I usually re-scan the box while capturing packets: a quick review of the
packet capture, in my experience in such cases, often shows an odd 404
page or other invalid response to the script, which somehow interprets
that response as a positive.
Often, you'll see the query that was sent to the server. Note the URL
requested, and try it in your browser. If there's no page resembling the
URL -- that's a sign the plugin didn't find what it thought it did.
Eric van Straten <icvanstra@yahoo.com>
Sent by: nessus-bounces@list.nessus.org
07/10/2007 12:52 PM
To
Nessus@list.nessus.org
cc
Subject
pcsync-https
Hello,
With a recent scan of a new server (Windows 2003) running Veritas
NetBackup Operations Manager we are finding many results with either High
or Medium severity. We have been beating our heads up against the issue
looking for where all of these results are coming from and can not find
what application may possibly be giving these results.
For example Nessus is reporting that BID:11009 - PhotoADay is on the
server is running on port 8443... yet we can not find it.
For example Nessus is reporting that BID8288 - Gallery web-based photo
album is running on port 8443 ...yet we can not find it
...and MANY others...
I realize that I may not be providing as much information as needed to
troubleshoot; but, I'm stumped enough that I'm not sure where to even
start after this point.
Nessus: v3.0.5 for linux
Client: Nessus Console for Windows NT/2000/XP v1.4.5
We have contacted the vendor of the product (Veritas) and they are saying
that they have not buried all of these products in their software which is
running on the same ports as listed as vulnerable.
I look forward to some guidance as we learn to use Nessus more and more!
Thanks,
eric
Ready for the edge of your seat? Check out tonight's top picks on Yahoo!
TV. _______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
