On Montag, 19. Januar 2009, [email protected] wrote: > Other ways I can lend a hand is documentation, aswell as basic support, and I > also thought the website could do with an FAQ, which would cover basic > installation questions etc.
yes, making the web site nicer and add more helpful content is yet another open task. Also we could need managers for mailing lists and the bug tracker, btw ;-) > As for bug-reporting, well as I said I hope to implement openVAS across a > range of servers in the coming weeks. The OS's of these include, RHEL5, > Ubuntu Server, and CentOS. On top of that, I ran into a bug today, but it > seems to already have been reported, though I was not exactly turned on by > the verbosity of that bug report, its ID is 871. The bug report is as follows: > > >I just completed openVAS scans on 3 large network ranges. There are some > >specific concerns I would like to hightlight > >in making the report easier to analyse. For all the IPs in the network range > >OpenVAS returns the following port results, > > >SMB: All of them have failed the test. This is documented in the report > >SSH: All except the real ssh ports have failed the test but still listed in > >the report > >HTTP: All except the real web services have failed but is still listed as > >empty nikto scan. > > >It would be great if we can remove these false positives or excessive > >information making analysis of results faster > >and more effective. > > The bug I found was that the scan report reported that open office was > installed on the target machine when it is not. > > Here is the entry in the scan: > > >Reported by NVT "OpenOffice.org <= 2.4.1 vulnerability" > >(1.3.6.1.4.1.25623.1.0.90030): > > >Error getting SMB-Data -> CONNECTION TO 192.168.1.4 FAILED (ERROR > >NT_STATUS_CONNECTION_REFUSED) > >CVE : CVE-2008-2152 > > I will keep an eye out on how that bug turns out. Could you create a bug report for this one? > Can you tell me who else contributes to the project, and whom is responsible > for what? well, anyone active on the OpenVAS mailing lists, IRC or bug tracker is a contributor. The comitters you see here, but note that the stats do not mean a lot: http://wald.intevation.org/scm/?group_id=29 We have so far no detailed mapping of responsibilities other than Tim Brown is the project contact. Best is to throw ideas into the mailing lists or IRC - the right people will pick up. Best Jan -- Dr. Jan-Oliver Wagner | ++49-541-335 08 30 | http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
