[Openvas-commits] r12203 - in trunk/openvas-plugins: . scripts

scm-commit@wald.intevation.org scm-commit at wald.intevation.org
Mon Nov 28 11:58:25 CET 2011


Author: antu123
Date: 2011-11-28 11:58:19 +0100 (Mon, 28 Nov 2011)
New Revision: 12203

Modified:
   trunk/openvas-plugins/ChangeLog
   trunk/openvas-plugins/scripts/gb_ms08-024.nasl
Log:
Fixed the FP.(when IE 8.x is installed with win2k3 (sp2))

Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog	2011-11-28 07:31:04 UTC (rev 12202)
+++ trunk/openvas-plugins/ChangeLog	2011-11-28 10:58:19 UTC (rev 12203)
@@ -1,3 +1,8 @@
+2011-11-28 Antu Sanadi <santu at secpod.com>
+
+	* scripts/gb_ms08-024.nasl:
+	 Fixed the FP.(when IE 8.x is installed with win2k3 (sp2)).
+
 2011-11-25  Jan-Oliver Wagner <jan-oliver.wagner at greenbone.net>
 
 	* scripts/secpod_pidgin_detect_lin.nasl,

Modified: trunk/openvas-plugins/scripts/gb_ms08-024.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_ms08-024.nasl	2011-11-28 07:31:04 UTC (rev 12202)
+++ trunk/openvas-plugins/scripts/gb_ms08-024.nasl	2011-11-28 10:58:19 UTC (rev 12203)
@@ -46,7 +46,7 @@
   Impact:
   Successful exploitation will let the attacker to execute arbitrary code with
   the privileges of the application. Failed attacks may cause denial-of-service
-  conditions. 
+  conditions.
 
   Impact Level: System/Application
 
@@ -124,7 +124,7 @@
          version_in_range(version:vers, test_version:"6.0", test_version2:"6.0.2800.1608")){
          security_hole(0);
       }
-      security_hole(0);
+      exit(0);
     }
 
     else if(hotfix_check_sp(xp:4) > 0)
@@ -137,29 +137,31 @@
            version_in_range(version:vers, test_version:"7.0", test_version2:"7.0.6000.16639")){
           security_hole(0);
         }
+        exit(0);
       }
     }
 
-   else if(hotfix_check_sp(win2003:3) > 0)
-   {
-     SP = get_kb_item("SMB/Win2003/ServicePack");
-     if("Service Pack 1" >< SP)
-     {
-       # Check for mshtml.dll version 6.0 < 6.0.3790.3091
-       if(version_in_range(version:vers, test_version:"6.0", test_version2:"6.0.3790.3090")){
-         security_hole(0);
-       }
-     }
-     
-     if("Service Pack 2" >< SP)
-     {
-       # Check for mshtml.dll version 6.0 < 6.0.3790.4237, 7.0 < 7.0.6000.16640
-       if(version_in_range(version:vers, test_version:"6.0", test_version2:"6.0.3790.4236") ||
-          version_in_range(version:vers, test_version:"7.0", test_version2:"7.0.6000.16639")){
-         security_hole(0);
-       }
-     }
-      security_hole(0); 
+    else if(hotfix_check_sp(win2003:3) > 0)
+    {
+      SP = get_kb_item("SMB/Win2003/ServicePack");
+      if("Service Pack 1" >< SP)
+      {
+        # Check for mshtml.dll version 6.0 < 6.0.3790.3091
+        if(version_in_range(version:vers, test_version:"6.0", test_version2:"6.0.3790.3090")){
+          security_hole(0);
+        }
+        exit(0);
+      }
+
+      if("Service Pack 2" >< SP)
+      {
+        # Check for mshtml.dll version 6.0 < 6.0.3790.4237, 7.0 < 7.0.6000.16640
+        if(version_in_range(version:vers, test_version:"6.0", test_version2:"6.0.3790.4236") ||
+           version_in_range(version:vers, test_version:"7.0", test_version2:"7.0.6000.16639")){
+          security_hole(0);
+        }
+        exit(0);
+      }
     }
   }
 }
@@ -184,10 +186,10 @@
       if(version_in_range(version:dllVer, test_version:"7.0", test_version2:"7.0.6001.18022")){
         security_hole(0);
       }
-       exit(0);
+      exit(0);
     }
   }
-    
+
   # Windows Server 2008
   else if(hotfix_check_sp(win2008:3) > 0)
   {
@@ -198,7 +200,7 @@
       if(version_in_range(version:dllVer, test_version:"7.0", test_version2:"7.0.6001.18022")){
          security_hole(0);
       }
-        exit(0);
+      exit(0);
     }
   }
 }


Property changes on: trunk/openvas-plugins/scripts/gb_ms08-024.nasl
___________________________________________________________________
Name: svn:keywords
   - Author Date Id Revision
   + Revision Date Id



More information about the Openvas-commits mailing list