Re: Question about Plugin 19228 - GroupWise WebAccess Cross-Site Scripting Vulnerability
"George A. Theall" <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
On Sep 20, 2008, at 12:38 AM, Miriam Levenstein wrote: > Plugin 19228 reports the presence of a GroupWise WebAccess > vulnerability based on the version returned by the host’s GroupWise > program. The vulnerability is present in versions lower than 6.5.5. > The plugin checks this page on the host -- /com/novell/webaccess/ > palm/en/aboutpqa.htm – to determine the GroupWise version. ... > I wonder if the “aboutpqa.htm” page is the best place for the plugin > to look to determine the WebAccess version. It seems that the main > program can be upgraded without affecting that page. I don't think it is either given this. I've changed the plugin so it only runs if Report Paranoia is set to Paranoid, at least until a better check can be found. George -- [email protected] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus