I ran some scans a week ago against some boxes that have been scanned
before. Apparently the scan crashed the TSM (a system backup
application) client on over four boxes. A google search indicated an
RPC issue when using the NMAP port scanner. I did not use the NMAP port
scanner. I did enable all "general scan options" except silent
dependencies. Have there been any recent changes to any NASLs that may
have caused this? My sys admins (albeit irritated) are looking for a
root cause. Please see the log below and offer any comments you may have.
TSM Client was crashed on Sunday at 2:11PM. The last thing in each of
the tsm logs is this:
8/13/2006 09:31:43 isFileNameValid: Invalid file name
cgi-bin/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file
type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
jsp-examples/jsp2/el/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org
- file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name www.nessus.org -
file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
servlets-examples/servlet/pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org
- file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
pwcgi/smpwservicescgi.exe?TARGET=http://www.nessus.org - file type not
allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name cgi-bin/index.php
- file type not allowed.
08/13/2006 09:31:43 Error opening input file
/opt/tivoli/tsm/client/ba/bin/tomcat-docs/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name
jsp-examples/jsp2/el/index.php - file type not allowed.
08/13/2006 09:31:43 Error opening input file
/opt/tivoli/tsm/client/ba/bin/examples/servlets/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name admin/index.php -
file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
examples/servlet/SnoopServlet - file type required.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
servlets-examples/servlet/index.php - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name
examples/jsp/snp/snoop.jsp - file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name :\boot.ini - file
type not allowed.
08/13/2006 09:31:43 Error opening input file
/opt/tivoli/tsm/client/ba/bin/examples/jsp/index.html
08/13/2006 09:31:43 isFileNameValid: Invalid file name index.php - file
type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name forums/index.php
- file type not allowed.
08/13/2006 09:31:43 isFileNameValid: Invalid file name cgi-bin/ChangeLog
- file type required.
08/13/2006 09:31:43 Session Function thread, fatal error, signal 11
[EMAIL PROTECTED]:[/opt/tivoli/tsm/client/ba/bin]:>
Steve
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
