[Openvas-discuss] OpenVAS does not appear to be running pluginscorrectly
legacyboy at gmail.com
Sat Mar 6 07:53:09 CET 2010
The SMB login is successful and I also tested it with smbclient just to make
There is not a whole lot of settings to change on the target machine, it's a
standalone XP that is part of a workgroup.
I can see the ms08-067 nasl running against the host, which should trigger
an alert but I never get any thing in the report.
It really looks like the only thing that is working is the port scans.
On Sat, Mar 6, 2010 at 12:29 AM, Chandrashekhar B <bchandra at secpod.com>wrote:
> Hello Dan,
> There were others who had faced similar issue, am going to describe little
> in detail.
> It seems that the login hasn't been successful, the KB item
> SMB/WindowsVersion is set only if the login is successful. To verify if the
> login is successful, look for this security_note in the report,
> "It was possible to log into the remote host using user defined
> login/password combinations"
> If you see, "It was not...", login isn't successful. You can verify your
> credentials once again and also check if access to port 139,445 is there.
> The login can also be cross-verified through "smbclient" tool.
> If all this is fine,
> 1. In "Local Security Settings -> Security Options -> Network access:
> Sharing and security model for local accounts" should be "Classic - local
> users authenticate themselves"
> 2. Make sure that you aren't enforcing NTLM, Signing or Encryption, OpenVAS
> doesn't support these. In openvas-libraries 3.0.3, we introduced NTLM based
> auth, that can be used for NTLM based authentication but not for signing and
> Hope this helps.
> *From:* openvas-discuss-bounces at wald.intevation.org [mailto:
> openvas-discuss-bounces at wald.intevation.org] *On Behalf Of *Dan OConnor
> *Sent:* Saturday, March 06, 2010 11:15 AM
> *To:* openvas-discuss at wald.intevation.org
> *Subject:* [Openvas-discuss] OpenVAS does not appear to be running
> Hi All,
> I have been trying for the last couple of days to get openvas to spit out
> some alerts from plugins.
> My first attempt was a Ubuntu desktop machine (9.04) I installed openvas
> from apt-get, I also added my own openvas-nvt-sync since it's missing from
> the packages.
> It loads up ok, says that all of the plugins are enabled.
> Then I point it at a Windows XP SP2 machine, really it's patched up to SP2
> so there should be more then a few things triggered on it.
> The firewall is off on the machine, and I have the Admin login provided for
> The scan does return results, a few open ports, that it was able to get
> netbios information and it reports that ssh is open,(but it's not).
> There is errors in the openvasd.messages file that say that the key
> SMB/WindowsVersion is missing, I am assuming my problems might have
> something to do with that, but I have no idea how to resolve that or really
> my larger issue.
> Any help is appreciated.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openvas-discuss