Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Plugin 11372 |
|---|---|
| Date: | Thu, 7 Dec 2006 14:17:42 -0000 |
Plugin 11372 reports this about a Mac OS X ftp sever: "Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command which uses glob to generate long strings. *** Nessus reports this vulnerability using only *** information that was gathered. Use caution *** when testing without safe checks enabled." (Nessus identifies the target as Mac OS X 10.4.7, the ftp banner says Mac OS X Server 10.5.5, however, the plugin refers to HPUX 11). Do HPUX and Mac OS X ftp servers have the same possible vulnerability or should this plugin alert be ignored for Mac OS X? -- Carl Nelson Distributed Systems Support Section, Computer Centre, University of Leicester, Leicester, LE1 7RH, U.K. Tel: +44 (0)116 252 2060, Fax: +44 (0)116 252 5027 _______________________________________________ Nessus mailing list Nessus@list.nessus.org http://mail.nessus.org/mailman/listinfo/nessus
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Plugin ID 11041 and 11042, Michel Arboi |
|---|---|
| Next by Date: | code d'activation nessus, aicha Founi |
| Previous by Thread: | Nessus v2.2.9 binaries for Windows, Joseph Schmoley |
| Next by Thread: | Re: Plugin 11372, Nicolas Pouvesle |
| Indexes: | [Date] [Thread] [Top] [All Lists] |