Nessus
[Top] [All Lists]

Mozilla version detection problems

To: nessus@list.nessus.org
Subject: Mozilla version detection problems
From: Bob Babcock <rbabcock@cfa.harvard.edu>
Date: Mon, 30 Oct 2006 13:05:01 -0500 (EST)
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
Reply-to: rbabcock@cfa.harvard.edu
Sender: nessus-bounces@list.nessus.org
I'm having problems with version number detection for Mozilla family
browsers.  I'm using Windows Nessus, just upgraded from 1.03 to 1.04.

Problem #1
----------
Plugin 20862 says:
  - Mozilla Browser version 1.7.0.0 is installed as
  C:\sys\comm\Mozilla\Mozilla.exe
  
  - Mozilla Firefox version 2.0.0.0 is installed as
  C:\Program Files\Mozilla Firefox\firefox.exe
  
  - SeaMonkey version 1.0.5.0 is installed as
  C:\Sys\Comm\mozilla.org\SeaMonkey\SeaMonkey.exe

Mozilla.exe is really
   Product Version 1.7.12: 2005091517
   File version    1.7.20050.25981
(Firefox and SeaMonkey versions are correct.)

As a result, I get a bunch of "Upgrade to Mozilla 1.7.xx or higher" messages
from plugins such as 19718.

Problem #2
----------
I also get "Upgrade to SeaMonkey version 1.0.x or higher" messages from
plugins such as 22371.  If I look at the code for plugin 22371, the 2nd to
last line reads:
  (int(ver[0]) == 1 && int(ver[1]) == 0 && int(ver[3]) < 5)
I think ver is 1.0.5.0 at this point, so shouldn't the subscripts be 0, 2 and
4?  Similar code is in other SeaMonkey plugins.

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>
  • Mozilla version detection problems, Bob Babcock <=