CVE-2004-2091 Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administra...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft baseline security analyzer | = 1.2 | No fix listed |
References
- 20040210 Another Low Blow From Microsoft: MBSA Failure! mailing-list vendor-advisory
- 9634 vdb-entry vendor-advisory