On Thursday 11 September 2003 11:23 pm, Renaud Deraison wrote: > On Thu, Sep 11, 2003 at 05:01:55PM -0600, David Kyle Sayre wrote: > > Hello all, > > > > I have 4 classes of machines that are frequently coming up as false > > positives on the version 1.11 of the msrpc_dcom2.nasl. I have run the > > nasl -t target msrpc_dcom2.nasl, but I only get success. What would be > > helpful? These are the OS's affected > > > > 1) AIX running DCE > > 2) HP running DCE > > 3) Win NT workstation > > 4) Win NT Server > > Run the attached plugin in command line (nasl -t ip.of.targets) and send > me the output. > > -- Renaud
I hope this helps some, I have removed the IPs at the request of management, and i called the plugin you gave me test.nasl as not to over write the other msrpc_dcom2.nasl. If I can do anything else, please let me know. David Sayre Los Alamos National Labs Windows NT workstations /usr/local/lib/nessus/plugins# nasl -t X.X.X.X test.nasl Could not establish NULL session error1=0000000000 error2=0000000000 error3=0200000000 error4=0300011c00 error5= Success Windows NT Server (this still shows as vulnerable on 1.11) /usr/local/lib/nessus/plugins# nasl -t X.X.X.X test.nasl error1=0000000000 error2=0000000000 error3=0200000000 error4=0300011c00 error5=0400088001 [19932] plug_set_key:send(0)['1 SMB/KB824146=1; '](0 out of 18): Socket operation on non-socket Hp running DCE /usr/local/lib/nessus/plugins# nasl -t X.X.X.X test.nasl Could not establish NULL session error1=0000000000 error2=0000000000 error3=0000000000 error4=1c00001c00 error5= Success IBM running DCE /usr/local/lib/nessus/plugins# nasl -t X.X.X.X test.nasl Could not establish NULL session error1=0000000000 error2=0000000000 error3=0000000000 error4=1c00001c00 error5= Success Vulnerable 2000 test machine /usr/local/lib/nessus/plugins# nasl -t X.X.X.X test.nasl error1=0400088000 error2=0400088000 error3=0200000000 error4=0300011c00 error5= Success
