Re: Mapping between plugin id's and CVE-ID and bugtraq id's

Raghunandan wrote:
> Hi All,
>   I wanted to know is there any list which maps the plugin id's to the 
> cve-id and the bugtraq id's.

There's no public list AFAIK, but you can easily extract this from the 
plugins quite easily. If you want a script that already does this 
check the nessus-extract script in the 'nessus-tools' directory of the 
CVS. Latest version available at:

http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/nessus-tools/nessus-extract/nessus-extract.pl?rev=1.4.2.8&content-type=text/vnd.viewcvs-markup

This version will print in whatever output format you choose (text, 
csv or sql statemtns) the information it extracts from the plugins.

If you are interested in getting this mapping onto a database create 
the database as described in both the README file and the SQL 
statements at:

http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/nessus-core/doc/database/?hideattic=0&only_with_tag=NESSUS_SQL

And then run, for example:

$ nessus-extract -p /var/lib/nessus/plugins -f sql | mysql

And you will get updated plugin, plugincve and pluginbid databases.
Notice this script only works with NASL plugins. For C plugins you 
will have to review them manually.

If you have any issues with the above code please let me know, it's 
been a while since I used it myself.

Regards

Javier
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus