False plugin id 11475

We have been using Nessus 3/XP on a monthly basis to scan for
vulnerabilities after patch releases. This month for some reason my
report shows the following hole. This does not make sense since we have
not done anything to the server. Can someone please explain what this
means? It also strikes me odd that this hole was reported back in 2005
and only picked up now.

 

Machine Scanned: HP ML310 Windows 2003 Server with Radius enabled for
Cisco equipment.

Plugins: All plugins (even dangerous) - Latest downloaded.

Hole:

General/tcp

            It was possible to crash the remote host by sending a
specially crafted IP packet with a null length for IP option #0xE4.

            CVE: CVE-2005-2577

            BID: 7175, 14536

            Plugin ID: 11475

 

My searches shows a Wyse Winterm client to be the culprit. I don't think
so because this is a standard 2003 server build without any 3rd party
RAS software. Any ideas

 

Regards

Johan Badenhorst

Atco Electric

 



The information transmitted is intended only for the addressee and may contain 
confidential, proprietary and/or privileged material. Any unauthorized review, 
distribution or other use of or the taking of any action in reliance upon this 
information is prohibited. If you receive this in error, please contact the 
sender and delete or destroy this message and any copies.

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus