Hello I wrote (unfortunately) directly to Felix (sorry for that):
If i open the report there is a light bulp and if i click on it there is the following information: ------- Reported by NVT "SSH Authorization" (1.3.6.1.4.1.25623.1.0.90022): It was not possible to login using the SSH credentials supplied. Hence local security checks is not enabled. ------- But, i dont want to check for SSH. And i couldnt find any hint where i implemented such a check. -> The plugins are all disabled (double checked now). 0 enabled. Target = 1 target, nothing special On general tab there is: Optimize test and Safe checks on. I scan for port range: 445,8081,9593, 9595 I tried portscanning with different portscanners (nmap, openvas etcpp). I also have a task for conficker only. But everytime it want to check for SSH and i can see this in the report. Its everytime the same result. regards Joerg Ive checked with and without selected silent - no difference. -------- Original-Nachricht -------- > Datum: Mon, 4 May 2009 16:45:58 +0530 > Von: "Chandrashekhar B" <[email protected]> > An: "\'Felix Wolfsteller\'" <[email protected]>, > [email protected] > CC: "\'Joerg Eckert\'" <[email protected]> > Betreff: RE: [Openvas-discuss] ssh-check is always on > Joerg, > > By default, OpenVAS identifies all open ports and the corresponding > services > attached (plugin find_service.nes). In case you want these messages not to > appear, select "Silent" in "Plugins" section. > > Thanks, > Chandra. > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Felix > Wolfsteller > Sent: Monday, May 04, 2009 4:12 PM > To: [email protected] > Cc: Joerg Eckert > Subject: Re: [Openvas-discuss] ssh-check is always on > > Hi Joerg > Might have to do with the selected port scanner (in the Options/General > tab). > Eventually it ignores the selection you provided. > Is there a message displayed if you select the 'ssh (22/tcp) ' item in the > report? > > -- felix > > On Monday 04 May 2009 11:12:06 Joerg Eckert wrote: > > Hello to all of you > > > > I have installed the newest openvas version and use the new linux > client. > > If i want to check a target i always receive in the report included a > ssh > > check. I dont want this, but i dont know where i could switch this off. > > > > Its not important if i only scan for explicit ports (all other stuff > > switched off (general, plugins, prefs) or if i do for example a > conficker > > scan. > > > > I receive a report but always with additional ssh (22/tcp) included > line. > > > > Please can you help me? > > > > If you need more information please tell me what you need. > > > > regards > > > > Joerg > > > > ps.: sorry for my english (my german is better :-) > > > -- > Felix Wolfsteller | ++49-541-335 08 3451 | http://www.intevation.de/ > PGP Key: 39DE0100 > Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B > 18998 > Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner > _______________________________________________ > Openvas-discuss mailing list > [email protected] > http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss für nur 17,95 Euro/mtl.!* http://dslspecial.gmx.de/freedsl-surfflat/?ac=OM.AD.PD003K11308T4569a _______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
