Mailing List Archive

Solaris False Positives
Hi,

I've found some of the Solaris local checks are causing false positives. The ones I've noticed are: 110910, 110615, 109328 and 109134. Now, all of those have got two versions of the patch installed. I can't help but think there is some bug in the logic of the patch_installed function, although looking at the code it seems fine! Anyway, if someone wants to have a go debugging this, I can provide the kb that causes this.

As always, thanks for a great scanning tool!

Paul

--
Paul Johnston
Senior IT Security Analyst
Group Information and IT Risk
Group Services
Tel No 0113-235-3071 (internal 7581 53071)
Mobile Number 07766-740756

--

------------------------------------------------------------------------------
HBOS plc, Registered in Scotland No. SC218813. Registered Office: The Mound, Edinburgh EH1 1YZ. HBOS plc is a holding company, subsidiaries of which are authorised and regulated by the Financial Services Authority.
==============================================================================

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
Re: Solaris False Positives [ In reply to ]
Could you send me the kb so I can take a look at this problem?

Thanks

Nicolas

PaJohnston@HBOSplc.com wrote:
> Hi,
>
> I've found some of the Solaris local checks are causing false positives. The ones I've noticed are: 110910, 110615, 109328 and 109134. Now, all of those have got two versions of the patch installed. I can't help but think there is some bug in the logic of the patch_installed function, although looking at the code it seems fine! Anyway, if someone wants to have a go debugging this, I can provide the kb that causes this.
>
> As always, thanks for a great scanning tool!
>
> Paul
>
> --
> Paul Johnston
> Senior IT Security Analyst
> Group Information and IT Risk
> Group Services
> Tel No 0113-235-3071 (internal 7581 53071)
> Mobile Number 07766-740756
>

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers