Tests for ms02-018 IIS security rollup.
Requires smblogin (user level)
attached.
note the addition of as of yet unused kb SMB/XP/ServicePack.
Once MS releases their first sp for xp I expect to use that key.
--
Michael Scheidell
SECNAP Network Security, LLC
(561) 368-9561 [EMAIL PROTECTED]
http://www.secnap.net/
#
# This script was written by Michael Scheidell <scheidell at secnap.net>
#
# See the Nessus Scripts License for details
#
if(description)
{
script_id(90004);
name["english"] = "Cumulative Patch for Internet Information Services (Q319733)";
script_name(english:name["english"]);
desc["english"] = "
Cumulative Patch for Microsoft IIS (Q319733)
Impact of vulnerability: Ten new vulnerabilities, the most
serious of which could enable code of an attacker's choice
to be run on a server.
Recommendation: Customers using any of the affected
products should install the patch immediately.
Maximum Severity Rating: Critical
Affected Software:
Microsoft Internet Information Server 4.0
Microsoft Internet Information Services 5.0
Microsoft Internet Information Services 5.1
See
http://www.microsoft.com/technet/security/bulletin/ms02-018.asp
Risk factor : High";
script_description(english:desc["english"]);
summary["english"] = "Determines whether April 10,2002 IE Cumlutive patch's (Q319733)
are installed";
script_summary(english:summary["english"]);
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2002 Michael Scheidell");
family["english"] = "Windows";
script_family(english:family["english"]);
script_dependencies("netbios_name_get.nasl",
"smb_login.nasl","smb_registry_access.nasl",
"smb_reg_service_pack_W2K.nasl");
script_require_keys("SMB/name", "SMB/login", "SMB/password",
"SMB/registry_access","SMB/WindowsVersion");
script_exclude_keys("SMB/XP/ServicePack");
script_require_ports(139);
exit(0);
}
include("smb_nt.inc");
access = get_kb_item("SMB/registry_access");
if(!access)exit(0);
version = get_kb_item("SMB/WindowsVersion");
if(version >< "5.0")
{
# fixed in Service Pack 3
sp = get_kb_item("SMB/Win2K/ServicePack");
if(ereg(string:sp, pattern:"Service Pack [3-9]"))exit(0);
}
if(version >< "5.1")
{
# fixed in XP service Pack 1
sp = get_kb_item("SMB/XP/ServicePack");
if(sp)exit(0);
}
key = "SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\Q319733";
item = "Comments";
value = registry_get_sz(key:key, item:item);
if(!value)security_hole(139);
