CVE-2004-2091 - Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been p

CVE-2004-2091

Summary

Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.

References

http://www.securityfocus.com/archive/1/353324
http://www.securityfocus.com/bid/9634

Vulnerable Configurations

cpe:2.3:a:microsoft:baseline_security_analyzer:1.2:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:baseline_security_analyzer:1.2:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 05-09-2008 - 20:43)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	9634
bugtraq	20040210 Another Low Blow From Microsoft: MBSA Failure!

Last major update

05-09-2008 - 20:43

Published

10-02-2004 - 05:00

Last modified

05-09-2008 - 20:43