msrpc_dcom2.nasl false positive anyone ?

Beirne Konarski beirne at neo.rr.com
Thu Sep 18 14:05:37 EDT 2003


On Thursday 18 September 2003 10:04 am, Renaud Deraison wrote:
> Is anyone still experiencing false positives with msrpc_dcom2.nasl rev1.20
> or newer ?

I figured out why I was getting my false positive with 1.21 and Solaris.  A 
while back I edited /etc/inetd.conf to have telnet listen on port 135.  This 
was a cheap way to get a listener on that port for some of my testing.  This 
ends up looking like a vulnerable system to msrpc_dcom2.nasl.  I'm not sure 
if this counts as a true false positive after all but figured I'd at least 
clarify the issue.

Thanks,
Beirne

-- 
Beirne "Bern" Konarski  
beirne at neo.rr.com	"Untouched by Scandal"




More information about the Nessus mailing list