Secunia
Login
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Forum Thread: Secunia PSI still showing already patched applications
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.This thread was submitted in the following forum:
Programs
|
Relating to this vendor: Microsoft |
And, this specific program: Microsoft .NET Framework 2.x |
| D-K-G | Secunia PSI still showing already patched applications |
|---|---|
 |
16th Oct, 2011 06:25 |
|
Ranking: 0 Posts: 3 User Since: 16th Oct, 2011 System Score: N/A Location: US |
I use 32- and 64-bit Windows 7 and Secunia PSI, version 2.0, shows .Net Framework and IE as needing the same patches. But I checked, and those patches are already installed. Rescanning doesn't help, even after a complete shutdown and restart. Can anyone help? |
Post "RE: Secunia PSI still showing already patched applications" has been selected as an answer.
| Maurice Joyce | RE: Secunia PSI still showing already patched applications | ||||||||
|
16th Oct, 2011 08:55 | ||||||||
| Score: 10510 Posts: 8,072 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Can U please publish any troubleshooting reports. FINDING A FILE PATH From the DASHBOARD page click on SCAN RESULTS. 1. This will list all your programmes with a + to the left of each one. 2. Click the + sign next to the item that U want help with. 3. This will reveal the path under DETECTED INSTANCES. 4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum. OR THIS METHOD WHICH GIVES A HELPER MORE INFORMATION 4a Below DETECTED INSTANCES you will see You can double click this row for additional information & options>double click it>a box will appear>click TROUBLESHOOT REPORT>Now highlight the information revealed from START to END & copy it (CTRL+C) then post it to the Forum (CTRL+V) The end result U post to the Forum should look like this: ---START--- Program Name: Apple iTunes 10.x Security State: Insecure Download Link: http://appldnld.apple.com/iTunes10/061-9638.201103... Instances Found: C:\Program Files\iTunes\iTunes.exe, version: 10.1.2.17 Last System Scan (localtime): 3. Mar 2011, 16:47 Operating System: Microsoft Windows XP Home Edition, Service Pack 3 ---END--- Update 9 09:33 13/03/2011 -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| D-K-G | RE: Secunia PSI still showing already patched applications | ||||||||
|
|
16th Oct, 2011 16:15 | ||||||||
| Score: 0 Posts: 3 User Since: 16th Oct 2011 System Score: N/A Location: US |
Here is the requested information. My comments are in all caps, to distinguish them. .NET framework 2.x FOR BOTH 32- AND 64-BIT: Detected Instances: C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspn Microsoft Security Patches Not Installed: KB2572077 KB2572078 This program was detected as Insecure, it is strongly recommended that you apply the latest security patch from the vendor of the program. The version detected of Microsoft .NET Framework 2.x was 2.0.50727.5420 while the latest version including one or more security fixes is . NOTE THAT THERE'S NO FIX LISTED AFTER "security fixes is ." .NET framework 3.x FOR BOTH 32- AND 64-BIT: Detected Instances: C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe, version 3.0.4506.4926 C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe, version 3.0.4506.5420 Microsoft Security Patches Not Installed: KB2572077 KB2572078 The version detected of Microsoft .NET Framework 3.x was 3.0.4506.4926 while the latest version including one or more security fixes is . THIS SUPPOSEDLY IS MISSING THE SAME PATCHES. IE 9 32- AND 64-BIT: Detected Instances: C:\Program Files (x86)\Internet Explorer\iexplore.exe, version 9.0.8112.16421 C:\Windows\winsxs\wow64_microsoft-windows-i..etexp Microsoft Security Patches Not Installed: KB2586448 The version detected of Microsoft .NET Framework 2.x was 2.0.50727.5420 while the latest version including one or more security fixes is . NOTE THAT THERE'S NO FIX LISTED AFTER "security fixes is ." for all "insecure" programs. THIS ONE IS NEW: Microsoft Windows 7 1 Insecure Microsoft Windows 7 Microsoft Update Detected Instances: Microsoft Windows 7 Microsoft Security Patches Not Installed: KB2564958 KB2579686 KB2567053 FROM WINDOWS UPDATE, VIEW UPDATE HISTORY: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2572077) Installation date: 10/13/11 07:29 Installation status: Successful Update type: Important Security Update for Windows 7 for x64-based Systems (KB2564958) Installation date: 10/13/11 08:58 Installation status: Successful Update type: Important Security Update for Windows 7 for x64-based Systems (KB2579686) Installation date: 10/13/11 08:58 Installation status: Successful Update type: Important Security Update for Windows 7 for x64-based Systems (KB2567053) Installation date: 10/13/11 09:02 Installation status: Successful Update type: Important THE KBKB2572078 PATCH ISN'T LISTED, BUT, AS I SAID IN THE ORIGINAL POST, WINDOWS UPDATE SAYS THERE ARE NO PATCHES TO INSTALL. |
||||||||
|
|||||||||
| Maurice Joyce | RE: Secunia PSI still showing already patched applications | ||||||||
|
|
16th Oct, 2011 18:38 | ||||||||
| Score: 10510 Posts: 8,072 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Thank you. Not too surprised by what you are showing - .NET can sometimes get in a muddle. Can you please install/reinstall KB2572078 on both from this link: http://www.microsoft.com/download/en/details.aspx?... (Use the 22.0MB link for 64 Bit & 10MB for 32Bit) Once installed reboot then run a full PSI scan. What,if any,problems remain? All I really need to know is the KB numbers that still show as missing/require installation. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| D-K-G | RE: Secunia PSI still showing already patched applications | ||||||||
|
|
19th Oct, 2011 16:42 | ||||||||
| Score: 0 Posts: 3 User Since: 16th Oct 2011 System Score: N/A Location: US |
I downloaded and installed all the .NET Framework updates, including the one(s) that came out after your reply. That did it. I find it strange that patches that are for versions 2 and 3 don't "take" until you download the version 4 patch. Thank you. |
||||||||
|
|||||||||
| Anthony Wells | RE: Secunia PSI still showing already patched applications | ||||||||
|
19th Oct, 2011 16:53 | ||||||||
| Score: 2324 Posts: 3,204 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
Hi , FYI , on my XP system on patch Tuesday , I was forced to reboot after a .NET 4 update before I could get the rest of the .Net updates installed . The update installing order of the KB's was not the same as the listed download order at M$Updates . Otherwise , no problems . As Maurice says , .NET can be a tricksy beast . Take care Anthony -- It always seems impossible until its done. Nelson Mandela |
||||||||
|
|||||||||
| Maurice Joyce | RE: Secunia PSI still showing already patched applications | ||||||||
|
|
19th Oct, 2011 17:39 | ||||||||
| Score: 10510 Posts: 8,072 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Pleased to say it looks like your problem has been resolved. I will lock this thread for U in a few hours time unless U post back asking for it to be left open. This will protect your mail box from update emails from Forum "tag on" posts & spammers. You can of course lock your own threads yourself. Just click the ACCEPT button in the post of the helper who offered U the best solution/advice to solve your problem. Secunia Support can always reopen threads by applying by email to: support@secunia.com For what it is worth, Microsoft now "manage" .NET. Provided U update as & when Windows Update offer them, then reboot, U should have no further issues like this. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| Maurice Joyce | RE: Secunia PSI still showing already patched applications | ||||||||
|
|
19th Oct, 2011 17:58 | ||||||||
| Score: 10510 Posts: 8,072 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Sorry - I missed answering your other question. This snippet from a post I created some time ago explains how .NET operates. On that basis it is very likely that an update for .NET4 will alter files in .NET 2 & 3. Hope it helps. .NET FRAMEWORK PROBLEMS A bit of background information worth knowing before trying to fix .NET issues with Windows XP,Vista & Windows 7 Microsoft created .NET Framework to provide building blocks for applications. .NET is not a component of Windows itself. I strongly recommend that you avoid downloading .NET until you install an application that requires one, at which time the programme will likely install the necessary version for you or notify U that .NET version xxx is required in which case U get it from MS. 1. .NET Framework 1.0, 1.1 and 2.0 are all side-by-side versions that can be installed and uninstalled without affecting the others. This means that if you are running into an issue in .NET Framework 2.0, for example, you do not necessarily need to remove .NET Framework 1.0 and 1.1 in addition to removing 2.0. 2. .NET Framework 3.0 is an add-on that requires .NET Framework 2.0 to be present as a prerequisite. If you have .NET Framework 3.0 installed, you will not be allowed to uninstall .NET Framework 2.0 until you first uninstall .NET Framework 3.0. 3. .NET Framework 3.5 is an add-on that requires .NET Framework 2.0 SP1 and .NET Framework 3.0 SP1 to be present as prerequisites. If you have .NET Framework 3.5 installed, you will not be allowed to uninstall .NET Framework 3.0 SP1 or 2.0 SP1 until you first uninstall .NET Framework 3.5. 4. .NET Framework 3.5 SP1 is an add-on that requires .NET Framework 2.0 SP2 and .NET Framework 3.0 SP2 to be present as prerequisites. If you have .NET Framework 3.5 SP1 installed, you will not be allowed to uninstall .NET Framework 3.0 SP2 or 2.0 SP2 until you first uninstall .NET Framework 3.5 SP1. 5. .NET Framework 4 was released on 12th April 2010. The Read Me notes are here: http://download.microsoft.com/download/B/5/7/B57D2... ++++++++++++++++++++++++++++++++++++++++++++++++++ If you are having trouble installing .NET Framework 2.0, 3.0 or 3.5, I recommend trying to install .NET Framework 3.5 SP1. It will install .NET Framework 2.0 SP2 and 3.0 SP2 behind the scenes, and these versions contain additional fixes not in the original 2.0, 3.0 or 3.5 releases. Plus, 3.5 SP1 will automatically uninstall any older versions of 2.0, 3.0 or 3.5 that are on your system, so you can save some time by not trying to install a version of .NET Framework that 3.5 SP1 is going to uninstall during its install process. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
