The current NASL script use credentials to enumerate them or a NULL session if no login and password are provided.
It will be fixed soon to :
1) allways try with a NULL session and guest login (hole or warning)
2) try with credentials (note)
Regards,
Nicolas
On Mar 2, 2005, at 12:08 PM, a g wrote:
Appreciate you help in advance. Nessus is reporting a list of shares on a Windows server available to a guest account.
Howerver, the guest account has been renamed and disabled before the scan. I tried to map to the share using guest \ password. It either responds not able to find the share, or the guest account is locked. There are shares on the server - but guest is not given access to them.
How can this be tested and how is nessus getting the list of shares. The system admin believes this as a false positive - but nessus can list the shares.
Any explaination appreciated.
Thanks again.
Andrew Garlen
__________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/ _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
