Thanks Michel,
    This works fine. Will this patch (or something similar) be added to 
the ruleset to avoid this false positive?

Dave.
 

Michel Arboi wrote:

>David Lambert <[EMAIL PROTECTED]> writes:
>
>>GHost '207.70.162.210' is not allowed to connect to this MySQL
>>serverConnection closed by foreign host.
>>
>
>According to a command in mysql_unpassworded.nasl, this situation
>should handled. However, the script is buggy.
>
>What about this quick & dirty patch?
>
>
>------------------------------------------------------------------------
>
>--- mysql_unpassworded.nasl    14 Jul 2002 21:15:57 -0000      1.10
>+++ mysql_unpassworded.nasl    15 Aug 2002 18:31:20 -0000
>@@ -55,6 +55,7 @@
> if(!soc)exit(0);
> r1 = recv(socket:soc, length:1024);
> if(strlen(r1) < 7)exit(0);
>+if (" is not allowed to connect to this MySQL" >< r1) exit(0);
> 
> str = raw_string(0x0A, 0x00, 0x00, 0x01, 0x85, 0x04,
>                0x00, 0x00, 0x80, 0x72, 0x6F, 0x6F, 0x74, 0x00);
>



-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to