After the XP SP2 false positive check was added to msrpc_dcom2.nasl, it will now no longer detect the vulnerability on vulnerable NT 4.0 machines.
On NT 4.0, when it gets to the check with the comment " HP-UX dced or WinXP SP2" the following are set error1 = 00000000 error2 = 00000000 error3 = 02000000 error4 = 0300011c error5 = NULL (set explicitly just before it gets to this line so I don't know what purpose it serves). Before error5 was set to NULL, it was set to 54010480 on the NT 4.0 check. I don't have a box with SP2 on it to check to see if there are ways to code around this. Trevor Hemsley, Security Specialist, Atos Origin Ltd, Whyteleafe, +44-(0)1883-628139 __________________________________________________________________________ This e-mail and the documents attached are confidential and intended solely for the addressee; it may also be privileged. If you receive this e-mail in error, please notify the sender immediately and destroy it. As its integrity cannot be secured on the Internet, the Atos Origin group liability cannot be triggered for the message content. Although the sender endeavours to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted. __________________________________________________________________________ _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
