Microsofts Flaw-Finding Tool Has Its Own Flaw
Users claim the new Microsoft Baseline Security Analyzer often reports missing patches even after they've been applied.Just days after its release, users are reporting a raft of problems with Microsoft Corp.s new vulnerability scanning tool. Known as the Microsoft Baseline Security Analyzer, the tool scans various Microsoft products for known vulnerabilities and can also alert the user to missing or misapplied patches and hotfixes. However, some users say the tool is a bit overzealous in its efforts and often reports missing patches minutes after they have been applied.
The MBSA is based on Microsofts HFNetChk command-line tool and is meant to be more user-friendly than its predecessor. However, the usability advances might be pushed aside by the technical problems.