Re: Oracle and Nessus

On Fri, 25 Nov 2005, Grissom, Amanda (NIH/NEI) [C] wrote:

> I have a Solaris 8 server running Oracle 9i that has 6 ip addresses.
> When I run the NESSUS scanner against the server 1 (one) IP at a time
> the listenr for the DB stays up.  When I run the NESSUS scanner against
> the server multiple IP's at a time the listern drops out.
>
> Due to this we are excluding this machine from our targets list.
>
> Can anyone explain what could be causing this or a work around that we
> could put into place so that we could continue you to scan this machine?

Blame Oracle for giving you crappy software.

I think a lot of people are way beyond being nice to Oracle. Some people
have been sitting on security advisories for over 600 days and they have
yet to see a fix.

Now how much is that telling you about Oracle and security?

You can try to test just one address at the same time but if your network
is a bit large it takes ages to test it.

I would just excluded the server and mark it in red as being volatile and
in need of a fix. If nessus can kill it then so can the next worm
outbreak.

Hugo.

-- 
        I hate duplicates. Just reply to the relevant mailinglist.
        hvdkooij@vanderkooij.org                http://hvdkooij.xs4all.nl/
                Don't meddle in the affairs of magicians,
                for they are subtle and quick to anger.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus