Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/nessus/users/ en-us (c) Gossamer Threads Inc. All rights reserved. 24 Nov 2009 18:59:58 -0800 120 75 23 http://www.gossamer-threads.com/lists/nessus/users/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg > apologies if this is the wrong place to query this. In the future, we'd encourage you to post questions or comments to the discussion forums locat 16 Mar 2009 16:41:18 -0800 http://www.gossamer-threads.com/lists/nessus/users/33757 thanks Ron... i was just saying that for a company that has above 100 workers (or servers/worksattions) is infinitely easier (and feasible) to pay y 16 Mar 2009 14:25:26 -0800 http://www.gossamer-threads.com/lists/nessus/users/33758 Hi, apologies if this is the wrong place to query this. Nessus plugin 20148 gives the scenario: The remote host is running the VERITAS Ne 16 Mar 2009 13:33:42 -0800 http://www.gossamer-threads.com/lists/nessus/users/33756 kalin m wrote: > > thanks Alex... i'm aware of the self-assessment questionnaire. i had to > deal with it a few times. i just ratter not deal with i 16 Mar 2009 13:26:40 -0800 http://www.gossamer-threads.com/lists/nessus/users/33755 thanks Alex... i'm aware of the self-assessment questionnaire. i had to deal with it a few times. i just ratter not deal with it too much anymore. 16 Mar 2009 11:52:16 -0800 http://www.gossamer-threads.com/lists/nessus/users/33754 I was referring to "Home feed" information if you need Nessus for non-commercial use - just to hone your skills. If you need PCI compliance, there a 16 Mar 2009 10:43:48 -0800 http://www.gossamer-threads.com/lists/nessus/users/33753 i can't pay $1200 a year to check if 3 machines are pci comliant every 6 months or so. just don't have it. Alex wrote: > You didn't use it that muc 16 Mar 2009 10:33:59 -0800 http://www.gossamer-threads.com/lists/nessus/users/33752 Also, if you're just doing one machine and not for anything "official" (like a PCI DSS certification), you can just follow any one of the ubiquito 16 Mar 2009 08:57:45 -0800 http://www.gossamer-threads.com/lists/nessus/users/33751 Hi Kalin, The Nessus scanner must be subscribed to the ProfessionalFeed. Once it is subscribed, it will download the PCI plugins. If you have subscr 16 Mar 2009 07:07:05 -0800 http://www.gossamer-threads.com/lists/nessus/users/33750 You didn't use it that much, did you? :) It is all there on the web site: http://www.nessus.org/plugins/index.php?view=register-info Alex kalin 16 Mar 2009 06:05:05 -0800 http://www.gossamer-threads.com/lists/nessus/users/33749 hi all... i used to use nessus at my old job (currently unemployed)... it was pretty cool. now i had to get some license (?!?) the thing is the 13 Mar 2009 21:59:25 -0800 http://www.gossamer-threads.com/lists/nessus/users/33748 I'm not sure about Win2k3, but with WinXP, if the admin password is blank, then that account doesn't work. If you have a password for the account, 05 Mar 2009 07:40:12 -0800 http://www.gossamer-threads.com/lists/nessus/users/33740 Thanks for the help! Is this documented somewhere? I'd been googling for solutions before I posted a questions here. Thanks again! Lee Anne -----Or 04 Mar 2009 10:11:30 -0800 http://www.gossamer-threads.com/lists/nessus/users/33739 WinXP and win2k3 won't let you authenticate with local admin over a network. Jk Sent from Jim's iPhone On Mar 4, 2009, at 12:00 PM, "nessus-reque 04 Mar 2009 09:45:36 -0800 http://www.gossamer-threads.com/lists/nessus/users/33738 Some time near the end of 2008, it seems that Microsoft "patched" something that changed the behavior of SMB access to remote registries. The team th 03 Mar 2009 09:07:48 -0800 http://www.gossamer-threads.com/lists/nessus/users/33737 Mark Timm wrote: > On Windows Server 2003 how do I remediate Nessus IDs 26928 and 31705. Iıve > already changed these entries at > SYSTEM\CurrentCont 26 Feb 2009 18:47:36 -0800 http://www.gossamer-threads.com/lists/nessus/users/33736 On Windows Server 2003 how do I remediate Nessus IDs 26928 and 31705. Iıve already changed these entries at SYSTEM\CurrentControlSet\Control\Security 26 Feb 2009 09:13:12 -0800 http://www.gossamer-threads.com/lists/nessus/users/33735 Ray Van Dolson wrote: > What's the appropriate way to edit existing nessusrc files? I > typically like to create a configuration in NessusClient then 24 Feb 2009 03:42:22 -0800 http://www.gossamer-threads.com/lists/nessus/users/33734 What's the appropriate way to edit existing nessusrc files? I typically like to create a configuration in NessusClient then export it to nessusrc for 23 Feb 2009 15:28:59 -0800 http://www.gossamer-threads.com/lists/nessus/users/33733 Richard Puerto wrote: > I have run the Windows XP Desktop v.2 audit files on my workstations and > have found that many of them are failing because th 23 Feb 2009 10:48:46 -0800 http://www.gossamer-threads.com/lists/nessus/users/33732 I have run the Windows XP Desktop v.2 audit files on my workstations and have found that many of them are failing because the configuration does not e 23 Feb 2009 08:56:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33731 When I try to update my plugins , I get "Update failed to finish due to a problem" almost immediately after starting. Is there a log I can check to 21 Feb 2009 13:51:16 -0800 http://www.gossamer-threads.com/lists/nessus/users/33730 Hart, Lee Anne (AHRQ/IOD) wrote: > Hello, > > > > I'm having trouble determining why the SMB credentials I've configured > are not able to login a 19 Feb 2009 09:38:16 -0800 http://www.gossamer-threads.com/lists/nessus/users/33729 here you go. should work on windows boxes and not false positive on unix boxes with smb. will return a high if it can't get into the box. On Thu, Feb 19 Feb 2009 09:25:29 -0800 http://www.gossamer-threads.com/lists/nessus/users/33728 Hello, I'm having trouble determining why the SMB credentials I've configured are not able to login and run the local checks on our Windows 2003 S 19 Feb 2009 07:59:50 -0800 http://www.gossamer-threads.com/lists/nessus/users/33727 On Wed, Feb 18, 2009 at 07:41:00PM -0800, Doug Nordwall wrote: > yes, I do. lemme get it out in the morning. > Thanks Doug. Looking forward to seei 18 Feb 2009 21:06:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33726 yes, I do. lemme get it out in the morning. On Wed, Feb 18, 2009 at 2:56 PM, Ray Van Dolson <rvandolson@esri.com> wrote: > Anyone have a quickie scr 18 Feb 2009 19:41:00 -0800 http://www.gossamer-threads.com/lists/nessus/users/33725 Anyone have a quickie script to confirm domain membership based on the SMB credentials provided? Looks like I might be able to make use of plugin 103 18 Feb 2009 14:56:53 -0800 http://www.gossamer-threads.com/lists/nessus/users/33724 Hello, We are looking to upgrade some of our Enterprise environments and wondering if there are any issues running NESSUS 3.x on SLES9/SP4 with Op 18 Feb 2009 12:18:34 -0800 http://www.gossamer-threads.com/lists/nessus/users/33723 Chapman, Ralph H wrote: > DHHS has not described their modifications to the FDCC audit > requirements in a SCAP compliant XCCDF format. > > So, how 18 Feb 2009 08:26:34 -0800 http://www.gossamer-threads.com/lists/nessus/users/33722 DHHS has not described their modifications to the FDCC audit requirements in a SCAP compliant XCCDF format. So, how do I create a XCCDF file that ca 18 Feb 2009 07:08:12 -0800 http://www.gossamer-threads.com/lists/nessus/users/33721 Richard Puerto wrote: > We have been getting some scan reports that show the host as OS X but then > no results information. It seems that it is happ 17 Feb 2009 06:38:59 -0800 http://www.gossamer-threads.com/lists/nessus/users/33720 We have been getting some scan reports that show the host as OS X but then no results information. It seems that it is happening when the scanner enc 17 Feb 2009 06:22:51 -0800 http://www.gossamer-threads.com/lists/nessus/users/33719 Vijay.V2@cognizant.com wrote: > Hi, > > We are about to run a VA scan on ISA 2006 proxy servers (deployed on > Windows 2003) in our environment. Plea 17 Feb 2009 06:21:05 -0800 http://www.gossamer-threads.com/lists/nessus/users/33718 Hi, We are about to run a VA scan on ISA 2006 proxy servers (deployed on Windows 2003) in our environment. Please let us know the availability of Nes 17 Feb 2009 04:38:43 -0800 http://www.gossamer-threads.com/lists/nessus/users/33717 Chapman, Ralph H wrote: > Has anyone created a DHHS FDCC audit policy yet? It is close to the > FDCC but wonder if someone already did the leg work o 14 Feb 2009 05:17:42 -0800 http://www.gossamer-threads.com/lists/nessus/users/33715 Has anyone created a DHHS FDCC audit policy yet? It is close to the FDCC but wonder if someone already did the leg work on creating it. Thanks, Ralph 13 Feb 2009 14:20:25 -0800 http://www.gossamer-threads.com/lists/nessus/users/33714 Hello, I posted a mail in December about cross compiling Nessus. I am trying to build Nessus for various embedded devices and receive the following e 12 Feb 2009 06:17:46 -0800 http://www.gossamer-threads.com/lists/nessus/users/33713 Ron Gula wrote: [snip] > Typically when someone mentions slowing down a port scan, I suggest > they look at the credentialed port scanning and proces 12 Feb 2009 06:09:24 -0800 http://www.gossamer-threads.com/lists/nessus/users/33712 Tidball, Christopher wrote: > Looking for advice on how to serialize a scan of multiple hosts so that only > one host is scanned at a time. I have edi 12 Feb 2009 02:27:53 -0800 http://www.gossamer-threads.com/lists/nessus/users/33708 On Wed, 11 Feb 2009 18:02:48 -0600 "Tidball, Christopher" <Christopher.Tidball@qwest.com> wrote: > Looking for advice on how to serialize a scan of m 12 Feb 2009 02:12:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33707 Looking for advice on how to serialize a scan of multiple hosts so that only one host is scanned at a time. I have edited the policy so that the maxim 11 Feb 2009 16:02:48 -0800 http://www.gossamer-threads.com/lists/nessus/users/33703 http://www.nessus.org/documentation/nessus_domain_whitepaper.pdf is probably a good starting point. S. J From: nessus-bounces@list.nessus.org 11 Feb 2009 13:57:16 -0800 http://www.gossamer-threads.com/lists/nessus/users/33704 Doug Nordwall wrote: > does anyone have the minimum set of permissions needed to run an > authenticated scan with safe checks enabled on windows machi 11 Feb 2009 10:09:29 -0800 http://www.gossamer-threads.com/lists/nessus/users/33702 http://www.tssci-security.com/projects/tissynbe_py/ I've tried this guy's script and it seems to work well Per author: "As discussed in another post 11 Feb 2009 09:35:39 -0800 http://www.gossamer-threads.com/lists/nessus/users/33701 does anyone have the minimum set of permissions needed to run an authenticated scan with safe checks enabled on windows machines? I know there is a lo 11 Feb 2009 08:24:37 -0800 http://www.gossamer-threads.com/lists/nessus/users/33700 Hi, I have been asked if there is or will be a Nessus plugging to detect HP printers vulnerable to "Remote Unauthorized Access to Files" as reported 10 Feb 2009 04:34:43 -0800 http://www.gossamer-threads.com/lists/nessus/users/33699 There is also a Nessus plugin (35453) which checks for this : http://nessus.org/plugins/index.php?view=single&id=35453 - Mehul > -----Original Mes 09 Feb 2009 06:43:02 -0800 http://www.gossamer-threads.com/lists/nessus/users/33697 Another possibility, if you are not comfortable with plugin writing, is to use the Nessus WMI auditing functionality available to Professional Feed a 08 Feb 2009 11:43:45 -0800 http://www.gossamer-threads.com/lists/nessus/users/33696 Could you not just write a plugin that issues the following command: Net statistics Server/Workstation <-- choose whichever is relevant The second l 07 Feb 2009 07:33:45 -0800 http://www.gossamer-threads.com/lists/nessus/users/33695 I'm assuming you are asking about the Backup Exec version. It's version 12.5 Rev. 2213 SP1 with Hotfix 317412 -----Original Message----- From: Renau 06 Feb 2009 06:34:02 -0800 http://www.gossamer-threads.com/lists/nessus/users/33694 Zate, The file content NASL should be able to scan files that are locally attached to the system. Couple of questions : - Are there are files o 06 Feb 2009 05:54:01 -0800 http://www.gossamer-threads.com/lists/nessus/users/33693 On Feb 5, 2009, at 9:54 PM, Deepak J. Mathew wrote: > Question.. > > Vulnerability Nessus ID 34820 shows that a server has the > vulnerability: [.. 06 Feb 2009 01:40:02 -0800 http://www.gossamer-threads.com/lists/nessus/users/33692 On Feb 5, 2009, at 3:54 PM, Deepak J. Mathew wrote: > Vulnerability Nessus ID 34820 shows that a server has the > vulnerability: ... > So, why does 05 Feb 2009 13:43:40 -0800 http://www.gossamer-threads.com/lists/nessus/users/33691 Question.. Vulnerability Nessus ID 34820 shows that a server has the vulnerability: Symantec Backup Exec Authentication Bypass and Potential B 05 Feb 2009 12:54:46 -0800 http://www.gossamer-threads.com/lists/nessus/users/33690 Does this only check C$? I have a box with a P$ and windows filecheck on this completes almost immediately as everything [PASSED] Credentials are fi 05 Feb 2009 12:06:19 -0800 http://www.gossamer-threads.com/lists/nessus/users/33689 James Kelly wrote: > I checked the Nessus/Tenable support site and didn't see a scap file for > Windows 2008. I noticed that the SCAP files were still 05 Feb 2009 08:13:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33688 James Kelly wrote: [snip] > I've not had the chance yet to see Windows 2008 and I don't know how > similar it is to 2003. 2008 is vista-based, 2003 05 Feb 2009 07:33:58 -0800 http://www.gossamer-threads.com/lists/nessus/users/33687 I checked the Nessus/Tenable support site and didn't see a scap file for Windows 2008. I noticed that the SCAP files were still in the beta stage. Doe 05 Feb 2009 06:09:22 -0800 http://www.gossamer-threads.com/lists/nessus/users/33686 On Feb 3, 2009, at 5:30 PM, Jason Chambers wrote: > FYI -- I noticed the old values are back along with the new. > > Ex: > > nessus -xP -q host port 03 Feb 2009 17:54:26 -0800 http://www.gossamer-threads.com/lists/nessus/users/33685 George A. Theall wrote: > On Jan 26, 2009, at 1:05 PM, Jason Chambers wrote: > >> FYI.. NTTP should be NNTP ? Below is a comparison between the Ness 03 Feb 2009 14:30:53 -0800 http://www.gossamer-threads.com/lists/nessus/users/33683 Brown, Scott CTR -Navair - Siap wrote: > Good morning. It seems that the URL that I saved for downloading the plugins for my offline server is not wo 02 Feb 2009 11:13:40 -0800 http://www.gossamer-threads.com/lists/nessus/users/33680 Good morning. It seems that the URL that I saved for downloading the plugins for my offline server is not working. I went to this url - https://plu 02 Feb 2009 07:24:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33679 Jones, David H wrote: > This actually segues nicely in to a topic I've been meaning to look in to for a long time but haven't had the time to do so. > 30 Jan 2009 06:12:09 -0800 http://www.gossamer-threads.com/lists/nessus/users/33672 This actually segues nicely in to a topic I've been meaning to look in to for a long time but haven't had the time to do so. I know .nessus is the ne 29 Jan 2009 14:23:41 -0800 http://www.gossamer-threads.com/lists/nessus/users/33669 > We do not _recommend_ using .nbe, because it gives you less context > than the .nessus format, but at this time there is no plan to remove it. I 29 Jan 2009 07:26:20 -0800 http://www.gossamer-threads.com/lists/nessus/users/33668 On Jan 28, 2009, at 10:48 PM, Lachance, François wrote: > Interesting. Your answer makes me wonder what Tenable position is > regarding .NBE outpu 29 Jan 2009 02:21:56 -0800 http://www.gossamer-threads.com/lists/nessus/users/33667 Interesting. Your answer makes me wonder what Tenable position is regarding .NBE output. Is it the same? Thanks, François -----Original Messag 28 Jan 2009 13:48:34 -0800 http://www.gossamer-threads.com/lists/nessus/users/33666 nexact wrote: > Hello, > > I would like to know if .NSR will be deprecated in the future, if yes.. when > ? > Tenable has depreciated it. NSR outpu 28 Jan 2009 12:48:39 -0800 http://www.gossamer-threads.com/lists/nessus/users/33665 Hello, I would like to know if .NSR will be deprecated in the future, if yes.. when ? Thanks. 28 Jan 2009 10:57:36 -0800 http://www.gossamer-threads.com/lists/nessus/users/33664 George A. Theall wrote: > On Jan 28, 2009, at 10:09 AM, Tim Rupp wrote: > >> ok, I see it in the client, but I don't see any actual file with those > 28 Jan 2009 07:46:43 -0800 http://www.gossamer-threads.com/lists/nessus/users/33663 On Jan 28, 2009, at 10:09 AM, Tim Rupp wrote: > ok, I see it in the client, but I don't see any actual file with those > words in it on disk, or a na 28 Jan 2009 07:18:29 -0800 http://www.gossamer-threads.com/lists/nessus/users/33662 ok, I see it in the client, but I don't see any actual file with those words in it on disk, or a nasl script with that Id in it, and I have the most r 28 Jan 2009 07:09:23 -0800 http://www.gossamer-threads.com/lists/nessus/users/33661 Hey Mark, I've had problems like that before too, though not with all unix/linux systems. Ultimately what we ended up doing was using public key aut 28 Jan 2009 05:58:29 -0800 http://www.gossamer-threads.com/lists/nessus/users/33660 On Jan 27, 2009, at 1:55 PM, Tim Rupp wrote: > Was this plugin (remote check for ms09-001) pulled from the feed? I > don't see it in my recent update 27 Jan 2009 18:17:23 -0800 http://www.gossamer-threads.com/lists/nessus/users/33659 Lambert, Mark wrote: > All, > I have having a problem with SSH credentials on an internal Linux > box I'm trying to scan. The box I'm scanning 27 Jan 2009 17:51:56 -0800 http://www.gossamer-threads.com/lists/nessus/users/33658 All, I have having a problem with SSH credentials on an internal Linux box I'm trying to scan. The box I'm scanning is a RedHat box and I can 27 Jan 2009 12:04:27 -0800 http://www.gossamer-threads.com/lists/nessus/users/33657 Was this plugin (remote check for ms09-001) pulled from the feed? I don't see it in my recent update (never saw it to begin with, but it's listed at t 27 Jan 2009 10:55:36 -0800 http://www.gossamer-threads.com/lists/nessus/users/33656 Hello, I've noticed for a while that querying the preferences on the Nessus server produces duplicated PLUGIN_PREFS. Is this a feature or a bug ? N 26 Jan 2009 14:59:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33655 On Jan 26, 2009, at 1:05 PM, Jason Chambers wrote: > FYI.. NTTP should be NNTP ? Below is a comparison between the Nessus > server preferences and m 26 Jan 2009 11:11:32 -0800 http://www.gossamer-threads.com/lists/nessus/users/33654 Hello, FYI.. NTTP should be NNTP ? Below is a comparison between the Nessus server preferences and my last cached values. Regards, --Jason New 26 Jan 2009 10:05:40 -0800 http://www.gossamer-threads.com/lists/nessus/users/33653 I modified a script i use. ------------------BOF------------------------------- #!/bin/bash SERVER_IP='127.0.0.1' SERVER_PORT='1241' USR_NAME='pepe' 23 Jan 2009 06:26:33 -0800 http://www.gossamer-threads.com/lists/nessus/users/33651 James Kelly wrote: > Would it be possible to dump out a list of all Nessus plugins showing id > number in column 1 and description in column 2? Hi Ja 23 Jan 2009 06:21:40 -0800 http://www.gossamer-threads.com/lists/nessus/users/33650 Would it be possible to dump out a list of all Nessus plugins showing id number in column 1 and description in column 2? Jim Kelly _________________ 22 Jan 2009 08:16:06 -0800 http://www.gossamer-threads.com/lists/nessus/users/33649 Hi David, Nessus 3 has a feature where you can specify to not log into a system with user accounts not specified in the credentials. This is under th 21 Jan 2009 11:55:12 -0800 http://www.gossamer-threads.com/lists/nessus/users/33648 On Wednesday 21 January 2009 18:27:17 Jones, David H wrote: > I'm having an issue with Nessus locking out root accounts on AIX servers. IMHO, the co 21 Jan 2009 11:19:33 -0800 http://www.gossamer-threads.com/lists/nessus/users/33647 I'm having an issue with Nessus locking out root accounts on AIX servers. My config seems like this shouldn't be happening: Safe Checks are enabled. 21 Jan 2009 09:27:17 -0800 http://www.gossamer-threads.com/lists/nessus/users/33646 Hello all, I'm wondering if there has been any thought from the nessus team on standardizing the risk factor output for plugins. i know they are all 15 Jan 2009 11:32:43 -0800 http://www.gossamer-threads.com/lists/nessus/users/33645 Brown, Scott CTR -Navair - Siap wrote: > Good morning. My question pertains to stand-alone networks. We are in the process of evaluating Nessus for o 15 Jan 2009 07:44:52 -0800 http://www.gossamer-threads.com/lists/nessus/users/33644 If you check the site there are instructions for downloading plugins for use with a non-Internet connected scanner. To my knowledge there are no limit 15 Jan 2009 07:32:34 -0800 http://www.gossamer-threads.com/lists/nessus/users/33643 Good morning. My question pertains to stand-alone networks. We are in the process of evaluating Nessus for one of our stand-alone systems. If we whe 15 Jan 2009 07:02:24 -0800 http://www.gossamer-threads.com/lists/nessus/users/33642 -------- Original Message -------- Subject: Re: Client could not connect server Date: Tue, 13 Jan 2009 09:09:33 -0500 From: Ron Gula <rgula@tenablesec 13 Jan 2009 06:10:09 -0800 http://www.gossamer-threads.com/lists/nessus/users/33641 Dear Sir/Madam: I had downloaded Nessus3.2.1.1 software for windows version for study using. After I had installed this software I find a problem. 13 Jan 2009 01:24:20 -0800 http://www.gossamer-threads.com/lists/nessus/users/33640 Hello everyone, For 10 years now, the Nessus user base has been supported with the use of mailing lists as a medium to communicate with the communi 12 Jan 2009 09:08:00 -0800 http://www.gossamer-threads.com/lists/nessus/users/33639 On Monday 12 January 2009 01:23:39 Jason Haar wrote: > I haven't tested it, but I think changing the line: > keys = make_list("Vendor", "Version", "Re 12 Jan 2009 09:01:18 -0800 http://www.gossamer-threads.com/lists/nessus/users/33638 It wouldn't be hard to write a plugin to check for a pending reboot or file rename operation. According to this: http://blogs.msdn.com/hansr/archive 12 Jan 2009 06:55:01 -0800 http://www.gossamer-threads.com/lists/nessus/users/33635 Hi there This is the SSH-based DMI check (bios_get_info_ssh.nasl). Two things that dmidecode returns (at least on Linux boxes) that isn't recorded in 11 Jan 2009 16:23:39 -0800 http://www.gossamer-threads.com/lists/nessus/users/33634 Hello : I am using Fedora 8, and trying to install nessus plugins and keep getting the message "tar /opt/nessus/lib/nessus/plugins: not found in archi 11 Jan 2009 11:28:46 -0800 http://www.gossamer-threads.com/lists/nessus/users/33633 On Fri, 09 Jan 2009 09:15:02 -0500 Ron Gula <rgula@tenablesecurity.com> wrote: > Bazy wrote: > > Hello! > > > > We use WSUS in our company for updat 09 Jan 2009 21:40:46 -0800 http://www.gossamer-threads.com/lists/nessus/users/33632 check this out... http://msmvps.com/blogs/athif/archive/2005/09/06/65550.aspx On Fri, Jan 9, 2009 at 7:10 AM, Bazy <bazy@goofy.celuloza.ro> wrote: > 09 Jan 2009 06:20:21 -0800 http://www.gossamer-threads.com/lists/nessus/users/33630