msrpc_dcom2.nasl false positive anyone ?
Renaud Deraison
deraison at nessus.org
Fri Sep 19 08:45:38 EDT 2003
On Fri, Sep 19, 2003 at 01:24:49PM +0100, Hemsley, Trevor wrote:
> I am still seeing some weirdness that doesn't make sense. I have machines that are telling me that they're vulnerable to MS03-026 but not to MS03-039 and I do not think that this is possible. I'm running msrpc_dcom2.nasl v1.22 and msrpc_dcom.nasl v1.10.
Err - this is expected. If you run msrpc_dcom.nasl in command-line mode,
it will produce false positives against systems patched with MS03-039.
The solution is to run the scripts from within nessusd, which handles
the plugin cooperation nicely and will avoid such false positives.
More information about the Nessus
mailing list