FALSE POSITIVE

["John Scherff" <JScherff@24hourfit.com>]

Plugin 25167 appears to be producing false-positives.  This plugin is in the "Windows : Microsoft Bulletins" family and tests for MS07-028 (flaw in CAPICOM).

 

The scan was run against a freshly-installed, fully-patched Windows 2003 R2 server with Citrix Presentation Server 4.5 installed.

 

Here are the usual answers to the usual questions:

• Windows credentials (user name, password domain) are provided in the nessus config file
• The Windows user account is in the Domain Admins group in the same domain as the server
• The Windows account is not locked out
• All other local checks are working (registry reads, service enumeration, account enumeration, etc.)

R/ John Scherff

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus