Search...

HP Database Archiving Software Detection

2012-09-19T00:00:00
ID HP_DATABASE_ARCHIVING_DETECT.NASL
Type nessus
Reporter This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
Modified 2019-11-02T00:00:00

Description

HP Database Archiving Software, a web interface for managing database archives, is running on the remote host.

                                        
                                            #
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(62204);
  script_version("1.2");
  script_cvs_date("Date: 2019/11/25");

  script_name(english:"HP Database Archiving Software Detection");
  script_summary(english:"Looks for the login page.");

  script_set_attribute(attribute:"synopsis", value:
"A database archiving software web console is running on the remote
host.");
  script_set_attribute(attribute:"description", value:
"HP Database Archiving Software, a web interface for managing database
archives, is running on the remote host.");
  # http://www8.hp.com/us/en/software-solutions/software.html?compURI=1175612#.UFI37q7F3X5
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?9e8976b9");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2012/09/19");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:hp:database_archiving_software");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("http_version.nasl");
  script_exclude_keys("Settings/disable_cgi_scanning");
  script_require_ports("Services/www", 443, 8080);

  exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("http.inc");
include("misc_func.inc");
include("webapp_func.inc");

# Get the ports that web servers have been found on, defaulting to 8080
port = get_http_port(default:8080);

# Put together a list of directories we should check in.
dirs = make_list();
dirs[0] = '/WebConsole/login/auth';

# Put together checks for different pages that we can scrape version
# information from.
checks = make_array();

regexes = make_list();
regexes[0] = make_list(
  '<title>HP Database Archiving - Login</title>'
);
regexes[1] = make_list(
  "<a href=./WebConsole/help/about.*>(\d+.\d+.\d+)</a>"
);

checks["/"] = regexes;

# Find where the web interface is installed.
installs = find_install(appname:"hp_database_archiving_software", checks:checks, dirs:dirs, port:port);
if (isnull(installs)) audit(AUDIT_NOT_DETECT, "HP Database Archiving Software", port);

# Report our findings.
report = NULL;
if (report_verbosity > 0)
{
  report = get_install_report(
    display_name : "HP Database Archiving Software",
    installs     : installs,
    port         : port
  );
}
security_note(port:port, extra:report);
JSON Vulners Source
Initial Source


All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please mail to content@vulners.com Vulners, 2018
Protected by