Re: lotus_esmtp_overflow.nasl - false positive

[Michel Arboi]

Renaud Deraison <[EMAIL PROTECTED]> writes:

>> But not at the end of the whole scan. check_ports runs after scanners,
>> as an ACT_GATHER_INFO plugin IIRC.

> No, it runs as ACT_END.

This was changed recently?
In this case, the message is slightly incorrect: the service may have
been crashed by any plugin, not necessarily an "information gathering"
plugin. 


*** check_ports.nasl	7 Apr 2003 10:38:22 -0000	1.15
--- check_ports.nasl	7 Jul 2003 11:40:35 -0000
***************
*** 54,60 ****
     if (! s)
      {
      report = string("This port was detected as being open by a port scanner but is now closed.\n",
! 	"This service might have been crashed by a port scanner or by some information gathering plugin\n");
  		
      security_note(port:port, data:report);
      }
--- 54,60 ----
     if (! s)
      {
      report = string("This port was detected as being open by a port scanner but is now closed.\n",
! 	"This service might have been crashed by a port scanner or by some plugin\n");
  		
      security_note(port:port, data:report);
      }