[Openvas-commits] r10635 - in trunk/openvas-plugins: . scripts
scm-commit@wald.intevation.org
scm-commit at wald.intevation.org
Fri Mar 25 15:52:11 CET 2011
Author: chandra
Date: 2011-03-25 15:52:06 +0100 (Fri, 25 Mar 2011)
New Revision: 10635
Added:
trunk/openvas-plugins/scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl
trunk/openvas-plugins/scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl
trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_lin.nasl
trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_win.nasl
trunk/openvas-plugins/scripts/secpod_ibm_lotus_notes_code_exec_vuln_win.nasl
trunk/openvas-plugins/scripts/secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl
trunk/openvas-plugins/scripts/secpod_kerio_products_starttls_cmd_inj_vuln.nasl
trunk/openvas-plugins/scripts/secpod_otrs_information_disclosure_vuln.nasl
trunk/openvas-plugins/scripts/secpod_phpbugtracker_multiple_xss.nasl
trunk/openvas-plugins/scripts/secpod_smartermail_multiple_vuln.nasl
trunk/openvas-plugins/scripts/secpod_spoonftp_retr_cmd_dos_vuln.nasl
Modified:
trunk/openvas-plugins/ChangeLog
trunk/openvas-plugins/scripts/gb_joomla_com_jimtawl_44992.nasl
Log:
Added new plugins
Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/ChangeLog 2011-03-25 14:52:06 UTC (rev 10635)
@@ -1,3 +1,21 @@
+2011-03-25 Chandrashekhar B <bchandra at secpod.com>
+
+ * scripts/secpod_ibm_lotus_notes_code_exec_vuln_win.nasl,
+ scripts/secpod_google_chrome_spdy_dos_vuln_win.nasl,
+ scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl,
+ scripts/secpod_smartermail_multiple_vuln.nasl,
+ scripts/secpod_phpbugtracker_multiple_xss.nasl,
+ scripts/secpod_kerio_products_starttls_cmd_inj_vuln.nasl,
+ scripts/secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl,
+ scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl,
+ scripts/secpod_spoonftp_retr_cmd_dos_vuln.nasl,
+ scripts/secpod_otrs_information_disclosure_vuln.nasl,
+ scripts/secpod_google_chrome_spdy_dos_vuln_lin.nasl:
+ Added new plugins.
+
+ * scripts/gb_joomla_com_jimtawl_44992.nasl:
+ Added CVE.
+
2011-03-25 Veerendra G.G <veerendragg at secpod.com>
* scripts/gb_fedora_2011_3946_xulrunner_fc14.nasl,
Modified: trunk/openvas-plugins/scripts/gb_joomla_com_jimtawl_44992.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_joomla_com_jimtawl_44992.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/gb_joomla_com_jimtawl_44992.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -27,6 +27,7 @@
if (description)
{
script_id(100919);
+ script_cve_id("CVE-2010-4769");
script_bugtraq_id(44992);
script_version ("1.0-$Revision$");
Added: trunk/openvas-plugins/scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,84 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_adobe_flash_player_mem_crptn_vuln_lin_.nasl 14349 2011-03-24 12:12:12 mar $
+#
+# Adobe Flash Player Remote Memory Corruption Vulnerability (Linux)
+#
+# Authors:
+# Antu Sanadi <santu at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(902401);
+ script_version("$Revision: 1.0$");
+ script_cve_id("CVE-2011-0609");
+ script_bugtraq_id(46860);
+ script_tag(name:"cvss_base", value:"9.3");
+ script_tag(name:"risk_factor", value:"Critical");
+ script_name("Adobe Flash Player Remote Memory Corruption Vulnerability (Linux)");
+ desc = "
+ Overview: This host is installed with Adobe Flash Player and is prone to
+ memory corruption vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to an error when handling the 'SWF' file, which allows
+ attackers to execute arbitrary code or cause a denial of service via crafted
+ flash content.
+
+ Impact:
+ Successful exploitation will let attackers to execute arbitrary code or cause
+ a denial of service.
+
+ Impact Level: Application/System
+
+ Affected Software/OS:
+ Adobe Flash Player version 10.2.152.33 and prior on Linux.
+
+ Fix: Upgrade to Adobe Flash Player version 10.2.153.1 or later.
+ For details refer, http://www.adobe.com/downloads/
+
+ References:
+ http://www.adobe.com/support/security/bulletins/apsb11-06.html
+ http://www.adobe.com/support/security/advisories/apsa11-01.html ";
+
+ script_description(desc);
+ script_summary("Check for the version of Adobe Flash Player");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (c) 2011 SecPod");
+ script_family("General");
+ script_dependencies("gb_adobe_flash_player_detect_lin.nasl");
+ script_require_keys("AdobeFlashPlayer/Linux/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+flashVer = get_kb_item("AdobeFlashPlayer/Linux/Ver");
+if(!flashVer){
+ exit(0);
+}
+
+flashVer = ereg_replace(pattern:",", string:flashVer, replace: ".");
+
+## Check for Adobe Flash Player versions 10.2.152.33 and prior.
+if(version_is_less_equal(version:flashVer, test_version:"10.2.152.33")){
+ security_hole(0);
+}
Property changes on: trunk/openvas-plugins/scripts/secpod_adobe_flash_player_mem_crptn_vuln_lin.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,109 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_adobe_prdts_mem_crptn_vuln_win.nasl 14349 2011-03-24 10:25:26Z mar $
+#
+# Adobe Products Remote Memory Corruption Vulnerability (Windows)
+#
+# Authors:
+# Antu Sanadi <santu at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(902400);
+ script_version("$Revision: 1.0$");
+ script_tag(name:"cvss_base", value:"9.3");
+ script_tag(name:"risk_factor", value:"Critical");
+ script_cve_id("CVE-2011-0609");
+ script_bugtraq_id(46860);
+ script_name("Adobe Products Remote Memory Corruption Vulnerability (Windows)");
+ desc = "
+ Overview: This host has Adobe Acrobat or Adobe Reader or Adobe flash Player
+ installed, and is prone to memory corruption vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to an error in handling 'SWF' file in adobe flash
+ player and 'Authplay.dll' in Adobe acrobat/reader. which allows attackers to
+ execute arbitrary code or cause a denial of service via crafted flash
+ content.
+
+ Impact:
+ Successful exploitation will let attackers to corrupt memory and execute
+ arbitrary code on the system with elevated privileges.
+
+ Impact Level: Application/System
+
+ Affected Software/OS:
+ Adobe Flash Player version 10.2.152.33 and prior on Windows
+ Adobe Reader/Acrobat version 9.x to 9.4.2 and 10.x to 10.0.1 on Windows.
+
+ Fix: Upgrade to Adobe Flash Player to 10.2.153.1 or later and upgrade Adobe
+ Reader/Acrobat to 10.0.2
+ For details refer, http://www.adobe.com/
+
+ References:
+ http://www.adobe.com/support/security/bulletins/apsb11-06.html
+ http://www.adobe.com/support/security/advisories/apsa11-01.html ";
+
+ script_description(desc);
+ script_summary("Check for the version of Adobe Acrobat, Reader and Adobe Flash Player");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("General");
+ script_dependencies("secpod_adobe_prdts_detect_win.nasl", "gb_adobe_flash_player_detect_win.nasl");
+ script_require_keys("Adobe/Reader/Win/Ver", "Adobe/Acrobat/Win/Ver",
+ "AdobeFlashPlayer/Win/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+# Check for Adobe Reader
+readerVer = get_kb_item("Adobe/Reader/Win/Ver");
+if(readerVer)
+{
+ if(version_in_range(version:readerVer, test_version:"9.0", test_version2:"9.4.2") ||
+ version_in_range(version:readerVer, test_version:"10.0", test_version2:"10.0.1"))
+ {
+ security_hole(0);
+ exit(0);
+ }
+}
+
+# Check for Adobe Acrobat
+acrobatVer = get_kb_item("Adobe/Acrobat/Win/Ver");
+if(acrobatVer)
+{
+ if(version_in_range(version:acrobatVer, test_version:"9.0", test_version2:"9.4.2") ||
+ version_in_range(version:acrobatVer, test_version:"10.0", test_version2:"10.0.1"))
+ {
+ security_hole(0);
+ exit(0);
+ }
+}
+
+# Check for Adobe Flash Player version <= 10.2.152.33
+flashVer = get_kb_item("AdobeFlashPlayer/Win/Ver");
+if(flashVer)
+{
+ if(version_is_less_equal(version:flashVer, test_version:"10.2.152.33")){
+ security_hole(0);
+ }
+}
Property changes on: trunk/openvas-plugins/scripts/secpod_adobe_prdts_mem_crptn_vuln_win.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_lin.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_lin.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_lin.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,82 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_google_chrome_spdy_dos_vuln_lin.nasl 14435 2011-03-22 11:15:29Z mar $
+#
+# Google Chrome 'SPDY' Denial of Service vulnerability (Linux)
+#
+# Authors:
+# Madhuri D <dmadhuri at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(902358);
+ script_version("$Revision$: 1.0");
+ script_cve_id("CVE-2011-1465");
+ script_tag(name:"cvss_base", value:"5.0");
+ script_tag(name:"risk_factor", value:"Medium");
+ script_name("Google Chrome 'SPDY' Denial Of Service Vulnerability");
+ desc = "
+ Overview: This host is installed with Google Chrome and is prone to Denial
+ Of Service vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to error in 'SPDY' implementation in
+ 'net/http/http_network_transaction.cc', which drains the bodies from SPDY
+ responses.
+
+ Impact:
+ Successful exploitation will allow remote attackers to cause a denial of
+ service by using SPDY servers.
+
+ Impact Level: Apllication
+
+ Affected Software/OS:
+ Google Chrome version prior to 11.0.696.14
+
+ Fix: Upgrade to Google Chrome version 11.0.696.14 or later
+ For updates refer, http://www.google.com/chrome
+
+ References:
+ http://code.google.com/p/chromium/issues/detail?id=75657
+ http://googlechromereleases.blogspot.com/2011/03/dev-channel-update_17.html
+ http://src.chromium.org/viewvc/chrome/trunk/src/net/http/http_network_transaction.cc?r1=77893&r2=77892&pathrev=77893 ";
+
+ script_description(desc);
+ script_summary("Check for the version of Google Chrome");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("Denial of Service");
+ script_dependencies("gb_google_chrome_detect_lin.nasl");
+ script_require_keys("Google-Chrome/Linux/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+chromeVer = get_kb_item("Google-Chrome/Linux/Ver");
+if(!chromeVer){
+ exit(0);
+}
+
+# Check for Google Chrome version < 11.0.696.14
+if(version_is_less(version:chromeVer, test_version:"11.0.696.14")){
+ security_warning(0);
+}
Added: trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_win.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_google_chrome_spdy_dos_vuln_win.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,82 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_google_chrome_spdy_dos_vuln_win.nasl 14435 2011-03-22 10:55:29Z mar $
+#
+# Google Chrome 'SPDY' Denial of Service vulnerability (Windows)
+#
+# Authors:
+# Madhuri D <dmadhuri at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(902357);
+ script_version("$Revision$: 1.0");
+ script_cve_id("CVE-2011-1465");
+ script_tag(name:"cvss_base", value:"5.0");
+ script_tag(name:"risk_factor", value:"Medium");
+ script_name("Google Chrome 'SPDY' Denial Of Service Vulnerability");
+ desc = "
+ Overview: This host is installed with Google Chrome and is prone to Denial
+ Of Service vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to error in 'SPDY' implementation in
+ 'net/http/http_network_transaction.cc', which drains the bodies from SPDY
+ responses.
+
+ Impact:
+ Successful exploitation will allow remote attackers to cause a denial of
+ service by using SPDY servers.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Google Chrome version prior to 11.0.696.14
+
+ Fix: Upgrade to Google Chrome version 11.0.696.14 or later
+ For updates refer, http://www.google.com/chrome
+
+ References:
+ http://code.google.com/p/chromium/issues/detail?id=75657
+ http://googlechromereleases.blogspot.com/2011/03/dev-channel-update_17.html
+ http://src.chromium.org/viewvc/chrome/trunk/src/net/http/http_network_transaction.cc?r1=77893&r2=77892&pathrev=77893 ";
+
+ script_description(desc);
+ script_summary("Check for the version of Google Chrome");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("Denial of Service");
+ script_dependencies("gb_google_chrome_detect_win.nasl");
+ script_require_keys("GoogleChrome/Win/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+chromeVer = get_kb_item("GoogleChrome/Win/Ver");
+if(!chromeVer){
+ exit(0);
+}
+
+# Check for Google Chrome version < 11.0.696.14
+if(version_is_less(version:chromeVer, test_version:"11.0.696.14")){
+ security_warning(0);
+}
Added: trunk/openvas-plugins/scripts/secpod_ibm_lotus_notes_code_exec_vuln_win.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_ibm_lotus_notes_code_exec_vuln_win.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_ibm_lotus_notes_code_exec_vuln_win.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,99 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_ibm_lotus_notes_code_exec_vuln_win.nasl 13685 2011-03-22 11:24:24Z mar $
+#
+# IBM Lotus Notes 'cai' URI and iCal Remote Code Execution Vulnerabilities (Win)
+#
+# Authors:
+# Antu Sanadi <santu at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(902298);
+ script_version("$Revision:1.0 $");
+ script_cve_id("CVE-2011-0912");
+ script_tag(name:"cvss_base", value:"10.0");
+ script_tag(name:"risk_factor", value:"Critical");
+ script_name("IBM Lotus Notes 'cai' URI and iCal Remote Code Execution Vulnerabilities (Win)");
+ desc = "
+ Overview: This host has IBM Lotus Notes installed and is prone to remote code
+ execution vulnerabilities.
+
+ Vulnerability Insight:
+ The flaws are caused due to:
+ - An input validation error when processing the '--launcher.library' switch
+ within a 'cai:' URI, which could allow attackers to load a malicious
+ library.
+ - A buffer overflow error related to 'iCal', which could be exploited by
+ attackers to execute arbitrary code.
+
+ Impact:
+ Successful exploitation will let the attackers to execute arbitrary code in the
+ context of the user running the application.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ IBM Lotus Notes Version 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 on windows
+
+ Fix: Upgrade to IBM Lotus Notes 8.0.2 FP6 or 8.5.1 FP5
+ For updates refer, http://www.ibm.com/software/lotus/products/notes/
+
+ References:
+ http://secunia.com/advisories/43222
+ http://www.vupen.com/english/advisories/2011/0295
+ https://www-304.ibm.com/support/docview.wss?uid=swg21461514 ";
+
+ script_description(desc);
+ script_summary("Check for the version of IBM Lotus Notes");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (c) 2011 SecPod");
+ script_family("General");
+ script_dependencies("secpod_ibm_lotus_notes_detect_win.nasl");
+ script_require_keys("IBM/LotusNotes/Win/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+## Get for IBM Lotus Notes Version
+lotusVer = get_kb_item("IBM/LotusNotes/Win/Ver");
+if(!lotusVer){
+ exit(0);
+}
+
+## Check for IBM Lotus Notes Version 8.0.x before 8.0.2 FP6
+if(lotusVer =~ "8.0")
+{
+ if(version_is_less(version:lotusVer, test_version:"8.0.2.6"))
+ {
+ security_hole(0);
+ exit(0);
+ }
+}
+
+## Check for IBM Lotus Notes Version 8.5.x before 8.5.1 FP5
+if(lotusVer =~ "8.5")
+{
+ if(version_is_less(version:lotusVer, test_version:"8.5.1.5")){
+ security_hole(0);
+ }
+}
Added: trunk/openvas-plugins/scripts/secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,133 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_ipswitch_imail_server_starttls_cmd_inj_vuln.nasl 14383 2011-03-24 15:15:15Z mar $
+#
+# Ipswitch IMail Server STARTTLS Plaintext Command Injection Vulnerability
+#
+# Authors:
+# Sooraj KS <kssooraj at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(901195);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2011-1430");
+ script_bugtraq_id(46767);
+ script_tag(name:"cvss_base", value:"6.8");
+ script_tag(name:"risk_factor", value:"High");
+ script_name("Ipswitch IMail Server STARTTLS Plaintext Command Injection Vulnerability");
+ desc = "
+ Overview: The host is running Ipswitch IMail Server and is prone to
+ plaintext command injection vulnerability.
+
+ Vulnerability Insight:
+ This flaw is caused by an error within the 'STARTTLS' implementation where
+ the switch from plaintext to TLS is implemented below the application's I/O
+ buffering layer, which could allow attackers to inject commands during the
+ plaintext phase of the protocol via man-in-the-middle attacks.
+
+ Impact:
+ Successful exploitation will let the attacker to execute arbitrary commands
+ in the context of the user running the application.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Ipswitch IMail versions 11.03 and Prior.
+
+ Fix: No solution/patch is available as on 24th March, 2011. Information
+ regarding this issue will updated once the solution details are available.
+ For updates refer, http://www.imailserver.com/
+
+ References:
+ http://secunia.com/advisories/43676
+ http://www.vupen.com/english/advisories/2011/060 ";
+
+ script_description(desc);
+ script_summary("Check for the version of Ipswitch IMail Server");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("Web application abuses");
+ script_dependencies("find_service.nes", "smtpserver_detect.nasl");
+ script_require_ports("Services/smtp","Services/pop3","Services/imap",25, 110, 143);
+ exit(0);
+}
+
+
+include("smtp_func.inc");
+include("pop3_func.inc");
+include("imap_func.inc");
+include("version_func.inc");
+
+## Check Vulnerable IMail Server Versions.
+function check_vuln(banner,port)
+{
+ version = eregmatch(pattern: "IMail ([0-9.]+)", string: banner);
+ if(!isnull(version[1]))
+ {
+ if(version_is_less_equal(version: version[1], test_version:"11.03"))
+ {
+ security_hole(port:port);
+ exit(0);
+ }
+ }
+}
+
+## Get SMTP Port
+port = get_kb_item("Services/smtp");
+if(!port) {
+ port = 25;
+}
+
+## Get SMTP Banner
+if(banner = get_smtp_banner(port:port))
+{
+ if("IMail" >< banner) {
+ check_vuln(banner:banner,port:port);
+ }
+}
+
+## Check POP3 Port
+port = get_kb_item("Services/pop3");
+if(!port) {
+ port = 110;
+}
+
+## Get POP3 Baner
+if(banner = get_pop3_banner(port:port))
+{
+ if("IMail" >< banner) {
+ check_vuln(banner:banner,port:port);
+ }
+}
+
+## Check IMAP Port
+port = get_kb_item("Services/imap");
+if(!port) {
+ port = 143;
+}
+
+## Get IMAP Banner
+if(banner = get_imap_banner(port:port))
+{
+ if("IMail" >< banner) {
+ check_vuln(banner:banner,port:port);
+ }
+}
Added: trunk/openvas-plugins/scripts/secpod_kerio_products_starttls_cmd_inj_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_kerio_products_starttls_cmd_inj_vuln.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_kerio_products_starttls_cmd_inj_vuln.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,87 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_kerio_products_starttls_cmd_inj_vuln.nasl 14480 2011-03-24 15:15:15Z mar $
+#
+# Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability
+#
+# Authors:
+# Sooraj KS <kssooraj at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(901194);
+ script_version("$Revision: 1.0 $");
+ script_cve_id("CVE-2011-1506");
+ script_bugtraq_id(46767);
+ script_tag(name:"cvss_base", value:"6.8");
+ script_tag(name:"risk_factor", value:"High");
+ script_name("Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability");
+ desc = "
+ Overview: The host is running Kerio Mail Server/Connect and is prone to
+ plaintext command injection vulnerability.
+
+ Vulnerability Insight:
+ This flaw is caused by an error within the 'STARTTLS' implementation where
+ the switch from plaintext to TLS is implemented below the application's I/O
+ buffering layer, which could allow attackers to inject commands during the
+ plaintext phase of the protocol via man-in-the-middle attacks.
+
+ Impact:
+ Successful exploitation will let the attacker to execute arbitrary commands
+ in the context of the user running the application.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Kerio MailServer versions 6.x
+ Kerio Connect version 7.1.4 build 2985
+
+ Fix: No solution/patch is available as on 23rd March, 2011. Information
+ regarding this issue will updated once the solution details are available.
+ For updates refer, http://www.kerio.com/connect/download
+
+ References:
+ http://secunia.com/advisories/43678
+ http://www.vupen.com/english/advisories/2011/0610 ";
+
+ script_description(desc);
+ script_summary("Check for the version of Kerio Mail Server/Connect");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("Web application abuses");
+ script_dependencies("gb_kerio_mailserver_detect.nasl");
+ script_require_keys("KerioMailServer/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+## Get Kerio Mail Server/Connect Version.
+kerioVer = get_kb_item("KerioMailServer/Ver");
+if(!kerioVer){
+ exit(0);
+}
+
+## Chek for the Kerio Mail Server/Connect Versions
+if(version_in_range(version:kerioVer, test_version:"6.0", test_version2:"6.7.3.patch1") ||
+ version_is_equal(version:kerioVer, test_version:"7.1.4")){
+ security_hole(0);
+}
Added: trunk/openvas-plugins/scripts/secpod_otrs_information_disclosure_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_otrs_information_disclosure_vuln.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_otrs_information_disclosure_vuln.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,90 @@
+##############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_otrs_information_disclosure_vuln.nasl 14436 2011-03-23 13:30:29 mar $
+#
+# Open Ticket Request System (OTRS) Information Disclosure Vulnerability
+#
+# Authors:
+# Madhuri D <dmadhuri at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+################################i###############################################
+
+if(description)
+{
+ script_id(902361);
+ script_version("$Revision$: 1.0");
+ script_tag(name:"cvss_base", value:"5.0");
+ script_tag(name:"risk_factor", value:"Medium");
+ script_cve_id("CVE-2011-1433");
+ script_name("Open Ticket Request System (OTRS) Information Disclosure Vulnerability");
+ desc = "
+ Overview: This host is running Open Ticket Request System (OTRS) and is prone
+ to information disclosure vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to the error in 'AgentInterface' and 'CustomerInterface'
+ components, which place cleartext credentials into the session data in the
+ database.
+
+ Impact:
+ Successful exploitation will allow attackers to obtain sensitive information
+ by reading the _UserLogin and _UserPW fields.
+
+ Impact Level: Application.
+
+ Affected Software:
+ Open Ticket Request System (OTRS) version prior to 3.0.6
+
+ Fix: Upgarde to Open Ticket Request System (OTRS) version 3.0.6 or later
+ For updates refer, http://otrs.org/download/
+
+ References:
+ http://bugs.otrs.org/show_bug.cgi?id=6878
+ http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 ";
+
+ script_description(desc);
+ script_summary("Check for the version of Open Ticket Request System (OTRS)");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (c) 2011 SecPod");
+ script_family("Web application abuses");
+ script_dependencies("secpod_otrs_detect.nasl");
+ exit(0);
+}
+
+
+include("version_func.inc");
+include("http_func.inc");
+
+otrsPort = get_http_port(default:80);
+if(!otrsPort){
+ exit(0);
+}
+
+otrsVer = get_kb_item("www/" + otrsPort + "/OTRS");
+if(!otrsVer){
+ exit(0);
+}
+
+otrsVer = eregmatch(pattern:"^(.+) under (/.*)$", string:otrsVer);
+if(isnull(otrsVer[1])){
+ exit(0);
+}
+
+if(version_is_less(version:otrsVer[1], test_version:"3.0.6")){
+ security_warning(otrsPort);
+}
Added: trunk/openvas-plugins/scripts/secpod_phpbugtracker_multiple_xss.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_phpbugtracker_multiple_xss.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_phpbugtracker_multiple_xss.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,96 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_phpbugtracker_multiple_xss.nasl 13922 2011-03-18 18:16:16Z mar $
+#
+# phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities
+#
+# Authors:
+# Antu Sanadi <santu at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(900275);
+ script_version("$Revision: 1.0$");
+ script_tag(name:"cvss_base", value:"4.3");
+ script_tag(name:"risk_factor", value:"Medium");
+ script_name("phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities");
+ desc = "
+ Overview:
+ This host is running phpBugTracker and is prone to multiple reflected cross-site scripting
+ vulnerabilities.
+
+ Vulnerability Insight:
+ The multiple flaws are due to:
+ - Input passed via the 'form' parameter to the 'query.php' script is not
+ properly sanitized before being returned to the user.
+ - 'newaccount.php' are also vulnerable because they fail to perform filtering
+ when using the REQUEST_URI variable.
+
+ Impact:
+ Successful exploitation will let the attackers to execute arbitrary script code
+ in the browser of an unsuspecting user in the context of the affected site.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ phpBugTracker version 1.0.5
+
+ Fix: No solution or patch is available as on 18th March, 2011. Information
+ regarding this issue will be updated once the solution details are available.
+ For updates refer, http://sourceforge.net/projects/phpbt/files/phpbt/
+
+ References:
+ http://packetstormsecurity.org/files/view/98572/ZSL-2011-4996.txt ";
+
+ script_description(desc);
+ script_summary("Check for phpBugTracker Cross Site Scripting Vulnerability");
+ script_category(ACT_ATTACK);
+ script_copyright("Copyright (c) 2011 SecPod");
+ script_family("Web application abuses");
+ script_dependencies("phpBugTracker_detect.nasl");
+ script_require_ports("Services/www", 80);
+ exit(0);
+}
+
+
+include("http_func.inc");
+include("version_func.inc");
+
+## Get HTTP Port
+phpPort = get_http_port(default:80);
+if(!phpPort){
+ exit(0);
+}
+
+## Get directory from KB
+dir = get_dir_from_kb(port:phpPort, app:"phpBugTracker");
+if(!dir){
+ exit(0);
+}
+
+## Try XSS attack
+sndReq = http_get(item:string(dir, "/query.php?op=doquery&form=1>'><script>" +
+ "alert(document.cookie)</script>"), port:phpPort);
+rcvRes = http_send_recv(port:phpPort, data:sndReq);
+
+## Confirm the attack
+if((">alert(document.cookie)<" >< rcvRes)){
+ security_warning(phpPort);
+}
Added: trunk/openvas-plugins/scripts/secpod_smartermail_multiple_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_smartermail_multiple_vuln.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_smartermail_multiple_vuln.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,88 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_smartermail_multiple_vuln.nasl 14303 2011-03-25 15:15:15Z mar $
+#
+# SmarterMail Multiple Vulnerabilities
+#
+# Authors:
+# Sooraj KS <kssooraj at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(901196);
+ script_version("$Revision: 1.0 $");
+ script_tag(name:"cvss_base", value:"5.0");
+ script_tag(name:"risk_factor", value:"Medium");
+ script_name("SmarterMail Multiple Vulnerabilities");
+ desc = "
+ Overview: This host is running SmarterMail and is prone to multiple
+ vulnerabilities.
+
+ Vulnerability Insight:
+ Input passed in the 'path' parameter to Main/frmStoredFiles.aspx, the 'edit'
+ parameter to UserControls/Popups/frmAddFileStorageFolder.aspx, the
+ 'SubjectBox_SettingText' parameter to Main/Calendar/frmEvent.aspx, the 'url'
+ parameter to UserControls/Popups/frmHelp.aspx, the 'folder' parameter to
+ UserControls/Popups/frmDeleteConfirm.aspx, the 'editfolder' parameter to
+ UserControls/Popups/frmEventGroup.aspx, the 'deletefolder' parameter to
+ UserControls/Popups/frmEventGroup.aspx, and the 'bygroup' parameter to
+ Main/Alerts/frmAlerts.aspx is not properly sanitised before being returned
+ to the user.
+
+ Impact:
+ Successful exploitation could allow attackers to conduct cross site scripting,
+ shell upload and directory traversal attacks.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ SmarterTools SmarterMail versions 7.4 and prior.
+
+ Fix: Upgrade to SmarterTools SmarterMail 8.0 or later,
+ For updates refer, http://www.smartertools.com/smartermail/mail-server-software.aspx
+
+ References:
+ http://secunia.com/advisories/41677/
+ http://secunia.com/advisories/41485/
+ http://www.exploit-db.com/exploits/16955/
+ http://packetstormsecurity.org/files/view/99169/smartermail-xsstraversalshell.txt ";
+
+ script_description(desc);
+ script_summary("Check for the version of SmarterMail");
+ script_category(ACT_GATHER_INFO);
+ script_copyright("Copyright (C) 2011 SecPod");
+ script_family("Web application abuses");
+ script_dependencies("secpod_smartermail_detect.nasl");
+ script_require_keys("SmartMail/Ver");
+ exit(0);
+}
+
+
+include("version_func.inc");
+
+## Get SmarterMail Version from KB
+smVer = get_kb_item("SmartMail/Ver");
+if(!isnull(smVer))
+{
+ ## Check for SmarterMail versions 7.4 and prior
+ if(version_in_range(version:smVer, test_version:"7.0", test_version2:"7.4")) {
+ security_warning(0);
+ }
+}
Property changes on: trunk/openvas-plugins/scripts/secpod_smartermail_multiple_vuln.nasl
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/openvas-plugins/scripts/secpod_spoonftp_retr_cmd_dos_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_spoonftp_retr_cmd_dos_vuln.nasl 2011-03-25 14:26:27 UTC (rev 10634)
+++ trunk/openvas-plugins/scripts/secpod_spoonftp_retr_cmd_dos_vuln.nasl 2011-03-25 14:52:06 UTC (rev 10635)
@@ -0,0 +1,131 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id: secpod_spoonftp_retr_cmd_dos_vuln.nasl 14437 2011-03-22 15:10:17Z mar $
+#
+# SpoonFTP 'RETR' Command Remote Denial of Service Vulnerability
+#
+# Authors:
+# Veerendra G.G <veernedragg at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2011 SecPod, http://www.secpod.com
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+ script_id(900274);
+ script_version("$Revision$: 1.0");
+ script_tag(name:"cvss_base", value:"7.5");
+ script_tag(name:"risk_factor", value:"High");
+ script_name("SpoonFTP 'RETR' Command Remote Denial of Service Vulnerability");
+ desc = "
+ Overview:
+ The host is running SpoonFTP Server and is prone to denial of service
+ vulnerability.
+
+ Vulnerability Insight:
+ The flaw is caused due to an error while parsing 'RETR' command, which
+ can be exploited to crash the FTP service by sending 'RETR' command with
+ an overly long parameter.
+
+ Impact:
+ Successful exploitation will allow attackers to cause a denial of service.
+
+ Impact Level: Application
+
+ Affected Software/OS:
+ Softpedia SpoonFTP 1.2, other versions may also be affected.
+
+ Fix: No solution/patch is available as on 22nd March, 2011. Information
+ regarding this issue will updated once the solution details are available.
+ For updates refer, http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html
+
+ References:
+ http://www.exploit-db.com/exploits/17021/
+ http://www.securityfocus.com/bid/46952/info
+ http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html
+
+ ";
+ script_description(desc);
+ script_summary("Determine if SpoonFTP is prone to denial of service vulnerability");
+ script_category(ACT_DENIAL);
+ script_copyright("Copyright (c) 2011 SecPod");
+ script_family("FTP");
+ script_require_ports("Services/ftp", 21);
+ exit(0);
+}
+
+##
+## The script code starts here
+##
+
+include("ftp_func.inc");
+
+ftpPort = get_kb_item("Services/ftp");
+if(!ftpPort){
+ ftpPort = 21;
+}
+
+## check port status
+if(!get_port_state(ftpPort)){
+ exit(0);
+}
+
+## Confirm the Application installed
+banner = get_ftp_banner(port:ftpPort);
+if("220 SpoonFTP" >!< banner){
+ exit(0);
+}
+
+## Open the socket on port 21. if it fails exit
+soc1 = open_sock_tcp(ftpPort);
+if(!soc1){
+ exit(0);
+}
+
+## Check for the default user name
+user = get_kb_item("ftp/login");
+if(!user){
+ user = "anonymous";
+}
+
+## check for the default password
+pass = get_kb_item("ftp/password");
+if(!pass){
+ pass = string("anonymous");
+}
+
+## Exist if not able to login
+ftplogin = ftp_log_in(socket:soc1, user:user, pass:pass);
+if(!ftplogin){
+ exit(0);
+}
+
+## Send the crafted data
+send(socket:soc1, data:string("RETR ", crap(length: 4000, data:'/\\'),'\r\n'));
+
+## Close the socket after sending exploit
+ftp_close(socket:soc1);
+
+sleep (2);
+
+## Open the socket to confirm FTP server is alive
+soc2 = open_sock_tcp(ftpPort);
+if(!soc2){
+ security_hole(ftpPort);
+ exit(0);
+}
+ftp_close(socket:soc2);
More information about the Openvas-commits
mailing list