Plugin 11835 is subject to returning false positives when the network is busy, maybe 
also when the machine is busy. I'd suggest reducing the number of concurrent scans by 
10% and see if that helps.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: 12 May 2004 16:09
To: [EMAIL PROTECTED]
Subject: RPC False Positives?


I have a group of WindowsNT PCs that are patched for MS03-039, RPC, and
confirmed with Shavliks HFNetCheck.  They are using the same disk image as
a larger group.  But about 10 percent of them are consistently showing
vulnerable to Plugin 11835.  If these were false positives, would not the
same group of PCs not show up on every scan.  Or is this indicative that
the PCs are truly vulnerable for some reason.

Daniel J. Campbell
Sr. Technical Analyst
FXG AntiVirus and Patch Management
412-262-7301

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus


__________________________________________________________________________
This e-mail and the documents attached are confidential and intended 
solely for the addressee; it may also be privileged. If you receive this 
e-mail in error, please notify the sender immediately and destroy it.
As its integrity cannot be secured on the Internet, the Atos Origin group 
liability cannot be triggered for the message content. Although the 
sender endeavours to maintain a computer virus-free network, the sender 
does not warrant that this transmission is virus-free and will not be 
liable for any damages resulting from any virus transmitted.
__________________________________________________________________________
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to