Re: pcsync-https

On 07/10/07 15:52, Eric van Straten wrote:

> With a recent scan of a new server (Windows 2003) running Veritas 
> NetBackup Operations Manager we are finding many results with either 
> High or Medium severity.  We have been beating our heads up against the 
> issue looking for where all of these results are coming from and can not 
> find what application may possibly be giving these results.
>
> For example Nessus is reporting that BID:11009 - PhotoADay  is on the 
> server is running on port 8443... yet we can not find it.
> For example Nessus is reporting that BID8288 - Gallery web-based photo 
> album is running on port 8443 ...yet we can not find it
> ...and MANY others...

Are most or all of the plugins complaining about cross-site scripting 
issues? The two you list above do check for that, which makes me wonder 
if the Veritas software returns request strings, say, as part of an 
error page. Could you try issuing requests such as:

   /cgi-bin/search.php?searchstring=<script>foo</script>
   /scripts/search.php?searchstring=<script>foo</script>

on the affected host / port and checking if you see 
"<script>foo</script>" in the output?

George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus