ST. PAUL, Minn. -- Microsoft retired MBSA v1.2 last month, and today marks the first Patch Tuesday that Microsoft no longer supports the MSSecure.XML file used by MBSA 1.2. Customers that relied upon MBSA 1.2 to perform scanning for security patches will no longer be able to scan for new patches released after October 9th, 2007. Shavlik is using this Patch Tuesday to alert customers that Shavlik offers a drop-in command-line replacement to MBSA 1.2 that will enable customers to continue scanning for security patches without requiring any changes to their existing scripts.
Shavlik is also offering a free version of its Shavlik NetChk Protect patch scanning product that scans for legacy Microsoft products that Microsoft doesnt support in its current Windows Update or MBSA 2.0 offerings. Results from this free scan product can be output to MBSA format and included with current product results from MBSA 2.0.
Shavlik NetChk Limited for MBSA can be immediately downloaded at no cost to Microsoft customers. In addition, customers can upgrade to Shavliks enterprise versions of Shavlik NetChk Protect which provide a robust set of tools for full vulnerability management lifecycle including automated remediation, intelligent patch targeting, granular policy, and compliance reporting. Companies interested in a full command-line replacement for MBSA 1.2 should contact Shavlik to request information on the Shavlik NetChk Analyzer scan engine.