CVE-1999-0526 Vulnerbility on W2k8 R2

[Alan Coopersmith]

On 09/23/14 03:59 PM, Duane Fish wrote:
> Did this help at all?

Nope - as best we can tell, this is still the most likely answer:

> And if you can't find any signs of any of those programs, then it's most likely
> a false alarm from your auditor or vulnerability scanner, when they can't figure
> out what software is listening on port 6000, and just make up answers to look
> useful when they're not.

On the other hand, if you don't know what software is running on your systems,
you have a bigger security problem than any scanner can help with.

-- 
	-Alan Coopersmith-              alan.coopersmith at oracle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc