Re: [Plugins-writers] iplanet_data_snag.nasl

From: sullo@private
Date: Wed Dec 03 2003 - 07:04:25 PST

  • Next message: Michael Scheidell: "[Plugins-writers] islocalnets and severity"

    Quoting Paul Johnston <paul@private>:
    > That's right - installing the service pack doesn't change the banner.
    
    Below is a diff to reword it just a little to avoid confusion for people like me ;)
    
    -Sullo
    
    
    
    diff -c iplanet_data_snag.nasl iplanet_data_snag.nasl.old 
    *** iplanet_data_snag.nasl      Wed Dec  3 10:08:47 2003
    --- iplanet_data_snag.nasl.old  Wed Dec  3 10:00:17 2003
    ***************
    *** 14,26 ****
       script_name(english:name["english"]);
       
       desc["english"] = "
    ! The remote iPlanet webserver (according to it's version number) may be vulnerable
      to a bug wherein a remote user can retrieve sensitive data from memory 
      allocation pools, or cause a denial of service against the server.
      
    ! *** Since Nessus solely relied on the banner of this server,
    ! *** (and iPlanet 4 does not include the SP level in the banner),
    ! *** to issue this alert, this may be a false positive.
      
      Solution : Update to iPlanet 4.1 SP7 or newer
      
    --- 14,25 ----
       script_name(english:name["english"]);
       
       desc["english"] = "
    ! The remote iPlanet webserver (according to it's version number) is vulnerable
      to a bug wherein a remote user can retrieve sensitive data from memory 
      allocation pools, or cause a denial of service against the server.
      
    ! *** Since Nessus solely relied on the banner of this server
    ! *** to issue this alert, this may be a false positive
      
      Solution : Update to iPlanet 4.1 SP7 or newer
    
    _______________________________________________
    Plugins-writers mailing list
    Plugins-writers@private
    http://mail.nessus.org/mailman/listinfo/plugins-writers
    



    This archive was generated by hypermail 2b30 : Wed Dec 03 2003 - 07:05:44 PST