On Fri, 25 Nov 2005, Grissom, Amanda (NIH/NEI) [C] wrote:
> I have a Solaris 8 server running Oracle 9i that has 6 ip addresses.
> When I run the NESSUS scanner against the server 1 (one) IP at a time
> the listenr for the DB stays up. When I run the NESSUS scanner against
> the server multiple IP's at a time the listern drops out.
>
> Due to this we are excluding this machine from our targets list.
>
> Can anyone explain what could be causing this or a work around that we
> could put into place so that we could continue you to scan this machine?
Blame Oracle for giving you crappy software.
I think a lot of people are way beyond being nice to Oracle. Some people
have been sitting on security advisories for over 600 days and they have
yet to see a fix.
Now how much is that telling you about Oracle and security?
You can try to test just one address at the same time but if your network
is a bit large it takes ages to test it.
I would just excluded the server and mark it in red as being volatile and
in need of a fix. If nessus can kill it then so can the next worm
outbreak.
Hugo.
--
I hate duplicates. Just reply to the relevant mailinglist.
[EMAIL PROTECTED] http://hvdkooij.xs4all.nl/
Don't meddle in the affairs of magicians,
for they are subtle and quick to anger.
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus