msrpc_dcom2.nasl - False negative on NT 4.0

After the XP SP2 false positive check was added to msrpc_dcom2.nasl, it will 
now no longer detect the vulnerability on vulnerable NT 4.0 machines.

On NT 4.0, when it gets to the check with the comment " HP-UX dced or WinXP 
SP2" the following are set

error1 = 00000000
error2 = 00000000
error3 = 02000000
error4 = 0300011c
error5 = NULL (set explicitly just before it gets to this line so I don't know 
what purpose it serves).

Before error5 was set to NULL, it was set to 54010480 on the NT 4.0 check. I 
don't have a box with SP2 on it to check to see if there are ways to code 
around this.

Trevor Hemsley,
Security Specialist,
Atos Origin Ltd,
Whyteleafe,
+44-(0)1883-628139



__________________________________________________________________________
This e-mail and the documents attached are confidential and intended 
solely for the addressee; it may also be privileged. If you receive this 
e-mail in error, please notify the sender immediately and destroy it.
As its integrity cannot be secured on the Internet, the Atos Origin group 
liability cannot be triggered for the message content. Although the 
sender endeavours to maintain a computer virus-free network, the sender 
does not warrant that this transmission is virus-free and will not be 
liable for any damages resulting from any virus transmitted.
__________________________________________________________________________
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus