The problem with this test is that it alerts if it finds anything listening on port 7100 if it is run in safe checks mode. The vulnerability only exists in some (really old) versions of the Sun font server but this test alerts on any font server including ones running on Windows boxes etc. I did start trying to look at this to see if there was any way to get more info out of the remote server about what it was but had trouble finding any doc on its workings and ended up giving up :-(
-----Original Message----- From: Michel Arboi [mailto:[EMAIL PROTECTED] Sent: 27 August 2004 16:26 To: Christopher J Bidwell Cc: [EMAIL PROTECTED] Subject: Re: Nessus Plugin ID 11188 On Fri Aug 27 2004 at 17:16, Christopher J Bidwell wrote: > The NOBODY users exists to own nothing and to be able to do nothing > dangerous. 1. nobody should not own anything. But who knows? 2. The fact that it owns nothing does not prove that it cannot be dangerous. There are many local holes. Much more than network holes. Common wisdom says that if an intruder got an unprivileged access, you should consider that he managed to get root afterwards and have to reinstall your machine. > I think this test should be CORRECTED in Nessus and the vulnerability > ignored. Forbidden remote access shoud definitely NOT be ignored. _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus __________________________________________________________________________ This e-mail and the documents attached are confidential and intended solely for the addressee; it may also be privileged. If you receive this e-mail in error, please notify the sender immediately and destroy it. As its integrity cannot be secured on the Internet, the Atos Origin group liability cannot be triggered for the message content. Although the sender endeavours to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted. __________________________________________________________________________ _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
