Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

missing dependencies?

Subject: missing dependencies?
Date: Tue, 16 May 2006 11:41:24 -0400
Hello all,

I've found a nasty dependency issue.

KB shows:

1147793076 3
SMTP/sendmail=1


log shows:

[timestamp][pid] user x : Not launching sendmail_daemon_mode.nasl against
target because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching sendmail_sun_forward.nasl against
target because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching sendmail_maillocal_dos.nasl against
target because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching sendmail_conversion_overflow.nasl
against target because the key SMTP/sendmail is missing (this is not an
error)
[timestamp][pid] user x : Not launching sendmail_875_bo.nasl against target
because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching SHN_Sendmail_DoublePipe.nasl against
target because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching sendmail_header.nasl against target
because the key SMTP/sendmail is missing (this is not an error)
[timestamp][pid] user x : Not launching sendmail_debug_leak.nasl against
target because the key SMTP/sendmail is missing (this is not an error)

A quick grep shows the following plugins looking for this KB key:

sendmail_875_bo.nasl
sendmail_bt_switch.nasl
sendmail_conversion_overflow.nasl
sendmail_custom_config.nasl
sendmail_daemon_mode.nasl
sendmail_debug_leak.nasl
sendmail_debug.nasl
sendmail_decode.nasl
sendmail_dns_map_txt_overflow.nasl
sendmail_etrn_dos.nasl
sendmail_forword_include.nasl
sendmail_header.nasl
sendmail_local_overflow.nasl
sendmail_long_debug.nasl
sendmail_maillocal_dos.nasl
sendmail_mime_overflow2.nasl
sendmail_mime_overflow.nasl
sendmail_parsing_redirection.nasl
sendmail_prescan_overflow.nasl
sendmail_queue_destruction.nasl
sendmail_sun_forward.nasl
SHN_Sendmail_DoublePipe.nasl
smtp_bounce.nasl
smtp_helo.nasl

Yet only a couple of the above have the dependency:

smtpscan.nasl

Which is the plugin responsible for creating that KB key. (my research
shows)

Same results on nessus 2.2.4 and 2.2.7.

I'd update the plugins, but the auto-update could undo the work at any time.


Do the authors of these plugins need to add the smtpscan dependency?

OR

Is smtpscan supposed to be configured as a 'scanner' ??
If the latter, what other plugins are to be considered scanners that my WX
client is missing?!

Thanks,
anon
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
<Prev in Thread] Current Thread [Next in Thread>