Security Vulnerabilities - Broadcom and Centrino Wireless

Some of you may have had the recent surprise of the Broadcom and Centrino Wireless vulnerabilities and have wondered how to tackle the problem. Here's what we did to pinpoint the machines.

1. Within (Site Settings in the console) Client Agents > Software Inventory Client Agent > Properties
2. Add a new file type *.sys
3. Set the Path to a “Variable or path name” = %windir%\system32\drivers\ and Search subdirectories
4. Make sure all Excludes are unchecked
5. Make sure File details and Product details are checked
6. Refresh machine policies on all sites where changes are made
7. Initiate Software Inventory on all sites where change are made
8. Wait for the data to flow up to your reporting sites
9. Within (Reporting Website) Software – Files > Computers with a specific file
10. Enter the filename for which you are searching. (i.e. for Broadcom wireless – BCMWL5.sys
11. When the report is produced, sort by file version and export this report to an Excel spreadsheet
12. Eliminate all rows which have a version which is compliant with the new standards
13. Create a text file with the list of machine names and eliminate all spaces (reports tend to put spaces in strange places)
14. Create a collection with the tool “Collection Adder” with the test file you just created
15. Deploy your update to this collection. (each different driver will require a separate collection and deployment of course.)

I hope this helps others trying to tackle this problem.

Security Patching - ITMU Revision 3

Most of us have probably experienced the high CPU usage problem caused by the overloaded CAB file with the current ITMU. Microsoft has released a new version of the tool which utilizes a reformatted CAB file structure to hopefully alleviate this problem. In order to use this tool, you must be running SMS 2003 SP1 or greater on site servers and SMS 2003 SP1 Advanced Client or greater on SMS clients.

Although there was some confusion at first as to whether SMS 2003 SP2 users could use the revised tool, Microsoft uploaded a new binary which can be used to upgrade ITMU versions as stated in the "Systems Requirements" documentation.

There have been some complaints about the performance of the new tool, so as always, test test test!

Information Page: http://www.microsoft.com/downloads/details.aspx?familyid=ba59d1a1-ff98-4103-824d-bbe6e414346b&displaylang=en

Direct Download: http://www.microsoft.com/downloads/info.aspx?na=90&p=&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=ba59d1a1-ff98-4103-824d-bbe6e414346b&u=http%3a%2f%2fdownload.microsoft.com%2fdownload%2f6%2fc%2f4%2f6c41fa79-a92d-49a7-b677-87c4263beead%2fSMS2003ITMU_ENU.exe