cancel
Showing results for 
Search instead for 
Did you mean: 
ittech
Level 13
Report Inappropriate Content
Message 1 of 11

Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

So, I've been researching VSE 8.7i Patch 3 and apparently your systems must have a "Buffer Overflow and Access Protection" DAT of at least 480 in order for them to work properly when Patch 3 is installed. Is there any way I can create a query for Buffer Overflow & Access Protection DAT versions so I don't prematurely deploy Patch 3?

1 Solution

Accepted Solutions
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 2 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Hm... I'm afraid it doesn't look like it: I've just done a quick check and it appears that the buffer overflow dat version is not available to the query engine.

Sorry

Regards -

Joe

10 Replies
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 2 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Hm... I'm afraid it doesn't look like it: I've just done a quick check and it appears that the buffer overflow dat version is not available to the query engine.

Sorry

Regards -

Joe

ittech
Level 13
Report Inappropriate Content
Message 3 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Could I use the Task > Deploy Update function to only deploy the Buffer Overflow & Access Protection DAT, then run a query to see which systems completed the Task?

ittech
Level 13
Report Inappropriate Content
Message 4 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Actually, I was thinking yesterday while the site was down. If i have the Buffer Overflow & Access Protection DAT v 499 and I update my virus definition DAT everyday, is it safe to assume systems with an updated Virus Definition also have an update Buffer Overflow & Access Protection DAT?

HupSkiDup
Level 11
Report Inappropriate Content
Message 5 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

If you use Bindview or want to do some manual check process on the client, you can look at this reg key.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection]

"szBOPDefVer"="493"

480 minimum to install patch 3, I think 499 is current.  Also, I think the vscan.bof file size is around 60k, versus the non-working one is around 30k I believe.  Fun stuff.

ittech
Level 13
Report Inappropriate Content
Message 6 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Thanks for the Reg Key. It's not what I'm looking for, but I may have to resort to manually checking.

andymease
Level 10
Report Inappropriate Content
Message 7 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Are you unable to run the query I posted?  That should give you exactly what you wanted...

Andrew

ittech
Level 13
Report Inappropriate Content
Message 8 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Sorry I didn't reply earlier.

Our SQL Pro is out for a few weeks on her honeymoon and I don't really know much about it. I can take a look around the server though, thanks!

Highlighted
McAfee Employee jstanley
McAfee Employee
Report Inappropriate Content
Message 9 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

The query you are looking for is a function of the VSE reporting extension. I just checked and the latest reporting extension for VSE (as Joe noted) does not provide this as a reporting criteria. In the meantime the query Andy posted should give you what you are looking for. I'd suggest logging an FMR to have this reporting capability added to the VSE reporting extension.

You can submit FMRs here:

https://secure.nai.com/apps/downloads/products/product.asp

ittech
Level 13
Report Inappropriate Content
Message 10 of 11

Re: Can I create a query for Buffer Overflow & Access Protection DAT versions?

Jump to solution

Done and done! Thanks!

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center