Re: [Openvas-discuss] XML error when exporting CPE definitions

[Raphael Grewe]

Hi Christian,

omp is old and will be replaced with the new gvm-tools.
You can find instructions how to use the tools and the downloadlink
here:

https://bitbucket.org/greenbone/gvm-tools

After successful installation you can use this command for equivalent
result:
gvm-cli tls --hostname HOSTNAME --gmp-username USER --gmp-password PASS
-X ""

If you running into problems please tell us.

Best regards
Raphael Grewe

On Fri, 9 Jun 2017 11:05:22 +
"Ebert, Christian"  wrote:

> Hi everyone,
> 
>  
> 
> We use OpenVAS 8 with Debian 9.
> 
>  
> 
> I try to export the CPE definitions to xml using the statement:
> 
>  
> 
> omp --username=$ADM --password=$ADMPW -iX ""
> 
>  
> 
> Basically it works fine. I get a XML output with the CPE definitions.
> 
>  
> 
> But:
> 
> (Part of the XML-Result)
> 
>  
> 
>id="cpe:/a:chialab_&_channelweb:bedita:3.0.1.2550_"betula"">
> 
> 
> 
>   
> 
> 
> 
>  
> cpe:/a:chialab_&_channelweb:bedita:3.0.1.2550_"betula" name>
> 
>  
> 
> When filling the , the ampersand and the quote inside the name
> are escaped. But in  they are not.
> 
>  
> 
> So all XML tools fail, when trying to process this XML-file.
> 
>  
> 
> Fixing all these missing quotes with an editor helps. 
> 
>  
> 
> Could somebody look at this, please?
> 
>  
> 
> Best regards
> 
>  
> 
> Christian Ebert
> 
> Chief Security Analyst, CISM, T.I.S.P.
> 
> Head of Penetration Testing
> 
>  
> 
> QSC AG
> 
> Mathias-Brüggen-Straße 55
> 
> 50829 Köln
> 
>  
> 
> T   +49 221 669-8950
> 
> F   +49 221 669-85950
> 
> M   +49 163 6698950
> 
> christian.eb...@qsc.de
> 
> http://  www.qsc.de 
> 
>  
> 
> Besuchen Sie auch unser Blog unter  
> http://blog.qsc.de
> 
> 
> Bitte finden Sie hier die handelsrechtlichen Pflichtangaben:
> 
>   http://www.qsc.de/pflichtangaben
> 
>  
> 

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] XML error when exporting CPE definitions

[Michael . Eissele]

Dear Christian,

thank you for bringing this to our attention,
we are looking into this and have created an internal ticket.
Thank you very much.

Cheers, Michael.


On 09.06.2017 13:05, Ebert, Christian wrote:

Hi everyone,

We use OpenVAS 8 with Debian 9.

I try to export the CPE definitions to xml using the statement:

omp --username=$ADM --password=$ADMPW -iX ""

Basically it works fine. I get a XML output with the CPE definitions.

But:

(Part of the XML-Result)

  



  




cpe:/a:chialab_&_channelweb:bedita:3.0.1.2550_"betula"

When filling the , the ampersand and the quote inside the name
are escaped. But in  they are not.

So all XML tools fail, when trying to process this XML-file.

Fixing all these missing quotes with an editor helps.

Could somebody look at this, please?

Best regards

Christian Ebert

Chief Security Analyst, CISM, T.I.S.P.

Head of Penetration Testing

QSC AG

Mathias-Brüggen-Straße 55

50829 Köln

T +49 221 669-8950

F +49 221 669-85950

M +49 163 6698950

christian.eb...@qsc.de [1]

http://www.qsc.de [2]

Besuchen Sie auch unser Blog unter http://blog.qsc.de [3]

Bitte finden Sie hier die handelsrechtlichen Pflichtangaben:

http://www.qsc.de/pflichtangaben [4]



Links:
--
[1] http://webmail.dn-systems.net/christian.eb...@qsc.de
[2] http://www.qsc.de/
[3] http://blog.qsc.de/
[4] http://www.qsc.de/pflichtangaben

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss


___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] XML error when exporting CPE definitions

[Ebert, Christian]

Hi everyone,

 

We use OpenVAS 8 with Debian 9.

 

I try to export the CPE definitions to xml using the statement:

 

omp --username=$ADM --password=$ADMPW -iX ""

 

Basically it works fine. I get a XML output with the CPE definitions.

 

But:

(Part of the XML-Result)

 

  



  



 
cpe:/a:chialab_&_channelweb:bedita:3.0.1.2550_"betula"

 

When filling the , the ampersand and the quote inside the name are
escaped. But in  they are not.

 

So all XML tools fail, when trying to process this XML-file.

 

Fixing all these missing quotes with an editor helps. 

 

Could somebody look at this, please?

 

Best regards

 

Christian Ebert

Chief Security Analyst, CISM, T.I.S.P.

Head of Penetration Testing

 

QSC AG

Mathias-Brüggen-Straße 55

50829 Köln

 

T   +49 221 669-8950

F   +49 221 669-85950

M   +49 163 6698950

christian.eb...@qsc.de

http://  www.qsc.de 

 

Besuchen Sie auch unser Blog unter   http://blog.qsc.de


Bitte finden Sie hier die handelsrechtlichen Pflichtangaben:

  http://www.qsc.de/pflichtangaben

 



smime.p7s
Description: S/MIME cryptographic signature
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss