Greetings,

That guy's Nessus scan for georgewbush.com has obviously fallen into a honeypot/IDS tarpit. The Nessus scan returned results from well-known (and OLD) IIS, OmniHTTPd, and Cobalt Linux vulnerabilities, as well as obvious CGI vulns. Disregarding the fact that IIS doesn't run on Cobalt Web Appliances (Linux), there's no way that any administrator would allow those out-of-date, unpatched, scripts to be run on a modern machine.

Nessus is indeed a pretty cool tool, but only if you know how to interpret its output.

Never place too much faith in anything you see, read or hear that you cannot personally reproduce.


-- Joseph Lundgren System Administrator [EMAIL PROTECTED] Nu-World Communications http://www.nu-world.com _______________________________________________ EUGLUG mailing list [EMAIL PROTECTED] http://www.euglug.org/mailman/listinfo/euglug

Reply via email to