On Fri, 25 Nov 2005, [ISO-8859-1] J?rgen Mader wrote:

Hi all!

I'm a newbie and maybe my problem is easy to solve, but I can't.

[snip ...]


The logfile says:


[Fri Nov 25 11:12:05 2005][10924] user jm : attempted to gain more rights
by adding accept 172.21.1.1/32
[Fri Nov 25 11:12:05 2005][10924] user jm : attempted to gain more rights
by adding accept 172.21.1.254/32

[snip ...]

But I can ping 172.21.1.1 an make a telnet-connection. 172.2.1.1 is not
dead!!!

Can anybody help me?

What rules do you have defined in the auth directory for user jm?
What rules did you specify in the nessus client?

Note that rules specified in the client can only be used to further
restrict rules from the rules file. If a user tries to gain more rights
via the client then nessusd writes a warning to the log. For example:
"user jm : attempted to gain more rights by adding accept 172.21.1.1/32"

It looks like you tried to audit a machine that you did not have
permission to.

--
  - Josh
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to