False positives when scanning for MS hotfixes

Hi folks,
Hopefully I've not missed anything obvious, but during
some scans to check hotfix status I've been getting
reports saying hotfixes are missing.

Picking one of the hosts as an example I get:

SMB registry scan reporting  27 security holes for
hotfixes already installed.

MS04-031, 04-007, 04-13, 03-42, 03-34, 04-14, 04-11,
05-001, 03-043, 03-049, 05-002, 05-11, 05-13, 04-020,
04-019, 04-022, 03-023, 05-008, 04-023, 04-037,
05-012, 03-041, 04-012, 02-008, 05-015, 04-032, 05-003

Domain user account with remote registry access (not
administrative).

Plugins downloaded 22/3/05 and Nessus 2.2.3.

The hotfixes are all listed under

HKLM\software\Microsoft\updates\windows 2000
HKLM\software\Microsoft\updates\uninstall
HKLM\software\Microsoft\Windows
NT\CurrentVersion\Hotfix
HKLM\software\Microsoft\Active setup\Installed
Components

All of which are queried by smb_hotfixes.nasl

File versions all correct so I'm satisfied that the
hotfixes have been correctly installed.

running nessus from commandline.

The hotfixes were deployed via Shavlik HFNetChk Pro.


Can anyone shed any light on what might be wrong here?

Kind regards

Andy



Send instant messages to your online friends http://uk.messenger.yahoo.com 
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus