I saw this on a couple of systems too.. Looks like the changes to the script
require that all 3 fields need to be blank to pass.
User, Password and Autologon.
-----Original Message-----
From: nessus-bounces@list.nessus.org on behalf of Peter Heard
Sent: Wed 3/23/2005 6:19 PM
To: nessus@list.nessus.org
Cc:
Subject: False Positive for Plugin ID 10412 (SMB Registry Autologon)
I am getting false positives from the plugin 10412 (SMB Registry Autologon)
over the past day or so.
I have checked the registry and clearly the machines are not set to
autologon. The registry values are:
DefaultUserName:RG_SZ: joeblow
DefaultPassword:RG_SZ: contains nothing (null)
AutoAdminLogon:RG_SZ: 0
I am running Redhat ES 3 with Nessus 2.2.3. The plugin 10412 is version
1.13.
Peter Heard
------------------------------------------------------------------------
PLEASE NOTE:
The entire content of this e-mail is for "information purposes" only
unless otherwise confirmed in writing by way of letter or facsimile."
------------------------------------------------------------------------
Peter Heard E-mail: peter@mda.ca
Electrical Engineer Phone: 1 (604) 231-2358 (direct)
MacDonald Dettwiler Phone: 1 (604) 278-3411 (operator)
13800 Commerce Parkway, Fax: 1 (604) 278-2936
Richmond BC Canada, V6V 2J3 URL: http://www.mda.ca
------------------------------------------------------------------------
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
