Vulnerability assessment (False Positives and Evaluation Method)

bhelman — Fri, 22 Apr 2011 20:47:55 GMT

Is there a good write-up on how the vulnerability assessment is performed and how it actually works? Specifically, we had a web server set up in front of a MSSQL server -- for hosts connecting to the web server from IP segment "A" it worked fine, but hosts from segment "B" caused the creation of "HTTP SQL Injection Attempt " messages in the Threats log. Adding an exception not only fixed the problem for segment "B", but also the other segments that couldn't login in (the web server's page was authenticating against the SQL server).

Re: Vulnerability assessment (False Positives and Evaluation Method)

mharding — Tue, 26 Apr 2011 19:52:49 GMT

I would start with a packet capture, and see what the requests look like.

topic Vulnerability assessment (False Positives and Evaluation Method) in General Topics

Vulnerability assessment (False Positives and Evaluation Method)

Re: Vulnerability assessment (False Positives and Evaluation Method)