Microsoft Baseline Security Analyzer vulnerabilities

CVE-2002-1762 [MEDIUM] CVE-2002-1762: Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documen Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.

CVE-2004-2091 [MEDIUM] CVE-2004-2091: Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been p Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.