On Thursday 30 May 2002 15:57, Brian Anon wrote: > Compaq Insight Manager does not listen on port TCP/1433 (I expect other > MSDE products may also listen on a different port).
It could be that CIM only listens on a named pipe, no plugins currently exist to check for SQL Server on a named pipe. If it is indeed running on a different port, let me know what that port is and I will update the plugin. > Does the Nessus script test all open ports to determine if they are MSDE? > Or does it only look for port TCP/1433? The mssql_blank_password.nasl only checks for port 1433/tcp right now. I have seen a few cases where mssql_ping.nasl will trigger, but port 1433/tcp is not open, usually on multi-homed machines where SQL Server was only bound to the primary address. It may be possible to add a SQL Server check to the find_service plugin, but I haven't run across on any instances where the server was configured to use TCP/IP as a network transport and port 1433 wasn't open on at least one address. -HD
