Michael Meyer escribió:
> *** David Corcuera <[email protected]> wrote:
>   
>> Michael Meyer escribió:
>>     
>>> *** Chandrashekhar B <[email protected]> wrote:
>>>       
>>>>> By the way. In this case, i have ran a local check and it also reported 
>>>>> as hole security in all four cases.
>>>>>       
>>>>>           
>>>> The four Plugins will continue to report the vulnerability as they are only
>>>> doing remote check. The corresponding local checks which address the same
>>>> CVE shouldn't or will not report.
>>>>     
>>>>         
>>> Another idea. Execute the remote checks (this ones which will do check 
>>> the version get from banner) only, if no local checks are configured?
>>>   
>>>       
>> Doing this, isn`t the same as my first scan (All plugins active but ssh 
>> credentials not installed)?
>>     
>
> What i mean was, if we have credentials and have successfully logged in into
> the remote host, we could perhaps deactivate these checks that only
> check the version we get from banner.
>
> Something like:
>
> if(local_login_succes()) exit(0); 
>
> Micha
> _______________________________________________
> Openvas-discuss mailing list
> [email protected]
> http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
>
>   
seems good idea

dav

_______________________________________________
Openvas-discuss mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss

Reply via email to