Author: chandra
Date: 2008-10-04 09:54:24 +0200 (Sat, 04 Oct 2008)
New Revision: 1485
Added:
trunk/openvas-plugins/scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl
trunk/openvas-plugins/scripts/gb_adobe_prdts_detect_lin.nasl
Modified:
trunk/openvas-plugins/ChangeLog
Log:
Added new plugins
Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog 2008-10-03 21:16:57 UTC (rev 1484)
+++ trunk/openvas-plugins/ChangeLog 2008-10-04 07:54:24 UTC (rev 1485)
@@ -1,6 +1,11 @@
+2008-10-04 Chandrashekhar B <[EMAIL PROTECTED]>
+ * scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl,
+ scripts/gb_adobe_prdts_detect_lin.nasl:
+ Added new plugins
+
2008-10-03 Thomas Reinke <[EMAIL PROTECTED]>
- * script/freebsd_lighttpd5.nasl script/freebsd_mplayer9.nasl
- script/freebsd_mysql-client0.nasl script/freebsdsa_nd6.nasl
+ * script/freebsd_lighttpd5.nasl script/freebsd_mplayer9.nasl,
+ script/freebsd_mysql-client0.nasl script/freebsdsa_nd6.nasl:
Added new plugins
2008-10-03 Chandrashekhar B <[EMAIL PROTECTED]>
Added: trunk/openvas-plugins/scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl
2008-10-03 21:16:57 UTC (rev 1484)
+++ trunk/openvas-plugins/scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl
2008-10-04 07:54:24 UTC (rev 1485)
@@ -0,0 +1,87 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_adobe_prdts_code_exec_vuln_lin.nasl 298 2008-10-03 16:37:37Z oct $
+#
+# Adobe Reader/Acrobat JavaScript Method Handling Vulnerability (Linux)
+#
+# Authors:
+# Veerendra GG <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800107);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2008-2641");
+ script_bugtraq_id(29908);
+ script_xref(name:"CB-A", value:"08-0105");
+ script_name(english:"Adobe Reader/Acrobat JavaScript Method Handling
Vulnerability (Linux)");
+ desc["english"] = "
+
+ Overview : This host has Adobe Reader/Acrobat installed, which is/are prone
+ to Remote Code Execution Vulnerabilities.
+
+ Vulnerability Insight:
+ The flaw is caused due to an input validation error in a JavaScript method,
+ which could allow attackers to execute arbitrary code by tricking a user
+ into opening a specially crafted PDF document.
+
+ Impact:
+ Successful exploitation allows remote attackers to execute arbitrary code
+ or an attacker could take complete control of an affected system or cause
+ a denial of service condition.
+
+ Impact Level: System
+
+ Affected Software/OS:
+ Adobe Reader version 7.0.9 and prior - Linux(All)
+ Adobe Reader versions 8.0 through 8.1.2 - Linux(All)
+
+ Fix:
+ Apply Security Update mentioned in the advisory from the below link,
+ http://www.adobe.com/support/security/bulletins/apsb08-15.html
+
+ References:
+ http://xforce.iss.net/xforce/xfdb/43307
+ http://www.frsirt.com/english/advisories/2008/1906/products
+ http://www.adobe.com/support/security/bulletins/apsb08-15.html
+
+ CVSS Score:
+ CVSS Base Score : 9.3 (AV:N/AC:M/Au:NR/C:C/I:C/A:C)
+ CVSS Temporal Score : 6.9
+ Risk factor: High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of Adobe Reader/Acrobat");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"Denial of Service");
+ script_dependencies("gb_adobe_prdts_detect_lin.nasl");
+ exit(0);
+}
+
+
+adobeVer = get_kb_item("Adobe/Reader/Linux/Ver");
+if(!adobeVer){
+ exit(0);
+}
+
+if(adobeVer =~ "^(7\.0(\.[0-9])?|(8\.0(\..*)?|8\.1(\.[0-2])?))$"){
+ security_hole(0);
+}
Property changes on:
trunk/openvas-plugins/scripts/gb_adobe_prdts_code_exec_vuln_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_adobe_prdts_detect_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_adobe_prdts_detect_lin.nasl
2008-10-03 21:16:57 UTC (rev 1484)
+++ trunk/openvas-plugins/scripts/gb_adobe_prdts_detect_lin.nasl
2008-10-04 07:54:24 UTC (rev 1485)
@@ -0,0 +1,112 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_adobe_prdts_detect_lin.nasl 0301 2008-10-03 11:21:44Z sep $
+#
+# VMware products version detection (Linux)
+#
+# Authors:
+# Veerendra GG <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800108);
+ script_version("$Revision: 1.0 $");
+ script_name(english:"Adobe products version detection (Linux)");
+ desc["english"] ="
+ Overview : This script retrieves all Adobe Products version and saves
+ those in KB.
+
+ Risk factor : Informational";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Get/Set the versions of Adobe Products");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"General");
+ script_dependencies("gather-package-list.nasl");
+ script_require_keys("ssh/login/uname");
+ exit(0);
+}
+
+
+include("ssh_func.inc");
+
+if("Linux" >!< get_kb_item("ssh/login/uname")){
+ exit(0);
+}
+
+rpmLists = get_kb_list("ssh/*/rpms");
+foreach rpm (rpmLists)
+{
+ if("AdobeReader" >< rpm)
+ {
+ adobeVer = egrep(pattern:"AdobeReader.*$", string:rpm);
+ adobeVer = chomp(adobeVer);
+ adobeVer = ereg_replace(pattern:"AdobeReader_[a-z]+~([.0-9]*).*",
+ string:adobeVer, replace:"\1");
+ if(adobeVer =~ "^[0-9](\.|[0-9]).*"){
+ set_kb_item(name:"Adobe/Reader/Linux/Ver", value:adobeVer);
+ }
+ exit(0);
+ }
+}
+
+sock = ssh_login_or_reuse_connection();
+if(!sock){
+ exit(0);
+}
+
+# If not RPM.
+acroPath = ssh_cmd(socket:sock, cmd:"locate -ir .*Reader/AcroVersion$",
+ timeout:120);
+
+# If thorough test is on
+if("Reader/AcroVersion" >!< acroPath &&
+ "yes" >< get_kb_item("global_settings/thorough_tests"))
+{
+ cmd = "find / -maxdepth 7 -mindepth 3 -xdev -type f -path" +
+ " '*Reader/AcroVersion' -print";
+ acroPath = ssh_cmd(socket:sock, cmd:cmd, timeout:120);
+}
+
+if("Reader/AcroVersion" >!< acroPath)
+{
+ ssh_close_connection();
+ exit(0);
+}
+
+acroPath = split(acroPath);
+foreach path (acroPath)
+{
+ if(ssh_cmd(socket:sock, cmd:"test -f " + chomp(path) + " && echo $?",
+ timeout:120))
+ {
+ adobeVer = ssh_cmd(socket:sock, cmd:"cat " + chomp(path), timeout:120);
+ adobeVer = chomp(adobeVer);
+ adobeVer = ereg_replace(pattern:"([.0-9]*).*", string:adobeVer,
replace:"\1");
+ if(adobeVer)
+ {
+ set_kb_item(name:"Adobe/Reader/Linux/Ver", value:adobeVer);
+ ssh_close_connection();
+ exit(0);
+ }
+ }
+}
+ssh_close_connection();
Property changes on:
trunk/openvas-plugins/scripts/gb_adobe_prdts_detect_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
_______________________________________________
Openvas-commits mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-commits
