RE: mmmm is it really a hole..

Cheers Nicolas,

On closer inspection you were right that it is a UDP port. I was unaware
that the only protocol scanned was TCP.... You know what you get with an
assumption....

Thanks for the help...

Kind regards,

Brennon Williams

-----Original Message-----
From: nessus-bounces@list.nessus.org
[mailto:nessus-bounces@list.nessus.org]On Behalf Of Nicolas Pouvesle
Sent: Friday, December 31, 2004 12:58 PM
To: nessus@list.nessus.org
Subject: Re: mmmm is it really a hole..

Brennon Williams wrote:
> How is it possible that I get a HOLE on port 137 yet the port scanner
> says that port 137 isn't open?
>
>
>
> I thought a port had to be open or listening for it to be vulnerable. Am
> I right thinking this?

port 137 is used by windows for name resolution. It is usually an udp port.
By default port scanners don't look at UDP. You can change it in nessus
options. Or if you use nmap you must use the -sU option.

Else if your udp port 137 is really closed could you indicate us the
Nessus plugin that give this result ?


Regards,


Nicolas
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus