[Openvas-devel] False positive on CVE-2003-0042

Jan-Oliver Wagner Jan-Oliver.Wagner at greenbone.net
Tue Oct 28 16:01:26 CET 2014


On Montag, 18. August 2014, Harry Johnston wrote:
> What's the precedent for dealing with known false positives?
> 
> I don't think there's any sensible way to "fix" the test (though I could be
> mistaken) and the false positive only occurs in an edge case, but can we
> add a note or something explaining the circumstances under which the false
> positive occurs, and how to prevent it?
> 
> I've posted the full details here:
> 
> http://harryjohnston.wordpress.com/2014/08/18/why-does-openvas-report-cve-2003-0042-when-my-server-isnt-running-tomcat/
> 
> Please advise. :-)


for the archive: This was answered on openvas-plugins.


-- 
Dr. Jan-Oliver Wagner |  +49-541-335084-0  |  http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner


More information about the Openvas-devel mailing list