On Dec 30, 2008, at 3:05 PM, YARICK wrote: > I think plug-in ftp_servu_overflow.nasl is not > working correctly ( script_id 12037 ) > > I have can a scan against a server running Serv-U version 2.5 and it > did not show up in the report. > I am able to ftp to the server from the nessus scanner: > > 220-Serv-U FTP-Server v2.5n for WinSock ready... > 220-Welcome to WWW-ESD's FTP Server. > 220-The privileges for anonymous FTP users are: > > and the version seems to be vulnerable.
Thanks for the heads-up, Yarick. The plugin expects banners to have the string "Serv-U FTP Server". I'll update the plugin shortly to handle the banner you report. George -- the...@tenablesecurity.com _______________________________________________ Nessus mailing list Nessus@list.nessus.org http://mail.nessus.org/mailman/listinfo/nessus
