Re: [Openvas-discuss] Error Message

2016-09-01 Thread Christian Fischer
Hi, On 09/01/2016 08:02 AM, Παναγιώτης Λεόντιος wrote: > 503 > > Status message: > > Service temporarily down have a look at the following steps which could fix this issue: http://plugins.openvas.org/ova_503.txt -- Christian Fischer | Greenbone Networks GmbH | http://gree

Re: [Openvas-discuss] Error Message

2016-09-03 Thread Christian Fischer
t off-topic hint to this: Run the openvas-certdata-sync after openvas-scapdata-sync as the openvas-certdata-sync is doing some recalculation for CVSS (max_cvss) based on the scapdata db. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück

Re: [Openvas-discuss] Error Message

2016-09-04 Thread Christian Fischer
Hi, just also noticed this: On 09/03/2016 06:01 PM, Reindl Harald wrote: > openvasmd --rebuild > killall -s SIGHUP openvassd First do a SIGHUP to openvassd so it is reloading the NVTs from disc and then do a rebuild of the manager database. Greetings, -- Christian Fischer | Gre

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Christian Fischer
e "Directories used for CGI Scanning" NVT with the OID: 1.3.6.1.4.1.25623.1.0.111038 If this is detected here i could update the NVT in the next few days to also check for PHP in such detected folders. Thanks for reporting this. -- Christian Fischer | Greenbone Networks GmbH | htt

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Christian Fischer
and/or "Directory Scanner" NVTs itself. Will see what i can do here. Thanks again for the report. -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver

Re: [Openvas-discuss] when starting openvasmd: symbol lookup error: openvasmd: undefined symbol: sqlite3_errstr

2016-09-11 Thread Christian Fischer
http://forums.atomicorp.com/viewtopic.php?f=31&t=8471 -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _

Re: [Openvas-discuss] PHP not detected

2016-09-13 Thread Christian Fischer
Hi, On 09/07/2016 06:00 PM, Christian Fischer wrote: > On 09/07/2016 05:02 PM, Jiri K. wrote: >> the "Directories used for CGI Scanning" NVT does not detect that folder, >> but it's easy to add it manually in the Scan Config, so it would solve >> the problem f

Re: [Openvas-discuss] GSA crashes, no log

2016-09-14 Thread Christian Fischer
ne the new logfile remains empty. See an example here: https://stackoverflow.com/questions/36325214/how-does-nginx-restart-after-being-killed-by-log-rotate -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B

Re: [Openvas-discuss] Openvas manager not building

2016-09-19 Thread Christian Fischer
p. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Open

Re: [Openvas-discuss] Openvas manager not building

2016-09-19 Thread Christian Fischer
a hint about the error. -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Ope

Re: [Openvas-discuss] (no subject)

2016-09-20 Thread Christian Fischer
Hi, On 09/20/2016 09:00 AM, Anusooya Jayakandan wrote: > Step 2: Checking OpenVAS Manager ... > ERROR: No OpenVAS Manager (openvasmd) found. > FIX: Please install OpenVAS Manager. the posted output already shows your issue here. -- Christian Fischer | Greenbone Netw

Re: [Openvas-discuss] (no subject)

2016-09-20 Thread Christian Fischer
ame issue. > > http://forums.atomicorp.com/viewtopic.php?f=31&t=8471 > > No solution updated till now. This is a different issue. You only have installed the Scanner (as confirmed by openvas-check-setup) but not the Manager (as also confirmed by openvas-check-setup). Regards,

Re: [Openvas-discuss] Kali OpenVAS Packages Installation

2016-09-20 Thread Christian Fischer
li.org/community/ where you reach the people knowing Kali a little bit better. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver

Re: [Openvas-discuss] when starting openvasmd: symbol lookup error: openvasmd: undefined symbol: sqlite3_errstr

2016-09-21 Thread Christian Fischer
Hi, On 12.09.2016 07:37, Christian Fischer wrote: > Hi, > > On 09/09/2016 10:17 PM, Michael Kriwonos wrote: >> I ran a yum update today on Oracle Linux 6 and suddently openvas-manager >> will not start. > > IIRC the best thing what you can do here is to report

Re: [Openvas-discuss] Service temporarily down

2016-09-27 Thread Christian Fischer
Hi, On 27.09.2016 14:16, Christoph Hodel wrote: > But the result for running a task is always: > "Results of last operation: Start Task: 503 Service temporarily down" the document available here shows the needed steps to get it up again: http://plugins.openvas.org/ova_503.txt ___

Re: [Openvas-discuss] PHP not detected

2016-09-29 Thread Christian Fischer
xes to the Web Mirror NVT today. Now that directory should be also detected correctly if you remove the directory as a cgi dir from the scan config. Again, feedback is very welcome. :-) Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net

Re: [Openvas-discuss] PHP not detected

2016-09-29 Thread Christian Fischer
Sorry, for the follow-up but just want to clarify: On 29.09.2016 14:52, Christian Fischer wrote: > Now that directory should be also detected correctly > if you remove the directory as a cgi dir from the scan config. In this case "now" means after the feed update nex

Re: [Openvas-discuss] when starting openvasmd: symbol lookup error: openvasmd: undefined symbol: sqlite3_errstr

2016-09-30 Thread Christian Fischer
and/or atomic-sqlite-sqlite.x86_64 Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-d

Re: [Openvas-discuss] when starting openvasmd: symbol lookup error: openvasmd: undefined symbol: sqlite3_errstr

2016-10-01 Thread Christian Fischer
Hi, On 10/01/2016 04:29 AM, Reindl Harald wrote: > what's the purpose of package rpms without sane dependencies? thats mostly something you should ask the maintainer of the repository. :-) -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 O

Re: [Openvas-discuss] when starting openvasmd: symbol lookup error: openvasmd: undefined symbol: sqlite3_errstr

2016-10-02 Thread Christian Fischer
s and goes to the repo" attitude yes you already have pointed out your dislike against the atomic repository previously. -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald,

Re: [Openvas-discuss] FP: OpenSSH 'auth_password' Denial of Service Vulnerability

2016-10-02 Thread Christian Fischer
: *snip* PasswordAuthentication no Match User foo PasswordAuthentication yes *snip* which means that your server would be still vulnerable even if the initial connection from OpenVAS has identified "Permission denied (publickey)". Nothing to be done here from my PoV. Regards,

Re: [Openvas-discuss] FP: OpenSSH 'auth_password' Denial of Service Vulnerability

2016-10-02 Thread Christian Fischer
On 10/02/2016 02:55 PM, Reindl Harald wrote: > Am 02.10.2016 um 13:20 schrieb Christian Fischer: >> On 10/02/2016 01:02 PM, Reindl Harald wrote: >>> besides that i doubt on a server responding with "Permission denied >>> (publickey)" (means: no passw

Re: [Openvas-discuss] FP: OpenSSH 'auth_password' Denial of Service Vulnerability

2016-10-06 Thread Christian Fischer
Hi, On 02.10.2016 15:18, Christian Fischer wrote: > On 10/02/2016 02:55 PM, Reindl Harald wrote: >> Am 02.10.2016 um 13:20 schrieb Christian Fischer: >>> On 10/02/2016 01:02 PM, Reindl Harald wrote: >>>> besides that i doubt on a server responding with "Permiss

Re: [Openvas-discuss] Details of 'full and fast ultimate' scan

2016-10-06 Thread Christian Fischer
ng banner / version based stuff with "full and fast" and destructive stuff with "full and fast ultimate". Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Gr

Re: [Openvas-discuss] openvasmd --rebuild hangs

2016-10-10 Thread Christian Fischer
.conf and comment out all "save" statements. Afterwards, stop redis, remove the dump.rdb (e.g. in /var/lib/redis) and start redis again. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germ

Re: [Openvas-discuss] Credentialed Scan fails with secure SSH cipher suites

2016-10-12 Thread Christian Fischer
Hi, On 12.10.2016 14:21, Ok Thx wrote: > Is this a known issue? make sure that you're running a recent libssh 0.7.3 (https://www.libssh.org/) There are a few posts at this ML about that. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks Gmb

Re: [Openvas-discuss] weak ciphers on port 25

2016-10-14 Thread Christian Fischer
g you again once this was committed to the Feed. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lu

Re: [Openvas-discuss] Scans go letargic after a while

2016-10-17 Thread Christian Fischer
tps://lists.wald.intevation.org/pipermail/openvas-discuss/2016-September/010061.html Regards, Christian -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oli

Re: [Openvas-discuss] OpenVAS scanner fix

2016-10-19 Thread Christian Fischer
Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list

Re: [Openvas-discuss] OpenVAS scanner fix

2016-10-19 Thread Christian Fischer
Hi, On 19.10.2016 13:40, Dinesh Manoharan wrote: > I would like to use the db on postgresql how to procedd with that can you > pls guide . the openvas-manager source package (see openvas.org) ships a doc/postgres-HOWTO file explaining the needed steps.

Re: [Openvas-discuss] kb_location and redis.server

2016-10-26 Thread Christian Fischer
on the current trunk without any issues. You're most likely have chosen the wrong location of the config file here. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück,

Re: [Openvas-discuss] Building OpenVAS Using SVN

2016-10-26 Thread Christian Fischer
Hi, On 26.10.2016 18:05, Jacob Hoopes wrote: > HINT: Please see the --v6/7/8/9 command line options to check > other major versions. this hint shows you how to use the openvas-check-setup against the OpenVAS9 betas. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76

Re: [Openvas-discuss] Deleting User + Inheritance not working with postgresql

2016-10-30 Thread Christian Fischer
runk. In this case the Beta releases where released half a year ago so it might have been fixed already. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Ja

Re: [Openvas-discuss] Service temporarily down - status code 503

2016-11-02 Thread Christian Fischer
p://openvas.org/install-source.html -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner

Re: [Openvas-discuss] severity N/A

2016-11-05 Thread Christian Fischer
SL wrapper)" NVT from the "Port scanners" family in your custom scan config. - If your system is not answering to ICMP requests the "Alive Test" option of your Target configuration might be another pitfall: http://docs.greenbone.net/GSM-Manual/gos-3.1/en/scanning.html#cr

Re: [Openvas-discuss] severity N/A

2016-11-06 Thread Christian Fischer
MP requests the "Alive Test" option of your Target configuration might be another pitfall: http://docs.greenbone.net/GSM-Manual/gos-3.1/en/scanning.html#creating-a-target Either configure your system to answer to ICMP requests or configure the "Alive Test" options accordingly. Rega

Re: [Openvas-discuss] renewing openvas client certificates

2016-11-07 Thread Christian Fischer
Hi, On 07.11.2016 11:53, Ralph Schell [Bright] wrote: > if so, how do i go about that? the following document has a few step to renew all internal certificates: http://plugins.openvas.org/ova_503.txt This might help here as well. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C59

Re: [Openvas-discuss] renewing openvas client certificates

2016-11-07 Thread Christian Fischer
already partly incompatible with your older OpenVAS 7 version. After the upgrade the instructions at the linked document should work. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrü

Re: [Openvas-discuss] renewing openvas client certificates

2016-11-07 Thread Christian Fischer
ke a backup? Yes. In general its always advised for every software to make backups before doing any modifications / upgrades. > where do i get the v8 update?? That depends on how you did the installation initially. The OpenVAS8 versions are linked here: http://openvas.org/download.html Regards,

Re: [Openvas-discuss] Service temporarily down - status code 503

2016-11-07 Thread Christian Fischer
e linked documentation is matching the needed steps for the OpenVAS VM available at http://openvas.org/vm.html. They might differ if other distros are used. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrü

Re: [Openvas-discuss] renewing openvas client certificates

2016-11-07 Thread Christian Fischer
as > also do i need to do anything else after running yum upgrade to get v8 > to work? > as this looks more like a question specific to your distro or for the used Atomic repos you might get some info about the needed upgrade steps at: https://forums.atomicorp.com/viewforum.php?

Re: [Openvas-discuss] log_whole_attack = yes logs nothing

2016-11-09 Thread Christian Fischer
gured in your openvassd.conf. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner __

Re: [Openvas-discuss] OpenVAS - Integrated Fuzzing Tool/Frameworks

2016-11-09 Thread Christian Fischer
n also include more scanners by writing your own OSP scanner. A tutorial how to do this is available here: http://docs.greenbone.net/GSM-Manual/gos-3.1/en/osp.html#how-to-write-your-own-osp-wrapper Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbo

Re: [Openvas-discuss] Credential Authentication Failin

2016-11-09 Thread Christian Fischer
get-systems-with-linux-unix Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-disc

Re: [Openvas-discuss] scans take forever - sometimes...

2016-11-09 Thread Christian Fischer
me not. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-disc

Re: [Openvas-discuss] log_whole_attack = yes logs nothing

2016-11-10 Thread Christian Fischer
re the name, pid, date and target of each plugin launched. This is helpful for monitoring and debugging purpose, however this option might make openvassd fill your disk rather quickly. -> man openvassd Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | h

Re: [Openvas-discuss] log_whole_attack = yes logs nothing

2016-11-10 Thread Christian Fischer
Hi, On 10.11.2016 14:07, Fmy Oen wrote: > 2016-11-10 14:16 GMT+02:00 Christian Fischer net>: > >> log_whole_attack is only logging the following into your >> openvassd.messages: >> > > Well, here is what I try to understand: how can I find the reason of erro

Re: [Openvas-discuss] Schedules empty after apparent crash openvasmd

2016-11-14 Thread Christian Fischer
Not sure if this will fix your issue but you still might want to update to the recent components available / listed here: http://openvas.org/install-source.html -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Ge

Re: [Openvas-discuss] Incosistent reports for different OpenVAS users

2016-11-14 Thread Christian Fischer
D) values for their filters. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliv

Re: [Openvas-discuss] Is not working sudo add-apt-repository ppa:mrazavi/openvas

2016-11-16 Thread Christian Fischer
ep to install the latest on Ubuntu. > > Thanks & Regards > Ravi. install instructions are provided at: https://launchpad.net/~mrazavi/+archive/ubuntu/openvas If you're struggling with the package installation steps you should contact a support channel of your distro to get help

Re: [Openvas-discuss] Need Help to install openvas on ubuntu 14.04.

2016-11-16 Thread Christian Fischer
Hi, On 16.11.2016 15:50, Katakam Ravi wrote: > please provide the PPA, where i could get the packages. > With below one i am unable to do it, is there any one ? the link to the PPA was already provided in my last mail... Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Gre

Re: [Openvas-discuss] openvassd stuck at "Reloaded all the NVTs"

2016-11-16 Thread Christian Fischer
iscuss/2016-April/009497.html Without the "Save" statements in your redis.conf this issue should disappear. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460

Re: [Openvas-discuss] Change Domains in email-related checks

2016-11-18 Thread Christian Fischer
ain :example.com SMTP settings To address :postmaster@[AUTO_REPLACED_IP] Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wag

Re: [Openvas-discuss] gsad strict transport security

2016-11-20 Thread Christian Fischer
Strict-Tranport-Security header. --http-sts-max-age= max-age in seconds for HTTP Strict-Tranport-Security header. Defaults to "31536000". Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Os

Re: [Openvas-discuss] Open UDP port only discovered with small Port List

2016-11-21 Thread Christian Fischer
ty Assistant 6.0.5 on a Kali Linux 2016.1 It won't solve your issue but you should note that these are quite outdated components of OpenVAS. Please update to the current components: Libraries 8.0.8 Scanner 5.0.7 Manager 6.0.9 Greenbone Security Assistant (GSA) 6.0.11 Regards, -- Christian

Re: [Openvas-discuss] Open UDP port only discovered with small Port List

2016-11-22 Thread Christian Fischer
the same scan again - and > OpenVAS found the SNMP service. so i guess this is where you can do further research. Somehow the firewall might block / limit the requests from the scanning machine. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://g

Re: [Openvas-discuss] Openvas-discuss Digest, Vol 118, Issue 21

2016-11-23 Thread Christian Fischer
-setup itself will only work with either OpenVAS 8 or the final release of OpenVAS 9. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, D

Re: [Openvas-discuss] Open UDP port only discovered with small Port List

2016-11-23 Thread Christian Fischer
Hi, On 23.11.2016 10:00, Daniel Walker wrote: > Hi, > > On 22.11.2016 13:37, Christian Fischer wrote: >> did not report the service or the UDP port at all? You can see in a >> hosts details (after the scan has finished) which open TCP and UDP ports >> where identified.

Re: [Openvas-discuss] Help me on issue - openvas-scapdata-sync, openvas-certdata-sync

2016-11-23 Thread Christian Fischer
Hi, On 23.11.2016 15:28, Katakam Ravi wrote: > what could be the issue , pls give me hint on this. there are currently issues with the infrastructure hosting the feed servers. Please have some patience until these have been sorted out and try again tomorrow. Regards, -- Christian Fisc

Re: [Openvas-discuss] Open UDP port only discovered with small Port List

2016-11-24 Thread Christian Fischer
Hi, On 24.11.2016 10:41, Daniel Walker wrote: > On 23.11.2016 10:09, Christian Fischer wrote: >> one explanation would be that the firewall is causing a long running UDP >> scan (UDP scans are known to take a quite long time). If the nmap >> scanning process from within Open

Re: [Openvas-discuss] HELP - Problem faced in OpenVAS

2016-11-24 Thread Christian Fischer
ertificates. Have a look at the following steps how to fix that: http://plugins.openvas.org/ova_503.txt You might need to adjust commands to your running linux distribution. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Gr

Re: [Openvas-discuss] Open UDP port only discovered with small Port List

2016-11-24 Thread Christian Fischer
Hi, On 24.11.2016 18:46, Daniel Walker wrote: > On 23.11.2016 11:23, Christian Fischer wrote: > >> there is a "scanner_plugins_timeout" within the Scanners Preferences of >> your Scan Config allowing to raise the timeout. > > Unfortunately, that didn't he

Re: [Openvas-discuss] openvas is not finding threat

2016-12-06 Thread Christian Fischer
n config 4. Infos about the target 5. Output of openvas-check-setup Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Olive

Re: [Openvas-discuss] Modifying a Target after it's in a task?

2016-12-06 Thread Christian Fischer
ort list) you need to work with alterable tasks. When using such alterable tasks you can change the task to another (dummy-)target, then modify the original task and re-assign it back to your task. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | h

Re: [Openvas-discuss] ERROR: Your OpenVAS-8 installation is not yet complete!

2016-12-07 Thread Christian Fischer
server is installed make sure that it is found within your PATH. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliv

Re: [Openvas-discuss] openvas is not finding threat

2016-12-07 Thread Christian Fischer
ensive network > scanning (see http://nmap.org) This is your issue here. You need nmap for the default full'n'fast scan configuration. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Gesc

Re: [Openvas-discuss] ERROR: Your OpenVAS-8 installation is not yet complete!

2016-12-07 Thread Christian Fischer
Hi, On 08.12.2016 06:22, sreenivas patlolla wrote: > */usr/sbin/openvasmd: symbol lookup error: /usr/sbin/openvasmd: undefined > symbol: sqlite3_errstr* have a look at: https://lists.wald.intevation.org/pipermail/openvas-discuss/2016-September/010145.html Regards, -- Christian Fischer

Re: [Openvas-discuss] ERROR: Your OpenVAS-8 installation is not yet complete!

2016-12-07 Thread Christian Fischer
Hi, On 08.12.2016 07:47, sreenivas patlolla wrote: > *FIX: Run 'openvas-mkcert-client -n -i'* and have you done this? Please read the infos you get provided by the openvas-check-setup as these will give you most answers you need. Regards, -- Christian Fisc

Re: [Openvas-discuss] openvas is not finding threat

2016-12-08 Thread Christian Fischer
don't need to install this version. To get further help you could provide the results you get from within the scan report. Also check stuff like the hints pointed out here: https://lists.wald.intevation.org/pipermail/openvas-discuss/2016-November/010277.html Regards, -- Christian Fische

Re: [Openvas-discuss] Openvas9 scanner listen on interface IP address

2016-12-15 Thread Christian Fischer
nix-socket. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Ope

Re: [Openvas-discuss] Openvas9 scanner listen on interface IP address

2016-12-15 Thread Christian Fischer
Hi, On 15.12.2016 11:50, Reindl Harald wrote: > Am 15.12.2016 um 11:48 schrieb Christian Fischer: >> On 15.12.2016 11:40, TN TN wrote: >>> Hi, the latest version of the openvas9-scanner doesn't have the >>> --listen= function. How can I make the service listen

Re: [Openvas-discuss] Openvas9 scanner listen on interface IP address

2016-12-15 Thread Christian Fischer
scanner (openvassd). The manager is still able to listen on an external IP. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr

Re: [Openvas-discuss] Openvas9 scanner listen on interface IP address

2016-12-15 Thread Christian Fischer
s. I currently can't help you with setup related stuff. Either have a look at the provided documentation or wait until some one else is answering you this. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Os

Re: [Openvas-discuss] Weak Signature Algorithm Vulnerability

2016-12-15 Thread Christian Fischer
penvas-discuss] as the other one is used for OpenVAS development specific discussions. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Gru

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-16 Thread Christian Fischer
our Server banner: Microsoft-HTTPAPI Microsoft-IIS Apache $version (Win32) Apache $version (Win64) Side-note: It also looks like you're using a quite outdated Feed. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 1

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-16 Thread Christian Fischer
ate to a current feed and re-run the scan. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. J

Re: [Openvas-discuss] The openvas9 about nmap question

2016-12-19 Thread Christian Fischer
re for example: http://plugins.openvas.org/nasl.php?oid=803574 If you don't want to use them you can stick with 7.31 Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück,

Re: [Openvas-discuss] Client

2016-12-20 Thread Christian Fischer
nice project. I have CCed the openvas-devel mailinglist in my reply where a few additional people might read this. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Gesc

Re: [Openvas-discuss] OpenVAS Check for SSL Weak Ciphers

2016-12-21 Thread Christian Fischer
abs will also mark them as vulnerable starting from 2017 on: https://blog.qualys.com/ssllabs/2016/11/16/announcing-ssl-labs-grading-changes-for-2017 Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück

Re: [Openvas-discuss] weak ciphers on port 25

2016-12-22 Thread Christian Fischer
Hi, On 14.10.2016 16:03, Christian Fischer wrote: > On 02.08.2016 17:54, Reindl Harald wrote: >> and for IMAP/POP3 over TLS things like "CBC ciphers in TLS < 1.2 are >> considered to be vulnerable to the BEAST or Lucky 13 attacks" are >> nonsense too because

Re: [Openvas-discuss] OpenVAS Check for SSL Weak Ciphers

2016-12-23 Thread Christian Fischer
ew NVT (OID: 1.3.6.1.4.1.25623.1.0.108031) reporting this cipher suites separately and only for HTTPS services. The 3DES/DES cipher suites are also showing up as "Medium" ciphers again for every other service. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 490

Re: [Openvas-discuss] Openvas Certifications or training

2016-12-23 Thread Christian Fischer
.openvas.org/professional-services.html Seems SecPod is also providing trainings for OpenVAS. Not quite sure if this is still true. To also document an answer you got on #openvas on IRC: http://www.opensource-training.de/gsm.html is also providing a few trainings in german. Regards, -- Christian Fischer

Re: [Openvas-discuss] Admin permission to see users reports, assets, tasks

2016-12-23 Thread Christian Fischer
is (Super Admin) is available here: http://docs.greenbone.net/GSM-Manual/gos-3.1/en/user_permissions.html#super-admin -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Luk

Re: [Openvas-discuss] Weak Signature Algorithm Vulnerability

2016-12-28 Thread Christian Fischer
able to SHA256 as SHA1 seem to default hashing algorithm. > > NOTE : Also tried using latest version of IIS. > > Any suggestions are much appreciated. i think giving setup / administration support for your webserver is out of the scope of this mailing list. Regards, -- Christian F

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-28 Thread Christian Fischer
Hi, On 28.12.2016 10:24, Sai Ravi wrote: > Still getting the same error even after updating the latest feed. please share the result of "HTTP OS Identification (OID: 1.3.6.1.4.1.25623.1.0.111067)" as asked before. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-28 Thread Christian Fischer
Hi, On 28.12.2016 12:01, Sai Ravi wrote: > Fr your perusal. > Inline image so this scanned system is running a Microsoft-IIS 8.0 and so the OS of that system is detected as Windows. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17,

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-28 Thread Christian Fischer
h banners. Its up to you to research why this scanned system is providing that banner. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliv

Re: [Openvas-discuss] Reg Apache Vulnerabilties

2016-12-28 Thread Christian Fischer
egards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-d

Re: [Openvas-discuss] [openvas-9] "Login failed. Waiting for OMP service to become available."

2016-12-28 Thread Christian Fischer
penVAS9 ) due to the dropped privileges / the chroot. Checking the access permissions / availability of the openvasmd.sock might help here. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Ge

Re: [Openvas-discuss] [Openvas-plugins] Slave feeds sync

2016-12-28 Thread Christian Fischer
e correct ML. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing lis

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-02 Thread Christian Fischer
feed instead of CAPS writing and then you already got this removed. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsfüh

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
ou're so aggressively talking about has been already fixed and is available in a current feed version. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
penVAS 9+) where you get the installed feed version (currently: 201701030753) The latest available feed version of the Community Feed is shown here: http://plugins.openvas.org/ Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
ith you. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mai

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
tection result: cpe:/a:openbsd:openssh:7.2 by SSH Server type > and version (OID: 1.3.6.1.4.1.25623.1.0.10267) > > Installed version: 7.2 > Fixed version: 7.3 it would make sense if you provide your used feed version: GSA: Administration -> NVT Feed (OpenVAS 8 and below) Extras -

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
Hi, On 03.01.2017 18:24, Reindl Harald wrote: > > Am 03.01.2017 um 18:17 schrieb Christian Fischer: >> On 03.01.2017 17:56, Reindl Harald wrote: >>> Am 03.01.2017 um 17:46 schrieb Michael Meyer: >>>> *** Reindl Harald wrote: >>>> >>>&g

Re: [Openvas-discuss] Port 25 weak ciphers

2017-01-03 Thread Christian Fischer
On 03.01.2017 19:13, Reindl Harald wrote: > Am 03.01.2017 um 19:02 schrieb Christian Fischer: >> >> instead of pointing fingers it would really help if you just provide the >> asked information about your feed status as well as the output of the >> NVT

Re: [Openvas-discuss] Openvas installation on Centos and SuSE has errors.

2017-01-05 Thread Christian Fischer
almost successful, but some errors. > Please let me know. For your OpenSUSE installation your pictures are showing that you don't have enough space free on the device. Furthermore it seems you're trying to install a quite outdated and end-of-life version of OpenVAS. Regards, -- Christia

Re: [Openvas-discuss] Assign Additional Resources CPU/Memory to openvasmd

2017-01-07 Thread Christian Fischer
he manager process is using the resources it needs. I think the bottle neck is more likely the sqlite database backend which slows down if multiple scanners are sending data to the manager. Have a look at the postgresql database backend which might help to improve the performance. Regards, --

Re: [Openvas-discuss] Openvas Rsync Issue

2017-01-09 Thread Christian Fischer
You should set RSYNC_PROXY to a hostname:port pair. -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wag

  1   2   3   >