Ill see what I can do. I can hang out in irc from about 19:00 to about 22:00 GMT. Unfortunately due to firewall rules in the company(some of which I designed) I cannot access IRC during the day.
Other ways I can lend a hand is documentation, aswell as basic support, and I also thought the website could do with an FAQ, which would cover basic installation questions etc. As for bug-reporting, well as I said I hope to implement openVAS across a range of servers in the coming weeks. The OS's of these include, RHEL5, Ubuntu Server, and CentOS. On top of that, I ran into a bug today, but it seems to already have been reported, though I was not exactly turned on by the verbosity of that bug report, its ID is 871. The bug report is as follows: >I just completed openVAS scans on 3 large network ranges. There are some >specific concerns I would like to hightlight >in making the report easier to analyse. For all the IPs in the network range >OpenVAS returns the following port results, >SMB: All of them have failed the test. This is documented in the report >SSH: All except the real ssh ports have failed the test but still listed in >the report >HTTP: All except the real web services have failed but is still listed as >empty nikto scan. >It would be great if we can remove these false positives or excessive >information making analysis of results faster >and more effective. The bug I found was that the scan report reported that open office was installed on the target machine when it is not. Here is the entry in the scan: >Reported by NVT "OpenOffice.org <= 2.4.1 vulnerability" >(1.3.6.1.4.1.25623.1.0.90030): >Error getting SMB-Data -> CONNECTION TO 192.168.1.4 FAILED (ERROR >NT_STATUS_CONNECTION_REFUSED) >CVE : CVE-2008-2152 I will keep an eye out on how that bug turns out. Can you tell me who else contributes to the project, and whom is responsible for what? Thanks, Andrew Court IT Security Specialist | CEH | BT Retail - Ireland | E:[email protected] |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899| www.btireland.com -----Original Message----- From: [email protected] on behalf of Jan-Oliver Wagner Sent: Sun 1/18/2009 7:36 PM To: [email protected] Subject: Re: [Openvas-discuss] Brief Introduction Hello Andrew, On Sunday 18 January 2009 00:54:32 [email protected] wrote: > With a view to supporting the project, I was wondering if there was anyway > I could contribute. My c-coding skills are a bit rusty, and so I do not > think I could help too much in software development, however, I open to > suggestions and requests for help. I am just wondering is there any other > way i can contribute? If you could let me know if there is anything you > need or anything you would like looked at, I would be happy to comply. Thanks a lot for you offer! The OpenVAS projects can be supported in many ways. For example, the Compendium could be improved and extended. What also is of great help are detailed bug reports and trying to reproduce incoming bug reports. It is sometimes a time consuming job but it usually does not need high programming skills. All the best Jan -- Dr. Jan-Oliver Wagner | ++49-541-335 08 30 | http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss _______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
