Re: Results Differ Between Unix & Windows Nessus
"George A. Theall" <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
On Jun 16, 2008, at 7:04 PM, Sicklick, John (Mission Systems) wrote: > Can anyone offer a suggestion as to why scans performed against the > same Linux (RHEL 4) platform using both the Windows & Unix versions > of Nessus 3 provide different results? > ... > The biggest concern is that Linux identified 5 High vulnerabilities > while the Windows version did not identify any. The high > vulnerabilities identified all related to updates to RH RPMs. As > far as I can tell the same audit options were specified for both > Nessus versions. > Just a stab in the dark, but perhaps it's because you're scanning the Linux platform where Nessus is installed and aren't doing a credentialed scan. In this case, Nessus on the Linux box will still be able to generate a list of RPMs installed and report problems while Nessus on the Windows box won't be able to. If that's not right, you'll probably ought to provide some details; eg, exactly how the results differ, network setup, scan configuration, etc. George -- [email protected] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus