Re: Registry permission results from 10430

On Thu, Apr 28, 2005 at 10:07:36AM -0500, Mallory, Danny
wrote:

> Looking at this script I don't see where it is actually
> checking permissions(admin,system,everyone) but rather
> testing access with the credentials gathered from SMB
> login.. Is this correct or am I missing something?.. If so
> this appears to be raising a false positive when seeded
> with valid admin credentials.

The determination is supposedly handled by the function
registry_key_writeable_by_non_admin(), which comes from an
include file -- either smb_nt.inc if using
smb_reg_run_permissions.nasl revision 1.19 or earlier, or
smb_func.inc if using 1.20. With smb_func.inc, the function
simply returns FALSE for now since it needs to be rewritten
to support the new SMB API; that will prevent the plugin
from reporting a vulnerability. 

So, if you're currently getting false positives, it suggests
your plugins are out of date. Run nessus-update-plugins, and
they should go away, at least until
registry_key_writeable_by_non_admin() is rewritten. :-)


George

--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus