Search...

Novell GroupWise Unsupported Version Detection

2016-08-18T00:00:00
ID GROUPWISE_UNSUPPORTED.NASL
Type nessus
Reporter This script is Copyright (C) 2016-2020 Tenable Network Security, Inc.
Modified 2016-08-18T00:00:00

Description

According to its version, the installation of Novell GroupWise software on the remote Windows host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

                                        
                                            #
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(93028);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/09/22");

  script_xref(name:"IAVA", value:"0001-A-0570");

  script_name(english:"Novell GroupWise Unsupported Version Detection");
  script_summary(english:"Checks the version of GroupWise.");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is running an unsupported version of Novell GroupWise.");
  script_set_attribute(attribute:"description", value:
"According to its version, the installation of Novell GroupWise
software on the remote Windows host is no longer supported.

Lack of support implies that no new security patches for the product
will be released by the vendor. As a result, it is likely to contain
security vulnerabilities.");
  script_set_attribute(attribute:"see_also", value:"https://www.microfocus.com/lifecycle/?utm_medium=301&utm_source=novell.com");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Novell GroupWise that is currently supported.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");

  script_set_attribute(attribute:"plugin_publication_date", value:"2016/08/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:novell:groupwise");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2016-2020 Tenable Network Security, Inc.");

  script_dependencies("groupwise_client_installed.nasl", "groupwise_ia_detect.nasl", "groupwise_webaccess_detect.nasl");
  
  exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("install_func.inc");

apps = make_list(
  "Novell GroupWise Client",
  "GroupWise WebAccess", 
  "Novell GroupWise Internet Agent"
  );
versions = {};
installs = {};
lowver = 99;

foreach app (apps){
  install = get_installs(app_name:app);

  foreach install (install[1]){
    if(!empty_or_null(install['version'])){
      installs[app] = install;
    }
    # Given that some agents/features of GroupWise could be left at lower versions
    # we should detect on the lowest version feature.
    if(
      installs[app]['version'] != UNKNOWN_VER && 
      ver_compare(ver:installs[app]['version'], fix:lowver,strict:FALSE) < 0
      ) 
    lowver = installs[app]['version'];
  }
}
ver = split(lowver, sep:'.');
for (i=0; i<max_index(ver); i++)
  ver[i] = int(ver[i]);

if (ver[0] < 12)
{
  port = get_kb_item('SMB/transport');
  if(empty_or_null(port)) port = 445;
  
  register_unsupported_product(product_name:'Novell GroupWise',
                               version:lowver, cpe_base:"novell:groupwise");
  report =
    '\n  One or more of the Novell GroupWise products
  installed on this host is an unsupported version.';
  foreach app (keys(installs)){
    report += 
      '\n\n  Product              : ' + app +
      '\n  Path                 : ' + installs[app]['path'] +
      '\n  Installed version    : ' + installs[app]['version'];
  }
  report += 
    '\n\n  Supported version(s) : 2012 / 2014' + 
    '\n  EOL URL              : https://www.microfocus.com/lifecycle/?utm_medium=301&utm_source=novell.com\n';

  security_report_v4(severity:SECURITY_HOLE, port:port, extra:report);
  exit(0);
}
else exit(0, 'The Novell GroupWise software installed is currently supported.');
JSON Vulners Source
Initial Source


All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please mail to content@vulners.com Vulners, 2018
Protected by