(sorry if this gets sent
twice; the first one seems to have been eaten by
Majordomo)
>>
I downloaded the new mssql_version.nasl this morning. I had to hack it
around a little to make it work on 1.0.10 which is the version I am still
running. However, it appears to have a flaw - not so much in the script itself,
more the fact that it appears that all versions of SQL Server 2000 return a
version string of 8.00.194 in response to the SQL ping. Even those that the
admins swear blind are patched with SP3.
>>
> This is now patched - do /usr/local/sbin/nessus-update-plugins to get the new plugin.
>>
> This is now patched - do /usr/local/sbin/nessus-update-plugins to get the new plugin.
Was
mssql_version.nasl deleted from the plugins list? Attempting to get the file
(either via the nessus-update-plugins script or via http://www.nessus.org/nasl/mssql_version.nasl)
results in a 404 Not Found error...
Also, plugin 10674
(mssql_ping.nasl) also reports a SQL Server 2000 SP3 server as 8.00.194. I
verified that it is SP3 myself .
Any
clues?
--Keith
Young
