Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Plugin 10860 - SMB use host SID to enumerate local users

from [Engstrom, Glenn E (Glenn)] Network Security [Permanent Link]
Subject: Plugin 10860 - SMB use host SID to enumerate local users
Date: Tue, 25 Apr 2006 14:00:32 -0500 
Ran into a problem with 10860. We use the NessusWX and a Nessus 2.2.6 for Linux.

We get an error about a line being to long and caused the client choke on the 
scan of the server involved. We looked at the ouput in the session file and 
found the line which was very long and noticed it enumerated ID's from 1000 to 
6001. It also caused the reporting from the client to not report for the 
machine involved, but did report the other servers not displaying this long 
line of id's.

We tried to configure the client to allow scanning of ID's between 1000 - 1050 
and still got a huge line ( 1000 - 6001 ). So thought that perhaps the client 
was not passing the limit values, but when we looked at the plugin code we see 
what appears to be the default of 1000 - 1200 so the defaults appear to not be 
enforced even when we did not specify the limits.

Any ideas?

Glenn
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Plugin 10860 - SMB use host SID to enumerate local users, Engstrom, Glenn E (Glenn) <=
Previous by Date:  Hydra + Nessus : Unsupported server command: FILE_ACCEPTED, LE GUELLEC Goulven DF/SBR
Next by Date:  update-nessusrc, Larry Petty Jr.
Previous by Thread:  Hydra + Nessus : Unsupported server command: FILE_ACCEPTED, LE GUELLEC Goulven DF/SBR
Next by Thread:  update-nessusrc, Larry Petty Jr.
Indexes:  [Date] [Thread] [Top] [All Lists]