Re: Adobe Acrobat < 6.0.5 Plug 22035 Question

I believe it has to be an administrative scan for Nessus to enumerate the 
version of a DLL

Take Care and Have Fun --John 

 -------------- Original message ----------------------
From: Brad Nelson <nelson.brad@comcast.net>
> Does this need to be a scan with credentials to work?  Without 
> credentials how does the plugin determine if the .dll is installed and 
> which version is present?  thanks, brad
>
> jfvanmeter@comcast.net wrote:
> > I have a problem with a scan of a workstation that has Acrobat 6.0.5 
> installed. In my report I see: 
> >
> --------------------------------------------------------------------------------
> --------------------------------------------
> > Plugin output :
> >
> > Version 6.0.1.1081 of the Adobe Acrobat distiller is installed as :
> > C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroDistDLL.dll
> >
> > CVE : CVE-2006-3453, CVE-2006-3453, CVE-2006-3453
> > BID : 18943, 18943, 18943
> > Plugin ID : 22035
> --------------------------------------------------------------------------------
> -------------------------------------------
> > Looking at the source code for plugin 22035 I see that 
> >
> > Determine where it's installed.
> > key = "SOFTWARE\Classes\Software\Adobe\Acrobat\Distiller";
> >
> > Then determines the version
> > # There's a problem if the version is < 6.0.5.
> > if (!isnull(ver))
> > {
> > if (
> > ver[0] < 6 ||
> > (ver[0] == 6 && ver[1] == 0 && ver[2] < 5)
> > )
> > {
> > if (report_verbosity < 1) report = desc;
> > else 
> > {
> > version = string(ver[0], ".", ver[1], ".", ver[2], ".", ver[3]);
> > report = string(
> > desc,
> > "\n\n",
> > "Plugin output :\n",
> > "\n",
> > "Version ", version, " of the Adobe Acrobat distiller is installed as :\n",
> > " ", dll, "\n"
> > );
> > }
> --------------------------------------------------------------------------------
> --------------------------------------------
> > I've manually verified that the acrobat.exe is at version 6.0.5.399,  the 
> Solution :  states to Upgrade to Adobe Acrobat 6.0.5 or later; which the 
> workstation has installed. 
> > The version of the AcroDistDLL.dll is 6.0.1.1081. Does the plug check the 
> version of  AcroDistDLL.dll or acrobat.exe?
> > Thank You in advance --John
> > _______________________________________________
> > Nessus mailing list
> > Nessus@list.nessus.org
> > http://mail.nessus.org/mailman/listinfo/nessus
> >
> >   
>
> _______________________________________________
> Nessus mailing list
> Nessus@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/nessus

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus