RE: [NEW] bugbear_b.nasl

From: larosa, vjay (larosa_vjayat_private)
Date: Tue Jun 10 2003 - 11:10:10 PDT

  • Next message: Michael Boman: "Nessus doesn't detect F-Secure SSH correctly"

    Okay, we are getting a live copy of the virus in a little bit. The tech has
    already cleaned the system I was playing with. I will send you the output as
    soon as I can.
    
    vjl
    
    -----Original Message-----
    From: Renaud Deraison [mailto:deraisonat_private] 
    Sent: Tuesday, June 10, 2003 2:02 PM
    To: plugins-writersat_private
    Subject: Re: [NEW] bugbear_b.nasl
    
    On Tue, Jun 10, 2003 at 07:53:17PM +0200, Pavel Kankovsky wrote:
    > On Tue, 10 Jun 2003, Renaud Deraison wrote:
    > 
    > > According to the reference in Vincent's plugin, it's possible to launch
    > > a web server on an arbitrary port, so I added the plugin, which now
    > > looks for every web server, not only port 81.
    > 
    > Infected hosts I've seen so far had no HTTP port open.
    > Perhaps the web server has to be activated explicitly (via 1080?)?
    
    Yes, it has to be (it's what I meant by "it's possible to launch a web
    server 
    on an arbitrary port")
    
    
    				-- Renaud
    



    This archive was generated by hypermail 2b30 : Tue Jun 10 2003 - 11:13:55 PDT