Re: Nessus Accuracy: 3 against 1?

Renaud Deraison <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>

Hello Amit,


On Aug 27, 2008, at 12:09 PM, Lad, Amit wrote:
>
>
> At this point I was totally confused, because it looks like Nessus  
> technically is correct.  So then I run 2 other tools (GFI Languard  
> and Shavlik NetChk) against the same server and they both tell me  
> the server does not require that patch.  So now I have a 3 against 1  
> situations, but in all aspects looking at just the file version,  
> which shows the updated version should tell me the real truth.

I believe that the tools you use all use the same backend for patch  
management (a Microsoft-provided XML file), meaning that they will all  
be right at the same time, or wrong at the same time.

If the DLL installed on the remote hosts has the old version set, then  
it means the patch has not been fully installed. Try to manually  
(re)install it on one of the systems and see if that solves the problem.


Thanks,


					-- Renaud

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.