Re: Filer panics while running NESSUS security scanner

"Gary C" <[email protected]> Wed, 19 Nov 2008 21:02:57 -0500
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
we had a similar issue once. I don't have the resolution details but you might ask NetApp about bug # 297075.

"The NetApp Remote Volume protocol handler received a bad packet from a security scanner.  The data in that request packet was not validated and one piece of it was used as an index into an array.  That index was much larger than the actual number of elements in the array.  The address of the array element using the bad index was in an area of virtual memory that was unmapped.  This resulted in the page fault when an attempt was made to access that array element."
  ----- Original Message ----- 
  From: Edgar Vargas 
  To: [email protected] 
  Sent: Tuesday, November 18, 2008 12:16 PM
  Subject: Filer panics while running NESSUS security scanner



  Hello All,



  I'm looking for any information regarding "Filer panic" when running NESSUS on DataONTAP.  The description that I got from another eng is this:

  Description

  Formatted

  Filer panic's while decoding overflowing authorization header when customer tried to run security audit package. The address of the buffer falls into end of a page, which caused a page fault on the filer.



  I've not been able to find any information regarding this "bug".  Has anyone had any issues while attempting to scan their Data ONTAP running 6.x or 7.x?  Any help would be greatly appreciated.


  thanks


  --edgar




  Edgar J Vargas



  I'm against picketing, but I don't know how to show it.



 

------------------------------------------------------------------------------


  _______________________________________________
  Nessus mailing list
  [email protected]
  http://mail.nessus.org/mailman/listinfo/nessus

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus