[Openvas-commits] r3397 - in trunk/openvas-plugins: . scripts
scm-commit@wald.intevation.org
scm-commit at wald.intevation.org
Mon May 18 09:48:31 CEST 2009
Author: chandra
Date: 2009-05-18 09:48:30 +0200 (Mon, 18 May 2009)
New Revision: 3397
Added:
trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl
trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl
Modified:
trunk/openvas-plugins/ChangeLog
trunk/openvas-plugins/cve_current.txt
Log:
Added new plugins
Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog 2009-05-18 07:37:31 UTC (rev 3396)
+++ trunk/openvas-plugins/ChangeLog 2009-05-18 07:48:30 UTC (rev 3397)
@@ -1,4 +1,9 @@
2009-05-18 Chandrashekhar B <bchandra at secpod.com>
+ * scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl,
+ scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl:
+ Added new plugins
+
+2009-05-18 Chandrashekhar B <bchandra at secpod.com>
* scripts/gb_memcached_detect.nasl,
scripts/gb_grabit_bof_vuln.nasl,
scripts/gb_openfire_sec_bypass_vuln_may09.nasl,
Modified: trunk/openvas-plugins/cve_current.txt
===================================================================
--- trunk/openvas-plugins/cve_current.txt 2009-05-18 07:37:31 UTC (rev 3396)
+++ trunk/openvas-plugins/cve_current.txt 2009-05-18 07:48:30 UTC (rev 3397)
@@ -32,5 +32,11 @@
2009-05-18 - 2009-05-24
CVE-2009-1510 SecPod
+CVE-2009-1642 SecPod
+CVE-2009-1641 SecPod
+CVE-2009-1645 SecPod
+CVE-2009-1646 SecPod
+
+
Added: trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl 2009-05-18 07:37:31 UTC (rev 3396)
+++ trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl 2009-05-18 07:48:30 UTC (rev 3397)
@@ -0,0 +1,115 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_vmware_prdts_mult_vuln_lin_apr09.nasl 1506 2009-05-18 13:20:21Z may $
+#
+# VMware Products Multiple Vulnerabilities (Linux) Apr09
+#
+# Authors:
+# Sujit Ghosal <sghosal at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2009 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(900703);
+ script_version("$Revision: 1.1 $");
+ script_cve_id("CVE-2008-4916", "CVE-2008-3761", "CVE-2009-1146", "CVE-2009-1147",
+ "CVE-2009-0909", "CVE-2009-0910", "CVE-2009-0177", "CVE-2009-1244");
+ script_bugtraq_id(34373, 34471);
+ script_name(english:"VMware Products Multiple Vulnerabilities (Linux) Apr09");
+ desc["english"] = "
+
+ Overview : The host is installed with VMWare products and are prone to
+ Multiple Vulnerabilities.
+
+ Vulnerability Insight:
+ For detailed information of the multiple vulnerabilities please refer to the
+ links provided in references.
+
+ Impact: Successful exploitation will let the attacker cause denial of service,
+ local password information disclosure, arbitrary code execution, access to shared
+ resources or heap overflow.
+
+ Impact Level: System/Application
+
+ Affected Software/OS:
+ VMware Workstation 6.5.1 and prior
+ VMware Player 2.5.1 and prior
+ VMware Server 2.0.1 and prior
+
+ Fix : Upgrade your VMWares according to the below link.
+ http://lists.vmware.com/pipermail/security-announce/2009/000054.html
+
+ References:
+ http://www.vupen.com/english/advisories/2009/0944
+ http://www.vmware.com/security/advisories/VMSA-2009-0005.html
+ http://www.vmware.com/security/advisories/VMSA-2009-0006.html
+ http://lists.vmware.com/pipermail/security-announce/2009/000055.html
+
+ CVSS Score:
+ CVSS Base Score : 10.0 (AV:N/AC:L/Au:NR/C:C/I:C/A:C)
+ CVSS Temporal Score : 7.4
+ Risk factor : High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of VMware Products");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2009 SecPod");
+ script_family(english:"Denial of Service");
+ script_dependencies("gb_vmware_prdts_detect_lin.nasl");
+ script_require_keys("VMware/Linux/Installed");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+if(!get_kb_item("VMware/Linux/Installed")){
+ exit(0);
+}
+
+# Check for VMware Player
+vmplayerVer = get_kb_item("VMware/Player/Linux/Ver");
+if(vmplayerVer != NULL)
+{
+ if(version_is_less_equal(version:vmplayerVer, test_version:"2.5.1")){
+ security_hole(0);
+ }
+ exit(0);
+}
+
+# Check for VMware Workstation
+vmworkstnVer = get_kb_item("VMware/Workstation/Linux/Ver");
+if(vmworkstnVer != NULL)
+{
+ if(version_is_less_equal(version:vmworkstnVer, test_version:"6.5.1")){
+ security_hole(0);
+ }
+ exit(0);
+}
+
+# Check for VMware Server
+vmserverVer = get_kb_item("VMware/Server/Linux/Ver");
+if(vmserverVer != NULL)
+{
+ if(version_in_range(version:vmserverVer, test_version:"1.0", test_version2:"1.0.8") ||
+ version_in_range(version:vmserverVer, test_version:"2.0", test_version2:"2.0.0")){
+ security_hole(0);
+ }
+ exit(0);
+}
Property changes on: trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_lin_apr09.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl 2009-05-18 07:37:31 UTC (rev 3396)
+++ trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl 2009-05-18 07:48:30 UTC (rev 3397)
@@ -0,0 +1,115 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_vmware_prdts_mult_vuln_win_apr09.nasl 1506 2009-05-18 13:20:21Z may $
+#
+# VMware Products Multiple Vulnerabilities (Win) Apr09
+#
+# Authors:
+# Sujit Ghosal <sghosal at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2009 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(900704);
+ script_version("$Revision: 1.1 $");
+ script_cve_id("CVE-2008-4916", "CVE-2008-3761", "CVE-2009-1146", "CVE-2009-1147",
+ "CVE-2009-0909", "CVE-2009-0910", "CVE-2009-0177", "CVE-2009-1244");
+ script_bugtraq_id(34373, 34471);
+ script_name(english:"VMware Products Multiple Vulnerabilities (Win) Apr09");
+ desc["english"] = "
+
+ Overview : The host is installed with VMWare products and are prone to
+ Multiple Vulnerabilities.
+
+ Vulnerability Insight:
+ For detailed information of the multiple vulnerabilities please refer to the
+ links provided in references.
+
+ Impact: Successful exploitation will let the attacker cause denial of service,
+ local password information disclosure, arbitrary code execution, access to shared
+ resources or heap overflow.
+
+ Impact Level: System/Application
+
+ Affected Software/OS:
+ VMware Workstation 6.5.1 and prior
+ VMware Player 2.5.1 and prior
+ VMware Server 2.0.1 and prior
+
+ Fix : Upgrade your VMWares according to the below link.
+ http://lists.vmware.com/pipermail/security-announce/2009/000054.html
+
+ References:
+ http://www.vupen.com/english/advisories/2009/0944
+ http://www.vmware.com/security/advisories/VMSA-2009-0005.html
+ http://www.vmware.com/security/advisories/VMSA-2009-0006.html
+ http://lists.vmware.com/pipermail/security-announce/2009/000055.html
+
+ CVSS Score:
+ CVSS Base Score : 10.0 (AV:N/AC:L/Au:NR/C:C/I:C/A:C)
+ CVSS Temporal Score : 7.4
+ Risk factor : High";
+
+ script_description(english:desc["english"]);
+ script_summary(english:"Check for the version of VMware Products");
+ script_category(ACT_GATHER_INFO);
+ script_copyright(english:"Copyright (C) 2009 SecPod");
+ script_family(english:"Denial of Service");
+ script_dependencies("gb_vmware_prdts_detect_win.nasl");
+ script_require_keys("VMware/Win/Installed");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+if(!get_kb_item("VMware/Win/Installed")){
+ exit(0);
+}
+
+# Check for VMware Player
+vmplayerVer = get_kb_item("VMware/Player/Win/Ver");
+if(vmplayerVer != NULL)
+{
+ if(version_is_less_equal(version:vmplayerVer, test_version:"2.5.1")){
+ security_hole(0);
+ }
+ exit(0);
+}
+
+# Check for VMware Workstation
+vmworkstnVer = get_kb_item("VMware/Workstation/Win/Ver");
+if(vmworkstnVer != NULL)
+{
+ if(version_is_less_equal(version:vmworkstnVer, test_version:"6.5.1")){
+ security_hole(0);
+ }
+ exit(0);
+}
+
+# Check for VMware Server
+vmserverVer = get_kb_item("VMware/Server/Win/Ver");
+if(vmserverVer != NULL)
+{
+ if(version_in_range(version:vmserverVer, test_version:"1.0", test_version2:"1.0.8") ||
+ version_in_range(version:vmserverVer, test_version:"2.0", test_version2:"2.0.0")){
+ security_hole(0);
+ }
+ exit(0);
+}
Property changes on: trunk/openvas-plugins/scripts/secpod_vmware_prdts_mult_vuln_win_apr09.nasl
___________________________________________________________________
Name: svn:executable
+ *
More information about the Openvas-commits
mailing list