Re: Samba swat warnings in 2.2.4

On Apr 26, 2005, at 6:43 AM, Knut Hellebø wrote:

> Regards,
>
> I recently installed Nessus 2.2.4 on a DL360G3 running Linux (RH 7.3). 
> The compilation went OK (as always on Linux), and to be sure I had a 
> clean install I wiped everything prior to installing the 
> libs/binaries/configs etc.
> However, when running Nessus, every report warns me about a swat 
> vulnerability even when samba is not installed. The warning appear as 
> a general/icmp message saying
>
> The remote host is affected by the vulnerability described in 
> GLSA-200407-21 (Samba: Multiple buffer overflows)
>
> The message has also appeared on other tested hosts as a general/tcp 
> message.
> False positive ?

If you are not scanning a Gentoo system with SSH credentials it's a bug 
:

1) kill your nessus daemon
2) remove desc directory (rm -rf /usr/local/lib/nessus/plugins/.desc/ )
3) restart nessus daemon

Now this vulnerability should no longer be reported.


Nicolas

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus