On Mon, Jan 16, 2006 at 12:33:06PM -0700, Dave King wrote:

> Looking at the plugins there are a few that seem to make this approach
> not work quite right.  For example 14655 is in the denial category, but
> also has a safe_checks option in it.  So it seems like the safe_check
> code would never run since all denial plugins are disabled if safe
> checks is on.  
...
> Other examples I've run into are 17602 and 14654.

There are a number of plugins that test whether safe checks are enabled
and either do a banner check if so or actually try to crash a service
otherwise. Such plugins are typically categorized as ACT_MIXED_ATTACK.
Plugin 14654 (wu_ftpd_glob2.nasl) was not although the way it's coded it
should be.

As for 14655 (mailenable_httpmail_content_length_overflow.nasl) and
14654 (mailenable_httpmail_authorization_dos.nasl), indeed the tests for
safe checks are redundant - if safe checks are disabled, the plugins
will never be run because both are in the ACT_DENIAL category. These two
were some of my early plugins, before I started working for Tenable. I
don't recall whether I didn't quite understand how safe checks worked
when I wrote them or whether I had originally included a banner check
that was later removed. I will, though, remove the checks shortly.

George
-- 
[EMAIL PROTECTED]
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to