iis_nat.nasl and propfind_internal_ip.nasl false positives on Oracle
Martin Mačok <[email protected]> Thu, 22 Dec 2005 21:54:53 +0100
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
I have an Oracle HTTP server that identifies itself through headers as Server: Oracle-Application-Server-10g/10.1.2.0.0 Oracle-HTTP-Server Oracl= eAS-Web-Cache-10g/10.1.2.0.0 and through HTTP error responses in bodies with Oracle-Application-Server-10g/10.1.2.0.0 Oracle-HTTP-Server Server at ... Both mentioned plugins thinks that "10.1.2.0" is the leaked private IP. Martin Ma=E8ok ICT Security Consultant _______________________________________________ Nessus-devel mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus-devel