"Kornacki, Vince" <[EMAIL PROTECTED]> writes:

> When I ran the scan, however, Nessus proceeded to
> delete most of the content on the webserver, including entire subdirectories
> such as "/includes".

Well... In the C source files, the DELETE string only appears in the
http_delete function.
And in the NASL scripts:
[mikhail@casserole scripts]$ fgrep -l http_delete *.nasl
http_methods.nasl
[mikhail@casserole scripts]$ fgrep -l DELETE *.nasl
http_methods.nasl
[mikhail@casserole scripts]$ 

> At first, I suspected the "http_methods.nasl" plugin.

But it only destroys one file, as you saw it.

> Even if this plugin deleted the homepage

Which it probably did not, as it could upload a test file...

> that wouldn't account for all the other files and subdirectories that were
> mysteriously deleted.  Does anyone know what plugin could've done this?

I don't think that Nessus is responsible. I never saw anything like
this. 

-- 
mailto:[EMAIL PROTECTED]
GPG Public keys: http://michel.arboi.free.fr/pubkey.txt
http://michel.arboi.free.fr/    http://arboi.da.ru/
FAQNOPI de fr.comp.securite : http://faqnopi.da.ru/
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to