Author: chandra
Date: 2008-10-24 15:11:55 +0200 (Fri, 24 Oct 2008)
New Revision: 1611
Added:
trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl
trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl
trunk/openvas-plugins/scripts/gb_wireshark_detect_lin.nasl
trunk/openvas-plugins/scripts/gb_wireshark_detect_win.nasl
trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_lin.nasl
trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_win.nasl
Modified:
trunk/openvas-plugins/ChangeLog
Log:
Added new plugins
Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog 2008-10-24 10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/ChangeLog 2008-10-24 13:11:55 UTC (rev 1611)
@@ -1,3 +1,12 @@
+2008-10-24 Chandrashekhar B <[EMAIL PROTECTED]>
+ * scripts/gb_wireshark_mult_vuln_oct08_lin.nasl,
+ scripts/gb_wireshark_mult_vuln_oct08_win.nasl,
+ scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl,
+ scripts/gb_wireshark_detect_lin.nasl,
+ scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl,
+ scripts/gb_wireshark_detect_win.nasl:
+ Added new plugins
+
2008-10-24 Jan-Oliver Wagner <[EMAIL PROTECTED]>
Final cleanups for removing hydra and snmp_portscan.
Added: trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl
2008-10-24 10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl
2008-10-24 13:11:55 UTC (rev 1611)
@@ -0,0 +1,79 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_firefox_ftp_clnt_xss_vuln_lin.nasl 387 2008-10-24 12:26:31Z oct $
+#
+# Firefox Web Browser FTP Client XSS Vulnerability (Linux)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800043);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2008-4723");
+ script_bugtraq_id(31855);
+ script_name(english:"Firefox Web Browser FTP Client XSS Vulnerability
(Linux)");
+ desc["english"] = "
+
+ Overview: The host is installed with Mozilla Firefox browser and is prone
+ to Cross Site Scripting (XSS) Vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to the way browser handles web script or html via
+ ftp://URL for an html document within a JPG, PDF, or TXT files.
+
+ Impact: Successful remote attack result in injection of arbitrary web
+ script or HTML code.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Firefox version 3.0.1 to 3.0.3 on Linux.
+
+ Fix: No solution/patch is available as on 24th October, 2008. Information
+ regarding this issue will be updated once the solution details are available.
+
+ References:
+ http://www.securityfocus.com/bid/31855/exploit
+ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4723
+
+ CVSS Score:
+ CVSS Base Score : 5.8 (AV:N/AC:M/Au:NR/C:P/I:P/A:N)
+ CVSS Temporal Score : 5.2
+ Risk factor: High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of Firefox");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"Misc.");
+ script_dependencies("gb_firefox_detect_lin.nasl");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+# Grep for firefox version 3.0.1 to 3.0.3
+if(version_in_range(version:get_kb_item("Firefox/Linux/Ver"),
+ test_version:"3.0.1", test_version2:"3.0.3")){
+ security_hole(0);
+}
Property changes on:
trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl
2008-10-24 10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl
2008-10-24 13:11:55 UTC (rev 1611)
@@ -0,0 +1,79 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_firefox_ftp_clnt_xss_vuln_win.nasl 387 2008-10-24 12:17:20Z oct $
+#
+# Firefox Web Browser FTP Client XSS Vulnerability (Win)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800042);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2008-4723");
+ script_bugtraq_id(31855);
+ script_name(english:"Firefox Web Browser FTP Client XSS Vulnerability
(Win)");
+ desc["english"] = "
+
+ Overview: The host is installed with Mozilla Firefox browser and is prone
+ to Cross Site Scripting (XSS) Vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to the way browser handles web script or html via
+ ftp://URL for an html document within a JPG, PDF, or TXT files.
+
+ Impact: Successful remote attack result in injection of arbitrary web
+ script or HTML code.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Firefox version 3.0.1 to 3.0.3 on Windows.
+
+ Fix: No solution/patch is available as on 24th October, 2008. Information
+ regarding this issue will be updated once the solution details are available.
+
+ References:
+ http://www.securityfocus.com/bid/31855/exploit
+ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4723
+
+ CVSS Score:
+ CVSS Base Score : 5.8 (AV:N/AC:M/Au:NR/C:P/I:P/A:N)
+ CVSS Temporal Score : 5.2
+ Risk factor: High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of Firefox");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"Misc.");
+ script_dependencies("gb_firefox_detect_win.nasl");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+# Grep for firefox version 3.0.1 to 3.0.3
+if(version_in_range(version:get_kb_item("Firefox/Win/Ver"),
+ test_version:"3.0.1", test_version2:"3.0.3")){
+ security_hole(0);
+}
Property changes on:
trunk/openvas-plugins/scripts/gb_firefox_ftp_clnt_xss_vuln_win.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_wireshark_detect_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_wireshark_detect_lin.nasl 2008-10-24
10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_wireshark_detect_lin.nasl 2008-10-24
13:11:55 UTC (rev 1611)
@@ -0,0 +1,67 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_wireshark_detect_lin.nasl 376 2008-10-23 09:32:36Z oct $
+#
+# Wireshark Version Detection (Linux)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800039);
+ script_version("Revision: 1.0 ");
+ script_name(english:"Wireshark Version Detection (Linux)");
+ desc["english"] = "
+ Overview: This script finds the Wireshark installed version on Linux
+ and saves the version in KB.
+
+ Risk factor: Informational";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Set the Version of Wireshark in KB");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"General");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+sock = ssh_login_or_reuse_connection();
+if(!sock){
+ exit(0);
+}
+
+wiresharkName = find_file(file_name:"wireshark", file_path:"/", useregex:TRUE,
+ regexpar:"$", sock:sock);
+foreach binaryName (wiresharkName)
+{
+ sharkVer = get_bin_version(full_prog_name:chomp(binaryName),
version_argv:"-v",
+ ver_pattern:"wireshark ([0-9.]+)", sock:sock);
+ if(sharkVer)
+ {
+ set_kb_item(name:"Wireshark/Linux/Ver", value:sharkVer[1]);
+ ssh_close_connection();
+ exit(0);
+ }
+}
+ssh_close_connection();
Property changes on: trunk/openvas-plugins/scripts/gb_wireshark_detect_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_wireshark_detect_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_wireshark_detect_win.nasl 2008-10-24
10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_wireshark_detect_win.nasl 2008-10-24
13:11:55 UTC (rev 1611)
@@ -0,0 +1,59 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_wireshark_detect_win.nasl 376 2008-10-23 09:22:01Z oct $
+#
+# Wireshark Version Detection (Windows)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800038);
+ script_version("Revision: 1.0 ");
+ script_name(english:"Wireshark Version Detection (Windows)");
+ desc["english"] = "
+ Overview: This script finds the Wireshark installed version on Windows
+ and saves the version in KB.
+
+ Risk factor: Informational";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Set the Version of Wireshark in KB");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"General");
+ script_dependencies("secpod_reg_enum.nasl");
+ script_require_keys("SMB/WindowsVersion");
+ exit(0);
+}
+
+
+include("smb_nt.inc");
+
+if(!get_kb_item("SMB/WindowsVersion")){
+ exit(0);
+}
+
+wiresharkVer = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion"
+
+ "\Uninstall\Wireshark",
item:"DisplayVersion");
+if(wiresharkVer){
+ set_kb_item(name:"Wireshark/Win/Ver", value:wiresharkVer);
+}
Property changes on: trunk/openvas-plugins/scripts/gb_wireshark_detect_win.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_lin.nasl
2008-10-24 10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_lin.nasl
2008-10-24 13:11:55 UTC (rev 1611)
@@ -0,0 +1,90 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_wireshark_mult_vuln_oct08_lin.nasl 376 2008-10-23 13:09:00Z oct $
+#
+# Wireshark Multiple Vulnerabilities - Oct08 (Linux)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800041);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2008-4680", "CVE-2008-4681", "CVE-2008-4682",
+ "CVE-2008-4683", "CVE-2008-4684", "CVE-2008-4685");
+ script_bugtraq_id(31838);
+ script_name(english:"Wireshark Multiple Vulnerabilities - Oct08 (Linux)");
+ desc["english"] = "
+
+ Overview: The Remote host is installed with Wireshark, and is prone to
+ multiple vulnerabilities.
+
+ Vulnerability Insight:
+ The multiple flaws are due to,
+ a. an error within the Bluetooth ACL dissector, PRP or MATE post dissector.
+ Versions 0.99.7 through 1.0.3 are affected by this vulnerability.
+ b. an error within the Q.931 dissector. Versions 0.10.3 through 1.0.3
+ are affected by this vulnerability.
+ c. an uninitialized data structures within the Bluetooth RFCOMM and USB
+ Request Block (URB) dissector. Versions 0.99.7 through 1.0.3 are
+ affected by this vulnerability.
+
+ Impact:
+ Successful attacks may cause the application to crash via specially
+ crafted packets.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Wireshark versions prior to 1.0.4 on Linux
+
+ Fix: Upgrade to Wireshark 1.0.4
+ http://www.wireshark.org/download.html
+
+ References:
+ http://www.wireshark.org/security/wnpa-sec-2008-06.html
+
+ CVSS Score:
+ CVSS Base Score : 7.1 (AV:N/AC:M/Au:NR/C:N/I:N/A:C)
+ CVSS Temporal Score : 5.3
+ Risk factor: High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of Wireshark");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"Denial of Service");
+ script_dependencies("gb_wireshark_detect_lin.nasl");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+sharkVer = get_kb_item("Wireshark/Linux/Ver");
+if(!sharkVer){
+ exit(0);
+}
+
+if(version_in_range(version:sharkVer, test_version:"0.99.2",
+ test_version2:"1.0.3")){
+ security_hole(0);
+}
Property changes on:
trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_win.nasl
2008-10-24 10:10:37 UTC (rev 1610)
+++ trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_win.nasl
2008-10-24 13:11:55 UTC (rev 1611)
@@ -0,0 +1,90 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: gb_wireshark_mult_vuln_oct08_win.nasl 376 2008-10-23 12:18:50Z oct $
+#
+# Wireshark Multiple Vulnerabilities - Oct08 (Windows)
+#
+# Authors:
+# Chandan S <[EMAIL PROTECTED]>
+#
+# Copyright:
+# Copyright (c) 2008 Intevation GmbH, http://www.intevation.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(800040);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2008-4680", "CVE-2008-4681", "CVE-2008-4682",
+ "CVE-2008-4683", "CVE-2008-4684", "CVE-2008-4685");
+ script_bugtraq_id(31838);
+ script_name(english:"Wireshark Multiple Vulnerabilities - Oct08 (Windows)");
+ desc["english"] = "
+
+ Overview: The Remote host is installed with Wireshark, and is prone to
+ multiple security vulnerabilities.
+
+ Vulnerability Insight:
+ Multiple flaws are due to,
+ a. an error within the Bluetooth ACL dissector, PRP or MATE post dissector.
+ Versions 0.99.2 through 1.0.3 are affected by this vulnerability.
+ b. an error within the Q.931 dissector. Versions 0.10.3 through 1.0.3
+ are affected by this vulnerability.
+ c. an uninitialized data structures within the Bluetooth RFCOMM and USB
+ Request Block (URB) dissector. Versions 0.99.7 through 1.0.3 are
+ affected by this vulnerabiliy.
+
+ Impact:
+ Successful attacks may cause the application to crash via specially
+ crafted packets.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Wireshark versions prior to 1.0.4 on Windows
+
+ Fix: Upgrade to Wireshark 1.0.4
+ http://www.wireshark.org/download.html
+
+ References:
+ http://www.wireshark.org/security/wnpa-sec-2008-06.html
+
+ CVSS Score:
+ CVSS Base Score : 7.1 (AV:N/AC:M/Au:NR/C:N/I:N/A:C)
+ CVSS Temporal Score : 5.3
+ Risk factor: High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of Wireshark");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2008 Intevation GmbH");
+ script_family(english:"Denial of Service");
+ script_dependencies("gb_wireshark_detect_win.nasl");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+sharkVer = get_kb_item("Wireshark/Win/Ver");
+if(!sharkVer){
+ exit(0);
+}
+
+if(version_in_range(version:sharkVer, test_version:"0.99.2",
+ test_version2:"1.0.3")){
+ security_hole(0);
+}
Property changes on:
trunk/openvas-plugins/scripts/gb_wireshark_mult_vuln_oct08_win.nasl
___________________________________________________________________
Name: svn:executable
+ *
_______________________________________________
Openvas-commits mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-commits
