Scanning Linux box with Credentials
"Lambert, Mark" <[email protected]> Tue, 27 Jan 2009 14:04:27 -0600
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <2B85E9CF9672534FAB46B28E2962068D1026FF86@USNSH-I-EC1.int.dir.willis.com> |
This is a multi-part message in MIME format. --===============1140088364== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C980BA.74C7797D" This is a multi-part message in MIME format. ------_=_NextPart_001_01C980BA.74C7797D Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable All,=20=20=20=20 =20=20=20=20I=20have=20having=20a=20problem=20with=20SSH=20credentials=20o= n=20an=20internal=20Linux box=20I'm=20trying=20to=20scan.=20The=20box=20I'm=20scanning=20is=20a=20Re= dHat=20box=20and=20I=20can manually=20SSH=20with=20any=20SSH2=20client=20to=20it.=20 I=20supply=20the=20credentials=20and=20I=20get=20logged=20in=20just=20fine= .=20BUT.....=20When=20I configure=20the=20settings=20below=20in=20my=20nessus=20rules=20file, =20 -SSH=20settings[entry]:SSH=20user=20name=20:=20=3D=20XYZ -SSH=20settings[entry]:Preferred=20SSH=20port=20:=20=3D=2022 -SSH=20settings[password]:SSH=20password=20(unsafe!)=20:=20=3D=20XYZPasswo= rd =20 =20=20=20=20I=20get=20the=20response=20below: =20 The=20local=20security=20checks=20are=20disabled.=20Description:=20The=20c= redentials provided=20for=20the=20scan=20did=20not=20allow=20us=20to=20log=20into=20t= he=20remote=20host,=20or the=20remote=20operating=20system=20is=20not=20supported.=20Risk=20factor=20= :=20None=20Plugin output=20:=20It=20was=20not=20possible=20to=20log=20into=20the=20remote=20= host=20via=20ssh =20 =20=20=20=20Am=20I=20missing=20some=20dependencies=20somewhere=20in=20the=20= rules=20file?=20Just=20for grins=20also,=20I=20have=20turned=20on=20ALL=20plugins.=20I=20know=20that=20= is=20not=20desirable, but=20I=20was=20trying=20anything=20to=20get=20it=20to=20log=20in=20proper= ly.=20 =20 Sincerely, Mark =20 =20 =20 =20 ______________________________________________________________________ For=20information=20pertaining=20to=20Willis'=20email=20confidentiality=20= and=20monitoring=20policy,=20usage=20restrictions,=20or=20for=20specific=20= company=20registration=20and=20regulatory=20status=20information,=20please= =20visit=20http://www.willis.com/email_trailer.aspx ______________________________________________________________________ ------_=_NextPart_001_01C980BA.74C7797D Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable <!DOCTYPE=20HTML=20PUBLIC=20"-//W3C//DTD=20HTML=204.0=20Transitional//EN">= <HTML><HEAD> <META=20http-equiv=3DContent-Type=20content=3D"text/html;=20charset=3Dus-a= scii"> <META=20content=3D"MSHTML=206.00.6000.16788"=20name=3DGENERATOR></HEAD> <BODY> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2>All, =20</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009> =20<FONT=20face=3D= Arial=20size=3D2>I=20 have=20having=20a=20problem=20with=20SSH=20credentials=20on=20an=20interna= l=20Linux=20box=20I'm=20trying=20 to=20scan.=20The=20box=20I'm=20scanning=20is=20a=20RedHat=20box=20and=20I=20= can=20manually=20SSH=20with=20any=20 SSH2=20client=20to=20it.=20</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>I=20= supply=20the=20 credentials=20and=20I=20get=20logged=20in=20just=20fine.=20BUT.....=20When= =20I=20configure=20the=20 settings=20below=20in=20my=20nessus=20rules=20file,</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>-S= SH=20 settings[entry]:SSH=20user=20name=20:=20=3D=20XYZ</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>-S= SH=20 settings[entry]:Preferred=20SSH=20port=20:=20=3D=2022</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>-S= SH=20 settings[password]:SSH=20password=20(unsafe!)=20:=20=3D=20XYZPassword</FON= T></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>&n= bsp; =20I=20 get=20the=20response=20below:</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>Th= e=20local=20security=20 checks=20are=20disabled.=20Description:=20The=20credentials=20provided=20f= or=20the=20scan=20did=20not=20 allow=20us=20to=20log=20into=20the=20remote=20host,=20or=20the=20remote=20= operating=20system=20is=20not=20 supported.=20Risk=20factor=20:=20None=20Plugin=20output=20:=20It=20was=20n= ot=20possible=20to=20log=20into=20 the=20remote=20host=20via=20ssh</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20size=3D2>&n= bsp; =20 Am=20I=20missing=20some=20dependencies=20somewhere=20in=20the=20rules=20fi= le?=20Just=20for=20grins=20also,=20 I=20have=20turned=20on=20ALL=20plugins.=20I=20know=20that=20is=20not=20des= irable,=20but=20I=20was=20trying=20 anything=20to=20get=20it=20to=20log=20in=20properly.=20</FONT></SPAN></DIV= > <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2>Sincerely,</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2>Mark</FONT></SPAN></DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D609525119-27012009><FONT=20face=3DArial=20 size=3D2></FONT></SPAN> </DIV> <DIV><FONT=20face=3DArial=20size=3D2></FONT> </DIV> <DIV=20align=3Dleft><FONT=20face=3DArial=20size=3D2></FONT> </DIV> <BR> ______________________________________________________________________<BR>= <BR> For=20information=20pertaining=20to=20Willis'=20email=20confidentiality=20= and=20monitoring=20policy,=20usage=20restrictions,=20or=20for=20specific=20= company=20registration=20and=20regulatory=20status=20information,=20please= =20visit=20http://www.willis.com/email_trailer.aspx<BR> ______________________________________________________________________<BR>= </BODY></HTML> ------_=_NextPart_001_01C980BA.74C7797D-- --===============1140088364== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus --===============1140088364==--