Has anyone seen false positives with the stream.c DoS plugin?
I have a Microsoft server which began showing up as vulnerable when
I did a recent scan. I'm using version 1.7 of stream.nasl. (1.8 is
available but the only change is in the test description.) I went
back into CVS and found the test itself has not changed since
September 2000.
Something on the system must have changed. However, since I'm not
familiar with this test, I'm not sure how to tell if it is a
regression of the host or a false positive in the test.
Thoughts or suggestions anyone?
Thanks,
Scott
P.S. I did not find anything in the mail archives at
http://msgs.securepoint.com/nessus/.
