Mbsa report file location full#

MBSA creates a report that includes sensitive information that can be used by hackers and save them research time. MBSA runs on Windows 2000 and Windows XP systems and will scan for missing Hotfixes and vulnerabilities in main Microsoft's products. Version 1.0 of MBSA includes a graphical and command line interface that can perform local or remote scans of Windows systems. The Microsoft Baseline Security Analyzer (MBSA) analyzes Windows systems for common security mis-configurations. Microsoft released Baseline Security Analyzer on April 8, 2002. However, many machines are not so 'resistant'. Such attack will not be automatic on fully patched machines with default security settings selected.

However, any active content is launched with user permissions and can read this information. If the report is located in an NTFS partition, only the user can access it.

Microsoft Baseline Security Analyzer (MBSA) 1.0 Even if this report can be accessed only by a specific user, the active content can access it too. This means that active content (executables, scripts, ActiveX, Java, etc.) has the ability to generate a list of vulnerabilities or read a previously created list, and can then utilize these vulnerabilities to its advantage.

Mbsa report file location full#

Such a simple vulnerability allows potential hackers to find out about vulnerabilities that enable full control over the machine that is under attack. However, MBSA turns the simple vulnerability of reading local files into a much more powerful vulnerability. MBSA was created to help users become aware of risks and available patches. After MBSA analyzes the system for security vulnerabilities, a report is created as a plain text file that includes sensitive information that can be used by hackers to attack the specific machine.