On Mon, Jan 16, 2006 at 12:33:06PM -0700, Dave King wrote: > Looking at the plugins there are a few that seem to make this approach > not work quite right. For example 14655 is in the denial category, but > also has a safe_checks option in it. So it seems like the safe_check > code would never run since all denial plugins are disabled if safe > checks is on. ... > Other examples I've run into are 17602 and 14654.
There are a number of plugins that test whether safe checks are enabled and either do a banner check if so or actually try to crash a service otherwise. Such plugins are typically categorized as ACT_MIXED_ATTACK. Plugin 14654 (wu_ftpd_glob2.nasl) was not although the way it's coded it should be. As for 14655 (mailenable_httpmail_content_length_overflow.nasl) and 14654 (mailenable_httpmail_authorization_dos.nasl), indeed the tests for safe checks are redundant - if safe checks are disabled, the plugins will never be run because both are in the ACT_DENIAL category. These two were some of my early plugins, before I started working for Tenable. I don't recall whether I didn't quite understand how safe checks worked when I wrote them or whether I had originally included a banner check that was later removed. I will, though, remove the checks shortly. George -- [EMAIL PROTECTED] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
