Re: False positives due to Dual Behavior of ports

From: Noam Rathaus (noamrat_private)
Date: Mon May 05 2003 - 11:52:49 PDT

  • Next message: Renaud Deraison: "Re: False positives due to Dual Behavior of ports" 

    Hi,

Well I have been able to gather some more information, disabling the non-SSL or
enabling just the SSL, will cause the problem to go away. So it does seem to be
related to both services running on the same port, with a different transport
handling them.

Can you suggest a better method to zero-in on the issue?

Thanks
Noam Rathaus
CTO
Beyond Security Ltd
http://www.SecurITeam.com
http://www.BeyondSecurity.com
----- Original Message -----
From: "Renaud Deraison" <deraisonat_private>
To: <plugins-writersat_private>
Sent: Monday, May 05, 2003 7:44 PM
Subject: Re: False positives due to Dual Behavior of ports


> On Mon, May 05, 2003 at 01:38:46PM -0400, Renaud Deraison wrote:
> > > And connecting with SSL, of course returns a different response.
> > >
> > > The problem is caused by the no404.nasl, as it appears to confuse the
results of
> > > the same port X for the two different supports (with SSL, and without
SSL).
> >
> > It does mix up the transport (SSL or non-SSL) for the same port, so I
>
> Ack. I meant : It does *NOT* mix up the transport for the same port.
>
>

    This archive was generated by hypermail 2b30 : Mon May 05 2003 - 10:53:49 PDT