We have been using Nessus 3/XP on a monthly basis to scan for
vulnerabilities after patch releases. This month for some reason my
report shows the following hole. This does not make sense since we have
not done anything to the server. Can someone please explain what this
means? It also strikes me odd that this hole was reported back in 2005
and only picked up now.
Machine Scanned: HP ML310 Windows 2003 Server with Radius enabled for
Cisco equipment.
Plugins: All plugins (even dangerous) - Latest downloaded.
Hole:
General/tcp
It was possible to crash the remote host by sending a
specially crafted IP packet with a null length for IP option #0xE4.
CVE: CVE-2005-2577
BID: 7175, 14536
Plugin ID: 11475
My searches shows a Wyse Winterm client to be the culprit. I don't think
so because this is a standard 2003 server build without any 3rd party
RAS software. Any ideas
Regards
Johan Badenhorst
Atco Electric
The information transmitted is intended only for the addressee and may contain
confidential, proprietary and/or privileged material. Any unauthorized review,
distribution or other use of or the taking of any action in reliance upon this
information is prohibited. If you receive this in error, please contact the
sender and delete or destroy this message and any copies._______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
