Re: [EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread David
On 9/19/2007 5:25 PM, Gregor Schneider wrote: > the only nonsense is to run dos / win-modules on a *nix-box & then > worry about the messages... > > cheers > > gregor Since Nessus clearly tests for the OS on the box it is probing I just assumed it knew what it was doing. Bad Novice! Never assume

Re: [EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread Gregor Schneider
the only nonsense is to run dos / win-modules on a *nix-box & then worry about the messages... cheers gregor -- what's puzzlin' you, is the nature of my game gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 --

Re: [EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread Nick Kew
On Wed, 19 Sep 2007 17:05:13 +0200 "Gregor Schneider" <[EMAIL PROTECTED]> wrote: > Within Nessus, you have the options to choose the tests you want to > run. It's a bit of work, however, configuring (choosing those tests > dealing with *your* os / webserver / database etc.) and then saving > them

Re: [EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread Gregor Schneider
Within Nessus, you have the options to choose the tests you want to run. It's a bit of work, however, configuring (choosing those tests dealing with *your* os / webserver / database etc.) and then saving them for future usage is worth while and avoids such garbage-messages. Coming to your specific

Re: [EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread Joshua Slive
On 9/19/07, David <[EMAIL PROTECTED]> wrote: > I have a Apache 2.2.3 running on an Ubuntu Feisty server (kernel > 2.6.20). I just ran a Nessus 3 scan on the system that reports a "hole": > > "It was possible to freeze or reboot Windows by reading a MS/DOS device > through HTTP, using a file name l

[EMAIL PROTECTED] Nessus hole report: MS/DOS device names

2007-09-19 Thread David
I have a Apache 2.2.3 running on an Ubuntu Feisty server (kernel 2.6.20). I just ran a Nessus 3 scan on the system that reports a "hole": "It was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm or AUX." "Solution: upgrade your