On Thu, Sep 11, 2003 at 08:10:40AM -0400, John Kapp wrote:
> > Could you run the attached plugin in command-line mode and tell me
> > what it outputs ? (nasl -t target msrpc_dcom2.nasl).
>
> In the output below, test.nasl is the plugin that you sent in your e-mail.
> msrpc_dcom2.nasl is the production plugin.
>
> bluepill:/lib/nessus/plugins# nasl -t 10.129.53.61 test.nasl
> error1=5401048000
> error2=0240008000
> error3=0200000000
> error4=2000000003
> [19417] plug_set_key:send(0)['1 SMB/KB824146=1;
> '](0 out of 18): Socket operation on non-socket
There is no false positive here - the host is patched, and the plugin
"sees" that.
> bluepill:/lib/nessus/plugins# nasl -t 10.129.53.61 msrpc_dcom2.nasl
> [19418] plug_set_key:send(0)['1 SMB/KB824146=1;
> '](0 out of 18): Socket operation on non-socket
Same here.
>
> bluepill:/lib/nessus/plugins# nasl -t 10.129.53.61 msrpc_dcom.nasl
> Success
This is expected. This is why there is a set_kb_item() and
get_kb_item() relationship between the twos.
Please run these from nessusd, and you should be ok.
-- Renaud
