Google Chrome < 13.0.782.218 Out of Date CA List

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(56023);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/19");

  script_name(english:"Google Chrome < 13.0.782.218 Out of Date CA List");

  script_set_attribute(attribute:"synopsis", value:
"The remote host contains a web browser that is affected by an out of
date certificate authority list.");
  script_set_attribute(attribute:"description", value:
"The version of Google Chrome installed on the remote host is earlier
than 13.0.782.218 and is potentially affected by an out of date
certificate authority list.  Due to the issuance of several fraudulent
SSL certificates, the certificate authority DigiNotar has been disabled
in Google Chrome.");
  # https://chromereleases.googleblog.com/2011/08/stable-update.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?cc6d9ef3");
  # http://googleonlinesecurity.blogspot.com/2011/08/update-on-attempted-man-in-middle.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f3fc8e9a");
  # https://codereview.chromium.org/7791032/diff/2001/net/base/x509_certificate.cc
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?64a59ee1");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Google Chrome 13.0.782.218 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"manual");
  script_set_attribute(attribute:"cvss_score_rationale", value:"The CVSS score was manually assigned based on the security impact of the out-of-date CA list.");
  script_set_attribute(attribute:"vuln_publication_date", value:"2011/08/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2011/08/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2011/08/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:google:chrome");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2011-2026 Tenable Network Security, Inc.");

  script_dependencies("google_chrome_installed.nasl");
  script_require_keys("SMB/Google_Chrome/Installed");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  "metadata": {
    "spec_version": "1.0"
  },
  "requires": [
    {
      "scope": "target",
      "match": {
        "os": "windows"
      }
    }
  ],
  "checks": [
    {
      "product": {
        "name": "Google Chrome",
        "type": "app"
      },
      "check_algorithm": "default",
      "constraints": [
        {
          "fixed_version": "13.0.782.218"
        }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);