Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Scanning for Winamp

from [George A. Theall] Network Security [Permanent Link]
Subject: Re: Scanning for Winamp
Date: Fri, 31 Aug 2007 09:42:36 -0400 
On 08/30/07 11:59, Bob Babcock wrote:


I've been unable to get vulnerable versions of Winamp to show up in scans
with either a default scan or picking just Winamp and Nullsoft plugins.
I'm scanning with a Win/2K machine, Nessus 3.0.6.1 build W321.  Plugins
updated yesterday.  Target machines are mostly Win/XP, some Win/2K.


Hmm, I have the same problem with the Windows server (but not the unix 
ones). We'll look into it.


Alos, it looks like the latest version test is for Winamp<5.34, but 5.34 has
a reported vulnerability and 5.35 is the latest version:
  http://secunia.com/advisories/25089/


We didn't do a plugin for that because when we first analyzed it, 
Nullsoft's patch was a patch we couldn't detect.

I've just written a plugin to check for versions < 5.35, but you'll need 
to set report paranoia to paranoid (under the General settings in the 
Windows client) for it to run. Look for it to appear in the plugin feed 
shortly.

George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: Windows Commandline, Kenneth Kline
Next by Date:  "blank administrator password security hole" with Airport Extreme Base Station, Doty, Timothy T.
Previous by Thread:  Scanning for Winamp, Bob Babcock
Next by Thread:  "blank administrator password security hole" with Airport Extreme Base Station, Doty, Timothy T.
Indexes:  [Date] [Thread] [Top] [All Lists]