Karl
Mon Oct 04 20:34:40 CDT 2004
<google@vtfood.com> wrote in message
news:1096922637.394915.201860@k17g2000odb.googlegroups.com...
> I'm wondering if such a web service exists. I need one that I can
> query with a Q#, and gather the KB Article details such as title,
> Bulletin #, description, date issued, severity, etc. I want to do this
> from a C# applicaton.
You could download and parse the mssecure.xml / .cab file that the MS MBSA
tool uses to inventory MS patches... although I think it currently only
contains critical patches for several of the most common MS products, not
all of them.
http://www.microsoft.com/technet/security/tools/mbsaqa.mspx
'You can manually download the signed English mssecure.cab file used for the
security updates check in MBSA V1.2.1 from the following Microsoft Web site:
http://go.microsoft.com/fwlink/?LinkId=18922. Place the downloaded CAB file
in the MBSA installation folder. (Note if you are running MBSA V1.1.1 and
download this English CAB file to be placed in the MBSA installation folder,
it will have to be saved as "mssecure.cab" or renamed to "mssecure.cab"
after downloading prior to the scan).
Scanning for Microsoft Office product updates uses a somewhat different
procedure in order to download the needed files:
. Download INVCIF.EXE from
http://go.microsoft.com/fwlink/?linkid=18842
Run INVCIF.EXE, and answer Yes to install the Office Update Inventory Tool,
read the EULA and agree to its terms, and specify a local directory to
expand the contents into, for example C:\TEMP).
This will create two files (PatchData.XML and InventoryCatalog.HTML) as well
as a directory named CIFS. A file called PUIDS.CIF will also be extracted
into the CIFS directory. Copy these two files and the directory into the
C:\Microsoft Baseline Security Analyzer\OfficeUpd directory on the scanning
machine. If you are prompted to overwrite existing files click "Yes".'
This might also perhaps be useful:
http://www.microsoft.com/technet/community/chats/trans/mbsa/mbsa0317.mspx
Q: Mr. Nash said theres is a new script available (today) that parses the
results of MBSA 1.2 output. Can't find it anywhere though
A:
http://download.microsoft.com/download/9/9/8/998e0459-70e9-469a-a27d-1937c6b5a04f/MBSASamples.exe
This is perhaps less reliable, but you could try to query Google for KB
numbers such as
"KB123456 site:support.microsoft.com en-us" e.g.
http://www.google.com/search?hl=en&lr=lang_en&as_qdr=all&q=kb834489+site%3Asupport.microsoft.com+en-us
The above search seems to usually bring up only one article or the correct
article, but I can't say for sure whether it really does. There are other
sites like www.ntbugtraq.com that reproduce KB articles on patches too.