Re: symantec rule bug
Jason Haar <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Organization | Trimble Navigation Ltd. |
| Message-ID | <[email protected]> |
Ron Gula wrote: > Did you confirm which version of Symantec AV is running on the computer? > What did plugin 16193 say? It's possible an odler version of Symantec is > there, but a different AV is running just as well. > > The remote host has the Symantec Antivirus Corporate installed. It has been fingerprinted as : Symantec Antivirus Corporate 10.1.0.394 DAT version : 20080825 Your link to http://www.symantec.com/avcenter/security/Content/2006.05.25.html told me I had to look at the non-English link (sigh! Why do these people have separate products for different languages! [I know, I know...]) and that says the host is indeed running a vulnerable version. So nessus was right - but 16193 was still wrong. Shouldn't it check the engine number? Thanks! -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus