02233

Netværkssikkerhed
Network Security
home

Question 8

Describe which vulnerabilities (and why) are not detected by Nessus?

Nessus can't handle 'error 40', specifically eg. opening of email attachments containing a bad payload. Likewise, if the compromised system doesn't open a port, Nessus is unable to detect the vulnerability. If the system is compromised by something using port-knocking [i91] it might also be impossible to detect the vulnerability.


home