Re: Nessus 3.0.3 / 2.2.8 released ; NessusClient 1.0.0.RC5 available

[email protected] Mon, 22 May 2006 13:40:48 -0700
Newsgroups gmane.comp.security.nessus.general,gmane.comp.security.nessus.announce
Message-ID <OF9CA5AE6B.347F84CF-ON88257176.0070E65C-88257176.00719E65@Notes.YMP.GOV>
This is a multipart message in MIME format.
--===============1101408022==
Content-Type: multipart/alternative;
	boundary="=_alternative 00719E6288257176_="

This is a multipart message in MIME format.
--=_alternative 00719E6288257176_=
Content-Type: text/plain; charset="US-ASCII"

I have a Sun Solaris 9 system that under nessus 2.2.7 reported clean.  I 
just installed 3.0.3 and now it's calling out that I have phpMyAdmin 
(17219) & WordPress (18297) installed, I don't.  If I'm reading the nasl 
right 17219 is looking for main.php and 18297 is looking for index.php, 
neither of which is on my system.  The changes in versions between both 
files seems minimal, but identical:

root@nessie:/usr/local/opt>sdiff -s 
nessus-2.2.7/lib/nessus/plugins/phpMyAdmin_detect.nasl 
nessus-3.0.3/lib/nessus/plugins/phpMyAdmin_detect.nasl
30c30
  script_version("$Revision: 1.4 $");                           | 
script_version("$Revision: 1.5 $");
71c71
  if ( str ) {                                                  |    if ( 
!isnull(str) ) {


root@nessie:/usr/local/opt>sdiff -s 
nessus-2.2.7/lib/nessus/plugins/wordpress_detect.nasl 
nessus-3.0.3/lib/nessus/plugins/wordpress_detect.nasl
30c30
  script_version("$Revision: 1.6 $");                           | 
script_version("$Revision: 1.7 $");
76c76
  if (matches) {                                                |    if 
(!isnull(matches)) {
94c94
      if (matches) {                                            | if 
(!isnull(matches)) {

Is it possible that these changes are not working as expected?

Dan


--=_alternative 00719E6288257176_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">I have a Sun Solaris 9 system that under
nessus 2.2.7 reported clean. &nbsp;I just installed 3.0.3 and now it's
calling out that I have phpMyAdmin (17219) &amp; WordPress (18297) installed,
I don't. &nbsp;If I'm reading the nasl right 17219 is looking for main.php
and 18297 is looking for index.php, neither of which is on my system. &nbsp;The
changes in versions between both files seems minimal, but identical:</font>
<br>
<br><font size=1 face="Courier New">root@nessie:/usr/local/opt&gt;sdiff
-s nessus-2.2.7/lib/nessus/plugins/phpMyAdmin_detect.nasl nessus-3.0.3/lib/nessus/plugins/phpMyAdmin_detect.nasl</font>
<br><font size=1 face="Courier New">30c30</font>
<br><font size=1 face="Courier New">&nbsp; script_version(&quot;$Revision:
1.4 $&quot;); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; | &nbsp; &nbsp;script_version(&quot;$Revision:
1.5 $&quot;);</font>
<br><font size=1 face="Courier New">71c71</font>
<br><font size=1 face="Courier New">&nbsp; if ( str ) { &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|
&nbsp; &nbsp;if ( !isnull(str) ) {</font>
<br>
<br>
<br><font size=1 face="Courier New">root@nessie:/usr/local/opt&gt;sdiff
-s nessus-2.2.7/lib/nessus/plugins/wordpress_detect.nasl nessus-3.0.3/lib/nessus/plugins/wordpress_detect.nasl</font>
<br><font size=1 face="Courier New">30c30</font>
<br><font size=1 face="Courier New">&nbsp; script_version(&quot;$Revision:
1.6 $&quot;); &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; | &nbsp; &nbsp;script_version(&quot;$Revision:
1.7 $&quot;);</font>
<br><font size=1 face="Courier New">76c76</font>
<br><font size=1 face="Courier New">&nbsp; if (matches) { &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|
&nbsp; &nbsp;if (!isnull(matches)) {</font>
<br><font size=1 face="Courier New">94c94</font>
<br><font size=1 face="Courier New">&nbsp; &nbsp; &nbsp; if (matches) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|
&nbsp; &nbsp; &nbsp; &nbsp;if (!isnull(matches)) {</font>
<br>
<br><font size=2 face="sans-serif">Is it possible that these changes are
not working as expected?</font>
<br>
<br><font size=2 face="sans-serif">Dan</font>
<br>
<br>
--=_alternative 00719E6288257176_=--

--===============1101408022==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
--===============1101408022==--