full-disclosure - Scanning the PCs for RPC Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <017D1CFB0EC95A4F8E218DFFCAE616360790EF@ml1.jeraisy.com>
From: nrafi at jeraisy.com (Nadeem Rafi)
Subject: Scanning the PCs for RPC Vulnerability

I have found some faults in the scanning tools available from Foundstone and Microsoft for RPC vulnerable machines. Both of  these tools are not error free. These tools are showing the ip addresses of even those machines which are Windows 9x, Windows98/Sec, Windows ME. Both tools are not free from this error.
And Foundstone's RPC Scan tool is even more error prone. If you even applied all the patches in correct  sequence even then some of my machines are reported as "Vulnerable".

Any body have any experience with these problems or any suggestions please let me know.

Best Regards,

Nadeem Rafi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030903/b5dd9a75/attachment.html