OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [ISSForum] vulnerability of SendMail in Intel server...crazy

From: Woah Down (woahdownyahoo.com)
Date: Sat Aug 06 2005 - 10:42:11 CDT


It appears when say an "Intel server" you're referring to a Windows based OS. That on the surface seems odd, but let's look into it if you'd like.
 
Sanitize your scan log (meaning clear out your IPs and any proprietary information such as usernames) and send it. Let's take a look at the check that was run and the foundvuln condition on the check. Then we'll do some investigation to perhaps determine what the logic was that made the check believe it found sendmail running.
 
Also, we should investigate exactly what processes are running on that Windows OS machine to try to begin making investigative connections.

Andres Riancho <andres.rianchogmail.com> wrote:DIOGO LEAL CHAGAS wrote:

>Hi,
>
>
>When I Scan a Intel server the internet scan show a vulnerability of
>"SendMail".
>
>
>really...stranger
>
>
>Help me...please
>
>
>Why internet scan show a vulnerability of SendMail in Intel server?
>
>
>Diogo
>DTIN/NSI
>_______________________________________________
>ISSForum mailing list
>ISSForumiss.net
>
>TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum
>
>To contact the ISSForum Moderator, send email to mod-issforumiss.net
>
>The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
>
>
Like any other program , Internet Scanner has false positives.

--
Andres Riancho
http://www.securearg.net/

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

                
---------------------------------
 Start your day with Yahoo! - make it your home page
_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.