[Dshield] Knowing what's plugged-in

Jon Kibler Jon.Kibler at aset.com
Fri May 30 03:36:46 GMT 2008

Hash: SHA1

Greetings All,

The Adobe flash player issue brings up what I consider a critical question.

Few (IMHO, very few) web browser plug-ins let you know when there are
updates available. After playing around with Safari and Firefox, the
only out-of-date plugins that I experimented with that told me they were
out of date were the Acrobat Reader and QuickTime plugins. Even more
scary -- and I believe a fundamental problem with web plugin design --
they did not provide an offer to update to a newer version until AFTER
they had executed (potentially malicious) content.

Which gets me to my question: Is there any good tool available to
inventory each workstation in a organization and report on installed
plugins for each browser installed?

As a follow-up question: Is there a tool available that will push out
plugins to every browser that needs an update? (Something like patch
management for browser plugins?)

TIA for feedback.

Jon Kibler
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253

Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.

More information about the list mailing list