[Dshield] Knowing what's plugged-in

Jon Kibler Jon.Kibler at aset.com
Fri May 30 03:36:46 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings All,

The Adobe flash player issue brings up what I consider a critical question.

Few (IMHO, very few) web browser plug-ins let you know when there are
updates available. After playing around with Safari and Firefox, the
only out-of-date plugins that I experimented with that told me they were
out of date were the Acrobat Reader and QuickTime plugins. Even more
scary -- and I believe a fundamental problem with web plugin design --
they did not provide an offer to update to a newer version until AFTER
they had executed (potentially malicious) content.

Which gets me to my question: Is there any good tool available to
inventory each workstation in a organization and report on installed
plugins for each browser installed?

As a follow-up question: Is there a tool available that will push out
plugins to every browser that needs an update? (Something like patch
management for browser plugins?)

TIA for feedback.

Jon Kibler
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkg/dk4ACgkQUVxQRc85QlOb2gCdG0SChKoOs1DGFFBe2NLgf8LT
mYoAoJoyrQ7x4XdniI5W4k9NqSAf3vPH
=KXQ5
-----END PGP SIGNATURE-----




=========================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list