Re: [2.0.3] ftp_root.nasl - still buggy plus other 2.0.3 weirdness

Hello,

> > pasv = ftp_get_pasv_port(socket:soc);
> 
> Some ftp server will yell at you if you send a STOR with no data
> connection already open, so commenting this command out would not fix
> the issue. Send me network traces please.

Which format would you like them in - I can send you libpcap / tcpdump
capture files if you'd like.  Also, would you like me to post them to the
list, or directly mail to some address?

Once I know which format is suitable, I'll try to get these traces to you
ASAP.

> The solution slow a lot of things down, so I prefer to let those false
> positive go in at this time.

I understand.  It's certainly not a big deal either way, since a
passwordless root account is a big enough problem by itself.

> 
> 
> > [oracle9iAS_slashdot_DoS.nasl]
> > 
> > This script (oracle9iAS_slashdot_DoS.nasl) seems to do nothing!  Shouldn't
> > it set a security hole or a kb item or SOMETHING when http_is_dead() is
> > true?
> 
> Fixed, thanks.

Thank you :)

Brian Costello <[email protected]>