Software Deployment

Hi all,

We are having an issue where we are attempting to resolve a vulnerability seen by Nessus on a small subset of our systems, but from what KACE is saying, no patching is needed.

According to Nessus, a issue exists with MS11-025, for both 2008 and 2010 Visual C++ versions. On a number of systems, Nessus says that the installed version of mfc100.dll 9.0.30729.1 is vulnerable and needs to be replaced with 9.0.30729.6161.

KACE, however, does not see this as a vulnerability and skips over. This is an old vulnerability and it needs to be updated.