Could we design a method to determine the equivalent of a 404? Some servers
give the default page back, some no page, etc.

Could we make the plugin recognize that it's getting the same response for
each request and label that a 404 not found by default?

Matt

----- Original Message -----
From: "Renaud Deraison" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 26, 2002 4:47 PM
Subject: The 'no404' issue


>
>
> Today, when a web server does not reply with a 404 error code, many
> plugins issue false positives. So many in fact, that the report becomes
> unusable.
>
> Question: if Nessus detects that a web server does not respect the HTTP
> protocol, and therefore does not reply properly to the requests, should
> it disable all the CGI checks altogether and issue a big fat warning
> explaining why the web server was not tested instead ?
>
>
>
> -- Renaud
> -
> [EMAIL PROTECTED]: general discussions about Nessus.
> * To unsubscribe, send a mail to [EMAIL PROTECTED] with
> "unsubscribe nessus" in the body.
>

-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to