[Openvas-discuss] (no subject)

[Jan-Oliver Wagner]

On Friday 25 May 2007 14:01, Renaud Deraison (lists) wrote:
> On May 25, 20
> > not sure whether there is a misunderstanding here: The list I posted
> > named proprietary plugins we are missing to reactivate GPL plugins. So
> > it is even absolutely correct the veritas*.nasl appear on this list.
> 
> My mistake then :)

I do not know about the process of assembling the set of scripts,
but I am pretty sure it was not random or ignorant driven. So, only
misunderstanding or mistakes could have resulted in non-free
plugins in openvas-plugins.

I applied the command in openvas-plugins/scripts

$ grep -i  "script_copyright.*Tenable.*" *

which resulted:

bind_stub_res.nasl: script_copyright(english:"This script is Copyright (C) Tenable Security",
iplanet_data_snag.nasl: script_copyright(english:"This script is Copyright (C) Tenable Security");
kazaa_network.nasl: script_copyright(english:"This script is Copyright (C) 2003 Tenable Security");
opendchub.nasl: script_copyright(english:"This script is Copyright (C) 2004 Tenable Security");
overnet.nasl: script_copyright(english:"This script is Copyright (C) 2003 Tenable Security");
winmx_detect2.nasl: script_copyright(english:"This script is Copyright (C) 2003 Tenable Security");

I positively checked for presence of all of these files in "nessus-plugins_2.2.9.orig.tar.gz".

Renaud: In case you get aware of a plugin in openvas-plugin that should not be there
or in case you have some other heuristic to find non-free plugins, please let us know.

For the time being I assume there is no major license flaw in OpenVAS anymore,
but will keep my eyes open.
 
> Note that contrarily to what is said there, a missing dependency does  
> not deactivate a plugin -- the plugin will run nevertheless, but  
> there will be less info in the KB. While in some cases it means the  
> plugin will not run (ie: if it depends on a specific KB item), in  
> most cases it will run fine.
> For instance, the absence of the httpver.nasl plugin does not  
> deactivate all the http-related plugins, they'll just assume that the  
> remote web server is at least speaking HTTP/1.0.

thanks for this valuable hint.

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabrück
Amtsgericht Osnabrück, HR B 18998             http://www.intevation.de/
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner