Nessus Plugin ID 11188

Michel Arboi mikhail at nessus.org
Fri Aug 27 11:25:34 EDT 2004


On Fri Aug 27 2004 at 17:16, Christopher J Bidwell wrote:

> The NOBODY users exists to own nothing and to be able to do nothing
> dangerous.

1. nobody should not own anything. But who knows?
2. The fact that it owns nothing does not prove that it cannot be
dangerous. There are many local holes. Much more than network
holes. Common wisdom says that if an intruder got an unprivileged
access, you should consider that he managed to get root afterwards and
have to reinstall your machine.

> I think this test should be CORRECTED in Nessus and the vulnerability
> ignored.

Forbidden remote access shoud definitely NOT be ignored.



More information about the Nessus mailing list