I changed the scan to only run the SMB share files enumerated plug in.
During the scan I get a popup on the target with the following information
"wmiprvse.exe - Application Error The exception unknown software exception
(0xc0000409) occurred in the
application at location 0x7166710b"
wmiprvse.exe is a part of the Microsoft Windows Operating System and deals with
WMI operations through the WinMgmt.exe process.
snappet for the plugin
script_dependencies("smb_accessible_shares.nasl");
if ( NASL_LEVEL >= 3000 ) script_dependencies("wmi_enum_files.nbin");
script_require_keys("SMB/shares");
script_require_ports(139, 445);
exit(0);
}
If the plugin is going to use SMB to enumerate files, why does it appear to
load wmi_enum_files.nbin? I'm still trying to figure out if wmi_enum_files.nbin
is causing the exception in wimiprvse or if I have a problem with my
workstations.
Take Care --John
-------------- Original message ----------------------
From: jfvanmeter@comcast.net
The below entries are from the scan.log file. I have several questions
1. I only selected SMB share files enumerated and SMB share files enumerated
via WMI to run When I looked at the dependences in the code for SMB shared
FIle
enumerated I could not find any references to "realplayer".
2. When I searched the plugins\script directory I was able to locate all of
the
.nasl files that the log shows as not being found.
[Fri Jul 27 06:55:50 2007][1988] user localuser : testing VAPRINCEGET848
(10.10.10.158) [1988]
[Fri Jul 27 06:55:50 2007][1988] realplayer_6011.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_6012.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_6_0_12_1483.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_6_0_12_1578.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_multiple_vulns.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_undisclosed_vulns.nasl depends on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_png_heap_corruption.nasl depends
on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_skin_remote_overflow.nasl depends
on
realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_file_handler_overflow.nasl
depends
on realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] smb_accessible_shares_office_files.nasl
depends
on smb_enum_files.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] realplayer_realtext_parsing_overflow.nasl
depends on realplayer_detect.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988]
smb_accessible_shares_copyrighted_content.nasl
depends on smb_enum_files.nasl which could not be found
[Fri Jul 27 06:55:50 2007][1988] Scan 10.10.10.158 using 13 plugins
[Fri Jul 27 06:57:13 2007][1988] Finished testing 10.10.10.158. Time : 87.145
secs, 13 plugins launched
[Fri Jul 27 06:57:13 2007][1988] 1 hosts scanned
Take Care --John
-------------- Original message ----------------------
From: jfvanmeter@comcast.net
Hello everyone, I ran a scan using this two plugins SMB share files
enumerated
and SMB share files enumerated via WMI to get a feel for how file
enumeration
works.
I ran multiple administrative scans with the targets being WIn2k3 and XP,
all
the reports came up empty.
These plugin enumerates files listed on remote shares. The extensions that
it
checks for are "mp3"
"doc" "txt" "pdf" and so on. and there are files with those extensions on
the
targets, so I don't understand why I'm getting a empty report, i thought I
would
have seen a list of any file with that extension in my report.
Take Care and Have Fun --John
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
