RE: ISS Internet Scanner question

[Evans, Richard T., LIWA]

Title: Message

Paul,

 

   .0 and .255 are typically BROADCAST address (for a Class-C subnet)   .0 (all zeroes) being the old style UNIX address, and .255 (all ones) the newer. 

 

Hope this helps..

 

 

Rick

Richard T. Evans   SSCP, SNSCP
   Chief, Computer Defense Assistance Branch

 Terrorists beware--    Japanese Pearl Harbor Commander: "I fear all we have done is awaken a sleeping giant.....  and filled him with a terrible resolve"

Army Computer Emergency Response Team
   US Army Intelligence and Security Command
   Land Information Warfare Activity
   Fort Belvoir, Virginia 22060-5246
     Com: (703) 706-2057     DSN: 235-2057
     Unclassified Fax - (703) 806-1003
     Classified  Fax -   (703) 806-1165 or DSN 656-1004
     NIPRNET    [EMAIL PROTECTED]
     "Real hackers don't die, their TTL expires."
      "Black holes are where God divided by zero."
      "Security is an illusion.  It's really just called 'risk management'."

-----Original Message-----
From: Levinson, Paul [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 3:20 PM
To: '[EMAIL PROTECTED]'
Subject: ISS Internet Scanner question

Well Actually two....
I was wondering if anyone ran into this before. It seems to me when I put in
a range of IP addresses for the scanner to check it always omits two valid
addresses: xx.xx.xx.0 and xx.xx.xx.255 even though they are in the range
that I assign to the scan and are valid nodes on the network.
 
Also, It seems to me that SNMPv1 Check is being detected on Solaris 8
machines. As far as I understand this was a Solaris 7 and below
vulnerability and should of been fixed with release of Solaris 8? Is it
detecting something else?
 
Thank you very much!