Hello all-

Another auditor and I are reviewing a NESSUS report from a group of *nix servers we are auditing right now, that shows a vulnerability called NFS-CD that affects various *nix variants. However, in trying to see if the vulnerability actually does what it claims from the servers it reports the vulnerability existing, it does not work; it just brings us out of the NFS mount and up to the parent directory - which to me perhaps signals a false positive. In just reading about the vulnerability causes my brain to spin-lock as it does not make sense to me - but then again - I like pictures better:

From the NESSUS plugin description: http://www.nessus.org/plugins/index....ingle&id=11357

From CVE: http://cve.mitre.org/cgi-bin/cvename...=CVE-1999-0166

As you can see, this is an older vulnerability. I am wondering if 1) I should ask the NESSUS mailing list about this - wasn't sure, as NESSUS is just reporting what it found and 2) if perhaps this is a false positive for some reason; e.g., patching 3) check to see if the servers - by checking with the SA group - have a partition setup for their NFS mounts.

The servers are running HP-UX 11.i. Also - just curious - does anyone here work with HP-UX?

Thank you in advance!