On 07/10/07 15:52, Eric van Straten wrote: > With a recent scan of a new server (Windows 2003) running Veritas > NetBackup Operations Manager we are finding many results with either > High or Medium severity. We have been beating our heads up against the > issue looking for where all of these results are coming from and can not > find what application may possibly be giving these results. > > For example Nessus is reporting that BID:11009 - PhotoADay is on the > server is running on port 8443... yet we can not find it. > For example Nessus is reporting that BID8288 - Gallery web-based photo > album is running on port 8443 ...yet we can not find it > ...and MANY others...
Are most or all of the plugins complaining about cross-site scripting issues? The two you list above do check for that, which makes me wonder if the Veritas software returns request strings, say, as part of an error page. Could you try issuing requests such as: /cgi-bin/search.php?searchstring=<script>foo</script> /scripts/search.php?searchstring=<script>foo</script> on the affected host / port and checking if you see "<script>foo</script>" in the output? George -- [EMAIL PROTECTED] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
