Nessus
[Top] [All Lists]

Re: Plugin ID 11041 and 11042

To: "ablesambaker" <ablesambaker@comcast.net>
Subject: Re: Plugin ID 11041 and 11042
From: Michel Arboi <mikhail@nessus.org>
Date: Thu, 07 Dec 2006 01:06:06 +0100
Cc: nessus@list.nessus.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
In-reply-to: <01f101c71982$1974db00$0901a8c0@D6VZV881> (ablesambaker@comcast.net's message of "Wed, 6 Dec 2006 17:01:35 -0500")
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <01f101c71982$1974db00$0901a8c0@D6VZV881>
Sender: nessus-bounces@list.nessus.org
User-agent: Gnus/5.1007 (Gnus v5.10.7) XEmacs/21.4.19 (linux)
On Wed Dec 06 2006 at 23:01, ablesambaker wrote:

> I have a device (windows 2000) that when scanned always comes up with the
> Apache [PID 11041 or 11042]vulnerability yet the workstation does not have
> Apache installed. 

That's odd, because script 11041 (apache_Tomcat_DOS_Device_XSS.nasl)
checks the banner.
[Script 11042 only filters false alerts if HMAP was run, which is
currently the case if exeperimental plugins are enabled]

I'd bet that you have an instance of Tomcat running somewhere.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>