Lucene search
K

HP Network Node Manager i (NNMi) Console Detection

🗓️ 26 Sep 2013 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 53 Views

HP Network Node Manager i (NNMi) Console Detection. Web management application running on the remote web server, managing NNMi

Refs
Code
SourceLink
nessuswww.nessus.org/u
#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(70146);
  script_version("1.7");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/10/12");

  script_name(english:"HP Network Node Manager i (NNMi) Console Detection");
  script_summary(english:"Looks for the error page.");

  script_set_attribute(attribute:"synopsis", value:
"A web management application is running on the remote web server.");
  script_set_attribute(attribute:"description", value:
"The remote host is running the Network Node Manager i (NNMi) console,
a web interface for managing NNMi.");
  # https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://software.www8.hp.com/us/en/software-solutions/network-node-manager-i-network-management-software/index.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?701072dd");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2013/09/26");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:hp:network_node_manager_i");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_set_attribute(attribute:"asset_inventory_category", value:"software_enumeration");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2013-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("http_version.nasl");
  script_require_ports("Services/www", 80, 443);

  exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("http.inc");
include("misc_func.inc");
include("install_func.inc");

# The JBoss web server that NNMi installs hosts several applications,
# one of which contains the web UI and web services. We referred to that here
# as the NNMi Console for lack of a better name.

app = "HP Network Node Manager i";
port = get_http_port(default:80);

##
# Looks up the major and minor version found in the help documentation.
# For example, 9.10, 10.10, or 10.20.
#
# @return Version string on success or UNKNOWN_VER otherwise.
##
function get_version()
{
  local_var ver_resp = http_send_recv3(
    port         : port,
    method       : "GET",
    item         : "/nnmDocs_en/htmlHelp/nmHelp/Content/nmHelp/nmWelcome.htm",
    exit_on_fail : FALSE);
  if (isnull(ver_resp) || "200" >!< ver_resp[0]) return UNKNOWN_VER;

  local_var pattern = 'Network Node Manager (?:<span class="_HPc_Basic_Variables_HP_Product_Version">)?([0-9.]+)';
  local_var ver = eregmatch(pattern:pattern, string:ver_resp[2]);
  if (isnull(ver)) return UNKNOWN_VER;

  return ver[1];
}

res = http_send_recv3(
  port         : port,
  method       : "GET",
  item         : "/nnm/main",
  exit_on_fail : TRUE);

script_message = "// HP Support only: The NNMi console can be launched in various debug modes";
if (isnull(res[2]) || script_message >!< res[2]) audit(AUDIT_NOT_DETECT, app, port);

version = get_version();

register_install(
  port     : port,
  app_name : app,
  vendor   : 'HP',
  product  : 'Network Node Manager i',
  path     : "/nnm/",
  version  : version,
  webapp   : TRUE,
  cpe   : "cpe:/a:hp:network_node_manager_i");

report_installs(app_name:app,port:port);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Oct 2022 00:00Current
5.5Medium risk
Vulners AI Score5.5
53