I usually re-scan the box while capturing packets: a quick review of the packet capture, in my experience in such cases, often shows an odd 404 page or other invalid response to the script, which somehow interprets that response as a positive.
Often, you'll see the query that was sent to the server. Note the URL requested, and try it in your browser. If there's no page resembling the URL -- that's a sign the plugin didn't find what it thought it did. Eric van Straten <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 07/10/2007 12:52 PM To [email protected] cc Subject pcsync-https Hello, With a recent scan of a new server (Windows 2003) running Veritas NetBackup Operations Manager we are finding many results with either High or Medium severity. We have been beating our heads up against the issue looking for where all of these results are coming from and can not find what application may possibly be giving these results. For example Nessus is reporting that BID:11009 - PhotoADay is on the server is running on port 8443... yet we can not find it. For example Nessus is reporting that BID8288 - Gallery web-based photo album is running on port 8443 ...yet we can not find it ...and MANY others... I realize that I may not be providing as much information as needed to troubleshoot; but, I'm stumped enough that I'm not sure where to even start after this point. Nessus: v3.0.5 for linux Client: Nessus Console for Windows NT/2000/XP v1.4.5 We have contacted the vendor of the product (Veritas) and they are saying that they have not buried all of these products in their software which is running on the same ports as listed as vulnerable. I look forward to some guidance as we learn to use Nessus more and more! Thanks, eric Ready for the edge of your seat? Check out tonight's top picks on Yahoo! TV. _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
<<image/gif>>
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
