Novell Messenger Client Detection (Mac OS X)

2013-03-25T00:00:00
ID MACOSX_NOVELL_MESSENGER_CLIENT_INSTALLED.NASL
Type nessus
Reporter Tenable
Modified 2017-05-30T00:00:00

Description

The remote host has Novell Messenger (formerly GroupWise Messenger) client installed. This is an instant messaging client based on Novell eDirectory.

                                        
                                            #TRUSTED 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
#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(65673);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2017/05/30");

  script_name(english:"Novell Messenger Client Detection (Mac OS X)");
  script_summary(english:"Detects installs of Novell Messenger (formerly GroupWise Messenger) Client");

  script_set_attribute(attribute:"synopsis", value:"The remote host has an instant messaging client installed.");
  script_set_attribute(attribute:"description", value:
"The remote host has Novell Messenger (formerly GroupWise Messenger)
client installed. This is an instant messaging client based on Novell
eDirectory.");
  script_set_attribute(attribute:"see_also", value:"http://www.novell.com/documentation/novell_messenger22/");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:novell:messenger");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:novell:groupwise_messenger");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"MacOS X Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2013-2017 Tenable Network Security, Inc.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/MacOSX/Version");

  exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("ssh_func.inc");
include("macosx_func.inc");
include("install_func.inc");


if(sshlib::get_support_level() >= sshlib::SSH_LIB_SUPPORTS_COMMANDS)
  enable_ssh_wrappers();
else disable_ssh_wrappers();

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

os = get_kb_item("Host/MacOSX/Version");
if (!os) audit(AUDIT_OS_NOT, "Mac OS X");

kb_base = "MacOSX/Novell_Messenger_Client";

path = '/Applications/Messenger.app';
plist = path + '/Contents/Info.plist';

# Messenger.app is not very unique, so double check this is a
# Novell Product
cmd =  'plutil -convert xml1 -o - \'' + plist + '\' | grep \'string\'';
plist_string_contents = tolower(exec_cmd(cmd:cmd));
if("novell" >!< plist_string_contents && 'groupwise' >!< plist_string_contents)
  audit(AUDIT_NOT_INST, "Novell Messenger Client");

cmd =  'plutil -convert xml1 -o - \'' + plist + '\' | ' +
  'grep -A 1 CFBundleVersion | ' +
  'tail -n 1 | ' +
  'sed \'s/.*string>\\(.*\\)<\\/string>.*/\\1/g\'';
version = exec_cmd(cmd:cmd);

if (!strlen(version)) audit(AUDIT_NOT_INST, "Novell Messenger Client");

set_kb_item(name:kb_base+"/Installed", value:TRUE);

if (version !~ "^[0-9]") audit(AUDIT_VER_FAIL, "Novell Messenger Client");

set_kb_item(name:kb_base+"/Version", value:version);
set_kb_item(name:kb_base+"/Path", value:path);

register_install(
  app_name:"Novell Messenger Client",
  path:path,
  version:version,
  cpe:"cpe:/a:novell:messenger");

if (report_verbosity > 0)
{
  report =
    '\n  Path    : ' + path +
    '\n  Version : ' + version + '\n';
  security_note(port:0, extra:report);
}
else security_note(0);