Nessus
[Top] [All Lists]

Re: Mozilla version detection

To: theall@tenablesecurity.com
Subject: Re: Mozilla version detection
From: Bob Babcock <rbabcock@cfa.harvard.edu>
Date: Wed, 8 Nov 2006 15:16:30 -0500 (EST)
Cc: nessus@list.nessus.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
In-reply-to: <454F7E66.4070506@tenablesecurity.com> (theall@tenablesecurity.com)
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <200611061655.kA6GtPaU012741@cfa0.cfa.harvard.edu> <454F7E66.4070506@tenablesecurity.com>
Reply-to: rbabcock@cfa.harvard.edu
Sender: nessus-bounces@list.nessus.org
> I've committed some patches that should properly identify Mozilla and
> friends. The changes should be available in the next hour or two via
> nessus-update-plugins. Apologies for the false-positives and delay.

I'm still having troubles with this failing on some (Windows) machines.  As
far as I can tell, it fails if the PathToExe registry value has the drive
letter in lower case.  I'm a newbie to Nessus scripting, but in
mozilla_org_installed.nasl I see 2 lines that appear to assume the drive
letter will be in upper case:

Original
  share = ereg_replace(pattern:"([A-Z]):.*", replace:"\1$", string:exe);
  exe2 =  ereg_replace(pattern:"[A-Z]:(.*)", replace:"\1", string:exe);

Suggested replacement
  share = ereg_replace(pattern:"([A-Za-z]):.*", replace:"\1$", string:exe);
  exe2 =  ereg_replace(pattern:"[A-Za-z]:(.*)", replace:"\1", string:exe);

I see similar code in other plugins, so if I'm right about this, other
plugins need to be checked as well.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>