I Need Some Help - Null Session Scan Results
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
I Need Some Help - Null Session Scan Results - 11.Jun.2008 11:35:55 AM
|
|
|
myswifty
Posts: 3
Joined: 11.Jun.2008
Status: offline
|
I ran a null session scan and one of my web servers came back with a full response. It is running Win2K and IIS. I have looked at the settings for null sessions and they are not enabled. When I try to connect via a cmd prompt and I connect - I get access is denied.
I am at a loss as to how the scanner could have gotten through.
I do know that we are using anonymous access for IIS, but I am not sure it that would have permitted it.
Does anyone have any tips?
Thanks.
_____________________________
Thank You So Very Much.
|
|
|
|
|
RE: I Need Some Help - Null Session Scan Results - 11.Jun.2008 11:57:35 AM
|
|
|
DrewE
Posts: 436
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
|
Do you have any Computer Profiles setup for this machine?
_____________________________
Drew Easley - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: I Need Some Help - Null Session Scan Results - 11.Jun.2008 4:04:14 PM
|
|
|
myswifty
Posts: 3
Joined: 11.Jun.2008
Status: offline
|
I am not sure what you are asking? Sorry.
|
|
|
|
|
RE: I Need Some Help - Null Session Scan Results - 11.Jun.2008 4:23:16 PM
|
|
|
DrewE
Posts: 436
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
|
You can find these settings under Configuration -> Settings -> Computer Profiles. Do you have any computers listed here?
Also, does the null scan return accurate results for 'remote' computers just not the machine that GFI is currently installed on?
_____________________________
Drew Easley - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: I Need Some Help - Null Session Scan Results - 12.Jun.2008 1:14:01 PM
|
|
|
myswifty
Posts: 3
Joined: 11.Jun.2008
Status: offline
|
There is nothing defined under computer profiles.
The results are for the remote machine, and not the local.
I am really stumped by this. Null Sessions are disabled in the registry and I cannot open via command prompt.
I am curious as to how GFI 'got through".
|
|
|
|
|
RE: I Need Some Help - Null Session Scan Results - 17.Jun.2008 9:12:15 AM
|
|
|
DrewE
Posts: 436
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
|
GFI Network Security Scanner, using the null scan, will scan a network until it is prompted for a password by the remote machine. If the account logged into the system, or the service account that GFI Network Security Scanner is running as has administrative credentials on the network, the remote machines will not prompt for a password, and GFI can "get through." If, however, GFI Network Security Scanner was run on a workstation machine with no domain admin credentials, you would notice different results.
_____________________________
Drew Easley - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
