HI
I have installed Solaris 10 in virtual PC and not updated with any security
patch.
I have updated Nessus with latest plug-ins
I have scanned using Nessus for all Solaris 10 (i386) patches. But
Nessus didn't show any vulnerability in that PC.
Sun has released with few updates in month of November.
But I don't see those vulnerabilities in my scans report.
So please suggest on this.
Regards,
Sri
-----Original Message-----
From: nessus-bounces@list.nessus.org [mailto:nessus-bounces@list.nessus.org] On
Behalf Of nessus-request@list.nessus.org
Sent: Monday, December 17, 2007 10:30 PM
To: nessus@list.nessus.org
Subject: Nessus Digest, Vol 50, Issue 16
Send Nessus mailing list submissions to
nessus@list.nessus.org
To subscribe or unsubscribe via the World Wide Web, visit
http://mail.nessus.org/mailman/listinfo/nessus
or, via email, send a message with subject or body 'help' to
nessus-request@list.nessus.org
You can reach the person managing the list at
nessus-owner@list.nessus.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Nessus digest..."
Today's Topics:
1. Re: Using Nessus from the command line
(saksiri.kridakara@yahoo.com)
2. Re: New User (Bob Babcock)
3. cannot connect to Nessus server (MS Windows Version) ( ??? )
4. Cannot connect to Nessus server (MS Windows Version) (ÎäÍ¢¶°)
5. Re: Using Nessus from the command line (Alex Cruz Farmer)
6. Recall: Nessus v3.0 configuration (Tsirgogiannis, Konstantinos)
7. Nessus exported .nessusrc issue (Nikto) (Andrew W Barkley)
----------------------------------------------------------------------
Message: 1
Date: Sun, 16 Dec 2007 11:12:40 -0800
From: "saksiri.kridakara@yahoo.com" <saksiri.kridakara@yahoo.com>
Subject: Re: Using Nessus from the command line
To: "George A. Theall" <theall@tenablesecurity.com>
Cc: nessus@list.nessus.org
Message-ID:
<42b6d3ba0712161112n468a291cu1d651e20299121fc@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Thanks George. I'm a little unclear on this - are you saying I should
install a different version or are you saying that I can configure my
current installation to run without x-windows?
Basically, I'd like to set it up to run on a regular schedule and send/save
the results to an email or file. This shouldn't be too difficult. right?
On 12/15/07, George A. Theall <theall@tenablesecurity.com> wrote:
On 12/15/07 16:42, saksiri.kridakara@yahoo.com wrote:
Can I get some advice on how to configure this to run without X-windows?
There is a commandline client ("nessus") included with the *nix-based
Nessus product but setting it up without a GUI-client is not something I
recommend, especially if you're not intimately familiar with Nessus
itself.
George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/nessus/attachments/20071216/5202380d/attachment-0001.html
------------------------------
Message: 2
Date: Sun, 16 Dec 2007 16:41:20 -0500 (EST)
From: Bob Babcock <rbabcock@cfa.harvard.edu>
Subject: Re: New User
To: wchafchak@cogeco.ca
Cc: nessus@list.nessus.org
Message-ID: <200712162141.lBGLfKmO020165@cfa0.cfa.harvard.edu>
Hi all: Thanks Bob I am now able to run the NessusClient from the folder
by clicking the icon; However when I type the command "
# /opt/nessus/etc/nessus/nessusd.conf. I am getting the message "access
denied, I am just curious if his is something I should worry about.
nessusd.conf is a text file of settings, not executable, probably owned by
root. So if you needed to edit it, you need to do it as root.
------------------------------
Message: 3
Date: Mon, 17 Dec 2007 10:30:08 +0000
From: " ??? " <tech@servicesplus.cn>
Subject: cannot connect to Nessus server (MS Windows Version)
To: nessus@list.nessus.org
Message-ID: <30034261.1197887409162.JavaMail.todaymail@mx606>
Content-Type: text/plain; charset="us-ascii"
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/nessus/attachments/20071217/9ea150be/attachment-0001.html
------------------------------
Message: 4
Date: Mon, 17 Dec 2007 18:46:34 +0800
From: "ÎäÍ¢¶°" <tech@servicesplus.cn>
Subject: Cannot connect to Nessus server (MS Windows Version)
To: nessus@list.nessus.org
Message-ID: <27120928.1197888395760.JavaMail.todaymail@mx606>
Content-Type: text/plain; charset="us-ascii"
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/nessus/attachments/20071217/9466538d/attachment-0001.html
------------------------------
Message: 5
Date: Mon, 17 Dec 2007 13:07:40 +0000
From: Alex Cruz Farmer <alex.cf+nessus@netsumo.com>
Subject: Re: Using Nessus from the command line
To: "saksiri.kridakara@yahoo.com" <saksiri.kridakara@yahoo.com>
Cc: nessus@list.nessus.org
Message-ID: <4766749C.2080901@netsumo.com>
Content-Type: text/plain; charset=ISO-8859-1
saksiri.kridakara@yahoo.com wrote:
Thanks George. I'm a little unclear on this - are you saying I should
install a different version or are you saying that I can configure my
current installation to run without x-windows?
Basically, I'd like to set it up to run on a regular schedule and
send/save the results to an email or file. This shouldn't be too
difficult. right?
Hi guys,
/usr/local/bin/nessus -T text -x -q host port user PassWord
/root/nessus/targets /root/nessus/results.bla
I use that command when running running a scan. The -T text will mean it will
not load up X/GUI.
Hope that helps!
Kind regards,
Alex.
This e-mail is subject to: http://www.netsumo.com/email.sumo
NetSumo Limited - Registered Company in England and Wales
13 Hanover Crescent, Brighton, BN2 9SB, Great Britain
Company Number: 2666084 - VAT Number: GB 587 7952 63
------------------------------
Message: 6
Date: Mon, 17 Dec 2007 15:52:48 +0200
From: "Tsirgogiannis, Konstantinos"
<konstantinos.tsirgogiannis@nsn.com>
Subject: Recall: Nessus v3.0 configuration
To: <nessus@list.nessus.org>
Message-ID:
<C768FA766E5B124EA05ECF5354C54CC807250E71@atha112a.gr001.siemens.net>
Content-Type: text/plain; charset="us-ascii"
Tsirgogiannis, Konstantinos would like to recall the message, "Nessus v3.0
configuration ".
------------------------------
Message: 7
Date: Mon, 17 Dec 2007 14:21:23 +0000
From: Andrew W Barkley <abarkle3@csc.com>
Subject: Nessus exported .nessusrc issue (Nikto)
To: nessus@list.nessus.org
Message-ID:
<OFD3ED2970.3C0A5B9E-ON802573B4.00491974-802573B4.004EE1F2@csc.com>
Content-Type: text/plain; charset="us-ascii"
Hi ...
I initially configure my preferences from the GUI (Nessus Client 3.0.0)
and execute a scan directly, which also calls & executes Nikto (2.01)
successfully on the Nessus server. However, when I export from the GUI
(.nessusrc) to use (via command line) on the Nessus server
(/opt/nessus/bin/nessus -q -c .nessusrc) Nikto is called, however, does
nor execute irrespective of being in the path and enabled in '.nessusrc'.
Logs show Nikto being called, however, does nor execute. I can run Nikto
manually successfuly. Your advice is much appreciated.
.NESSUSRC:
safe_checks = no
auto_enable_dependencies = yes
Nikto (NASL wrapper)[checkbox]:Enable Nikto = yes
NESSUS SERVER:
This is Nessus 3.0.6. [build 283] for Linux 2.4.21-4.ELsmp
compiled with gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-20)
Current setup :
nasl: 3.0.6
libnessus: 3.0.6
SSL support: enabled
SSL is used for client / server communication
Running as euid: 0
Many thanx
Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/nessus/attachments/20071217/caa903d0/attachment-0001.html
------------------------------
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
End of Nessus Digest, Vol 50, Issue 16
**************************************
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
