Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

nesssus crashing TSM client

Subject: nesssus crashing TSM client
Date: Mon, 21 Aug 2006 16:01:43 -0400
I ran some scans a week ago against some boxes that have been scanned before. Apparently the scan crashed the TSM (a system backup application) client on over four boxes. A google search indicated an RPC issue when using the NMAP port scanner. I did not use the NMAP port scanner. I did enable all "general scan options" except silent dependencies. Have there been any recent changes to any NASLs that may have caused this? My sys admins (albeit irritated) are looking for a root cause. Please see the log below and offer any comments you may have.

TSM Client was crashed on Sunday at 2:11PM. The last thing in each of the tsm logs is this:

8/13/2006 09:31:43 isFileNameValid: Invalid file name cgi-bin/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name jsp-examples/jsp2/el/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name www.nessus.org - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name servlets-examples/servlet/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name cgi-bin/index.php - file type not allowed.
08/13/2006 09:31:43 Error opening input file /opt/tivoli/tsm/client/ba/bin/tomcat-docs/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name jsp-examples/jsp2/el/index.php - file type not allowed.
08/13/2006 09:31:43 Error opening input file /opt/tivoli/tsm/client/ba/bin/examples/servlets/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name admin/index.php - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name examples/servlet/SnoopServlet - file type required.
08/13/2006 09:31:43 isFileNameValid: Invalid file name servlets-examples/servlet/index.php - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name examples/jsp/snp/snoop.jsp - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name :\boot.ini - file type not allowed.
08/13/2006 09:31:43 Error opening input file /opt/tivoli/tsm/client/ba/bin/examples/jsp/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name index.php - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name forums/index.php - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name cgi-bin/ChangeLog - file type required.
08/13/2006 09:31:43 Session Function thread, fatal error, signal 11
[root@lx76meldev]:[/opt/tivoli/tsm/client/ba/bin]:>



Steve _______________________________________________ Nessus mailing list Nessus@list.nessus.org http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>