to uninstall .NET Framework 3.0 SP1 or 2.0 SP1 until you first uninstall .NET Framework 3.5.

4. .NET Framework 3.5 SP1 is an add-on that requires .NET Framework 2.0 SP2 and .NET Framework 3.0 SP2 to be present as prerequisites. If you have .NET Framework 3.5 SP1 installed, you will not be allowed to uninstall .NET Framework 3.0 SP2 or 2.0 SP2 until you first uninstall .NET Framework 3.5 SP1.

5. .NET Framework 4 was released on 12th April 2010. The Read Me notes are here:
http://download.microsoft.com/download/B/5/7/B57D2...

++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++

If you are having trouble installing .NET Framework 2.0, 3.0 or 3.5, I recommend trying to install .NET Framework 3.5 SP1. It will install .NET Framework 2.0 SP2 and 3.0 SP2 behind the scenes, and these versions contain additional fixes not in the original 2.0, 3.0 or 3.5 releases. Plus, 3.5 SP1 will automatically uninstall any older versions of 2.0, 3.0 or 3.5 that are on your system, so you can save some time by not trying to install a version of .NET Framework that 3.5 SP1 is going to uninstall during its install process.




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+