[Openvas-discuss] Overrides management questions

Fábio Fernandes fabiogfernandes at gmail.com
Thu Oct 6 12:56:18 CEST 2016


Hi i think i discovered the solution although i’m not using omp. I tested the command get_reports with the attribute apply_overrides=“1” and the overrides were applied.
What command are you using in omp?

Fabio

> No dia 06/10/2016, às 11:32, tatooin <tatooin at free.fr> escreveu:
> 
> Hi Fabio,
> 
> Thank you, as indeed this was the right syntax to use ! And the newly
> created override is properly seen by GSA.
> 
> However the problem unfortunately remains. If I generate reports from
> omp, the overrides are still not applied in the generated csv files. I
> start to believe it's a bug with openvas-manager. Or is there any
> specific omp command to force overrides being applied to reports ? 
> 
> Thanks
> 
> On Thu, 2016-10-06 at 02:31 +0100, Fábio Fernandes wrote:
>> Ok i found how to do it now. Set severity to -1.0.
>> 
>> Fabio
>> 
>>> No dia 06/10/2016, às 02:26, Fábio Fernandes <fabiogfernandes at gmail.com> escreveu:
>>> 
>>> I tried your example but never managed to set an override with threat “False Positive”.
>>> Try this:
>>> 
>>> <create_override>
>>> <text>This is actually of little concern.</text>
>>> <nvt oid="1.3.6.1.4.1.25623.1.0.103239"/>
>>> <new_severity>0.0</new_severity>
>>> <task id="a06cbabd-0cd4-4604-a58d-f831d9c7ec29"/>
>>> </create_override>
>>> 
>>> Fabio
>>> 
>>>> No dia 01/10/2016, às 08:01, tatooin at free.fr escreveu:
>>>> 
>>>> Hello,
>>>> 
>>>> There is really nobody able to answer the issue below ? I find hard to believe that none of the experts in this group don't have a clue on this.
>>>> I'm just trying to set an override !!
>>>> 
>>>> Thanks 
>>>> 
>>>> ----- Mail original -----
>>>> De: tatooin at free.fr
>>>> À: "Fábio Fernandes" <fabiogfernandes at gmail.com>
>>>> Cc: openvas-discuss at wald.intevation.org
>>>> Envoyé: Mercredi 28 Septembre 2016 09:17:35
>>>> Objet: Re: [Openvas-discuss] Overrides management questions
>>>> 
>>>> The problem is that the documentation is impossible to understand if you're not a developper yourself or an xml expert...
>>>> 
>>>> I tried with the following xml:
>>>> 
>>>> <create_override>
>>>> <text>This is actually of little concern.</text>
>>>> <nvt oid="1.3.6.1.4.1.25623.1.0.103239"/>
>>>> <new_threat>False Positive</new_threat>
>>>> <task id="a06cbabd-0cd4-4604-a58d-f831d9c7ec29"/>
>>>> </create_override>
>>>> 
>>>> Same error:
>>>> 
>>>> <create_override_response status_text="Internal error" status="500"></create_override_response>
>>>> 
>>>> :-(
>>>> 
>>>> ----- Mail original -----
>>>> De: "Fábio Fernandes" <fabiogfernandes at gmail.com>
>>>> À: tatooin at free.fr
>>>> Cc: "matthew mundell" <matthew.mundell at greenbone.net>, openvas-discuss at wald.intevation.org
>>>> Envoyé: Mercredi 28 Septembre 2016 01:55:23
>>>> Objet: Re: [Openvas-discuss] Overrides management questions
>>>> 
>>>> There seems to be a problem with your request but the error code seems suspicious.
>>>> Task should be: <task id="a06cbabd-0cd4-4604-a58d-f831d9c7ec29”>
>>>> Result should be omitted i think but there is nothing in the documentation referring to it.
>>>> 
>>>> Fabio
>>>> 
>>>>> No dia 26/09/2016, às 16:22, tatooin at free.fr escreveu:
>>>>> 
>>>>> Sorry, wrong error message; that was:
>>>>> 
>>>>> <create_override_response status_text="Internal error" status="500"></create_override_response>
>>>>> 
>>>>> tnx
>>>>> 
>>>>> ----- Mail original -----
>>>>> De: tatooin at free.fr
>>>>> À: "matthew mundell" <matthew.mundell at greenbone.net>
>>>>> Cc: openvas-discuss at wald.intevation.org
>>>>> Envoyé: Lundi 26 Septembre 2016 17:15:26
>>>>> Objet: Re: [Openvas-discuss] Overrides management questions
>>>>> 
>>>>> Well, then I get an "internal error" message...
>>>>> 
>>>>> <omp_response status_text="Bogus element: nvt" status="500"></omp_response>
>>>>> 
>>>>> I tried with your example:
>>>>> 
>>>>> <create_override>
>>>>> <text>This is actually of little concern.</text>
>>>>> <nvt oid="1.3.6.1.4.1.25623.1.0.103239"/>
>>>>> <new_threat>False Positive</new_threat>
>>>>> <task>a06cbabd-0cd4-4604-a58d-f831d9c7ec29</task>
>>>>> <result>any</result>
>>>>> </create_override>
>>>>> 
>>>>> Please clarify what I am doing wrong, I'm a bit lost with the syntax.
>>>>> 
>>>>> Thanks
>>>>> 
>>>>> ----- Mail original -----
>>>>> De: "mattm" <matthew.mundell at greenbone.net>
>>>>> À: tatooin at free.fr
>>>>> Cc: "Fábio Fernandes" <fabiogfernandes at gmail.com>, openvas-discuss at wald.intevation.org
>>>>> Envoyé: Lundi 26 Septembre 2016 14:50:20
>>>>> Objet: Re: [Openvas-discuss] Overrides management questions
>>>>> 
>>>>>> I did some research and I tried sending the following xml command to omp to create an override:
>>>>>> 
>>>>>> <create_override>
>>>>>> <text>This is actually of little concern.</text>
>>>>>> <nvt>1.3.6.1.4.1.25623.1.0.103239</nvt>
>>>>> 
>>>>> The NVT oid should be an attribute:
>>>>> 
>>>>>  <nvt oid="1.3.6.1.4.1.25623.1.0.103239"/>
>>>>> 
>>>>> See
>>>>> 
>>>>> 	http://www.openvas.org/omp-6-0.html#command_create_override
>>>>> 
>>>>> The example is wrong though, I'll update it.
>>>>> 
>>>>> --
>>>>> Greenbone Networks GmbH
>>>>> Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460
>>>>> Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner
>>>>> _______________________________________________
>>>>> Openvas-discuss mailing list
>>>>> Openvas-discuss at wald.intevation.org
>>>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>>>> _______________________________________________
>>>>> Openvas-discuss mailing list
>>>>> Openvas-discuss at wald.intevation.org
>>>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>>> 
>>>> _______________________________________________
>>>> Openvas-discuss mailing list
>>>> Openvas-discuss at wald.intevation.org
>>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>> 
>> 
> 
> 




More information about the Openvas-discuss mailing list