so, what's up with this line in dont_scan_printers.nasl? 

--code--
if ( ! get_kb_item("Scan/Do_Scan_Printers" ) ) exit(0);
/code


now, taking a look at it, it looks like it works with the dont_Scan_settings.nasl to say if this not in the KB, then it it will exit this script. 


Now, the interesting thing here is that if you _check_ Scan Network Printers, it will do the expected behavior, which is to check and see if it's a printer and then count it as dead if it is, returning very quickly from printers. If you _don't_ have it check, it will scan the crap out of the printers, and not check to see if it is a printer, and promptly give you a stack of vulnerabilities.


The other interesting part of this is if you _don't_ have scan network printers checked, it'll hammer my hp 4550dn enough to cause it to print stuff, including http requests and the like :)


Maybe an error in logic?


Doug Nordwall

Unix Administrator

EMSL Computer and Network Support

Unclassified Computer Security

Phone: (509)372-6776; Fax: (509)376-0420

The best book on programming for the layman is "Alice in Wonderland"; but that's because it's the best book on anything for the layman.



_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to