I believe it has to be an administrative scan for Nessus to enumerate the
version of a DLL
Take Care and Have Fun --John
-------------- Original message ----------------------
From: Brad Nelson <[EMAIL PROTECTED]>
> Does this need to be a scan with credentials to work? Without
> credentials how does the plugin determine if the .dll is installed and
> which version is present? thanks, brad
>
> [EMAIL PROTECTED] wrote:
> > I have a problem with a scan of a workstation that has Acrobat 6.0.5
> installed. In my report I see:
> >
> --------------------------------------------------------------------------------
> --------------------------------------------
> > Plugin output :
> >
> > Version 6.0.1.1081 of the Adobe Acrobat distiller is installed as :
> > C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroDistDLL.dll
> >
> > CVE : CVE-2006-3453, CVE-2006-3453, CVE-2006-3453
> > BID : 18943, 18943, 18943
> > Plugin ID : 22035
> >
> --------------------------------------------------------------------------------
> -------------------------------------------
> >
> > Looking at the source code for plugin 22035 I see that
> >
> > Determine where it's installed.
> > key = "SOFTWARE\Classes\Software\Adobe\Acrobat\Distiller";
> >
> > Then determines the version
> > # There's a problem if the version is < 6.0.5.
> > if (!isnull(ver))
> > {
> > if (
> > ver[0] < 6 ||
> > (ver[0] == 6 && ver[1] == 0 && ver[2] < 5)
> > )
> > {
> > if (report_verbosity < 1) report = desc;
> > else
> > {
> > version = string(ver[0], ".", ver[1], ".", ver[2], ".", ver[3]);
> > report = string(
> > desc,
> > "\n\n",
> > "Plugin output :\n",
> > "\n",
> > "Version ", version, " of the Adobe Acrobat distiller is installed as :\n",
> > " ", dll, "\n"
> > );
> > }
> >
> --------------------------------------------------------------------------------
> --------------------------------------------
> > I've manually verified that the acrobat.exe is at version 6.0.5.399, the
> Solution : states to Upgrade to Adobe Acrobat 6.0.5 or later; which the
> workstation has installed.
> > The version of the AcroDistDLL.dll is 6.0.1.1081. Does the plug check the
> version of AcroDistDLL.dll or acrobat.exe?
> >
> > Thank You in advance --John
> > _______________________________________________
> > Nessus mailing list
> > [email protected]
> > http://mail.nessus.org/mailman/listinfo/nessus
> >
> >
>
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
