{"id": "VISUALROUTE_SERVER_DETECT.NASL", "bulletinFamily": "scanner", "title": "VisualRoute Web Server Detection", "description": "VisualRoute is a web-based solution which allows unauthenticated users to perform traceroutes against arbitrary hosts on the Internet.", "published": "2001-08-29T00:00:00", "modified": "2018-08-15T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=10744", "reporter": "Tenable", "references": [], "cvelist": [], "type": "nessus", "lastseen": "2018-08-17T17:23:43", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": [], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "VisualRoute is a web-based solution which allows unauthenticated users to perform traceroutes against arbitrary hosts on the Internet.", "edition": 1, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "1e66841cf6cb74904c353e77f5318fc798c246c908b80a500d52abf649f17020", "hashmap": [{"hash": "2ff1bae67446353d609918975ef1d0e4", "key": "pluginID"}, {"hash": "74829a09ae5590f02cf719b2a8a32351", "key": "description"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "6950d198cb0b3db41d9509fc83cad9b4", "key": "title"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "07a0416e4de2a26a0531240b230d9eca", "key": "naslFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "7ea8316fbaf9e8df2d54cca1786807fc", "key": "modified"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "9c1a05dc1651729d01bc4f1148a09f8a", "key": "sourceData"}, {"hash": "d7c86983787fdb25ce52faf49d73c6ab", "key": "published"}, {"hash": "b36cad090a56019f08b5039735eb2428", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=10744", "id": "VISUALROUTE_SERVER_DETECT.NASL", "lastseen": "2016-09-26T17:24:39", "modified": "2014-05-09T00:00:00", "naslFamily": "Web Servers", "objectVersion": "1.2", "pluginID": "10744", "published": "2001-08-29T00:00:00", "references": [], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif(description)\n{\n script_id(10744);\n script_version (\"$Revision: 1.19 $\");\n script_osvdb_id(617);\n\n\n name[\"english\"] = \"VisualRoute Web Server Detection\";\n script_name(english:name[\"english\"]);\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"A VisualRoute server is listening on the remote port.\" );\n script_set_attribute(attribute:\"description\", value:\n\"VisualRoute is a web-based solution which allows unauthenticated users\nto perform traceroutes against arbitrary hosts on the Internet.\" );\n script_set_attribute(attribute:\"solution\", value:\n\"Disable this service if you do not use it.\" );\n script_set_attribute(attribute:\"risk_factor\", value:\"None\" );\n script_set_attribute(attribute:\"plugin_publication_date\", value: \"2001/08/29\");\n script_cvs_date(\"$Date: 2014/05/09 18:59:10 $\");\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_end_attributes();\n\n summary[\"english\"] = \"Extracts the banner of the remote visual route server\";\n script_summary(english:summary[\"english\"]);\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(english:\"This script is Copyright (C) 2001-2014 Tenable Network Security, Inc.\");\n family[\"english\"] = \"Web Servers\";\n script_family(english:family[\"english\"]);\n\n script_dependencie(\"http_version.nasl\");\n script_require_ports(\"Services/www\", 8000);\n exit(0);\n}\n\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"http.inc\");\n\nport = get_http_port(default:80, embedded: 1);\n\nr = http_send_recv3(method:\"GET\", item:\"/\", port:port, exit_on_fail: 1);\n\nh = parse_http_headers(status_line: r[0], headers: r[1]);\nif (isnull(h)) exit(1, \"Could not parse HTTP headers\");\nsrv = h[\"server\"];\n\nif (\"VisualRoute\" >< srv)\n {\n report = 'The remote version of VisualRoute is ' + srv;\n security_note(port:port, extra:report);\n set_kb_item(name:\"www/\" + port + \"/embedded\", value:TRUE);\n }\n\n", "title": "VisualRoute Web Server Detection", "type": "nessus", "viewCount": 0}, "differentElements": ["modified", "sourceData"], "edition": 1, "lastseen": "2016-09-26T17:24:39"}], "edition": 2, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "74829a09ae5590f02cf719b2a8a32351"}, {"key": "href", "hash": "b36cad090a56019f08b5039735eb2428"}, {"key": "modified", "hash": "97454731434b552ff623b783862a4f17"}, {"key": "naslFamily", "hash": "07a0416e4de2a26a0531240b230d9eca"}, {"key": "pluginID", "hash": "2ff1bae67446353d609918975ef1d0e4"}, {"key": "published", "hash": "d7c86983787fdb25ce52faf49d73c6ab"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "ab4f6adaa8c1eb91c6273a634c978751"}, {"key": "title", "hash": "6950d198cb0b3db41d9509fc83cad9b4"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "ef932189f1ebc59c9829e6f9df69ede6971b6cbe681f2aca001a45043cadebd5", "viewCount": 0, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif(description)\n{\n script_id(10744);\n script_version (\"1.20\");\n\n\n name[\"english\"] = \"VisualRoute Web Server Detection\";\n script_name(english:name[\"english\"]);\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"A VisualRoute server is listening on the remote port.\" );\n script_set_attribute(attribute:\"description\", value:\n\"VisualRoute is a web-based solution which allows unauthenticated users\nto perform traceroutes against arbitrary hosts on the Internet.\" );\n script_set_attribute(attribute:\"solution\", value:\n\"Disable this service if you do not use it.\" );\n script_set_attribute(attribute:\"risk_factor\", value:\"None\" );\n script_set_attribute(attribute:\"plugin_publication_date\", value: \"2001/08/29\");\n script_cvs_date(\"Date: 2018/08/15 16:35:43\");\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_end_attributes();\n\n summary[\"english\"] = \"Extracts the banner of the remote visual route server\";\n script_summary(english:summary[\"english\"]);\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(english:\"This script is Copyright (C) 2001-2018 Tenable Network Security, Inc.\");\n family[\"english\"] = \"Web Servers\";\n script_family(english:family[\"english\"]);\n\n script_dependencie(\"http_version.nasl\");\n script_require_ports(\"Services/www\", 8000);\n exit(0);\n}\n\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"http.inc\");\n\nport = get_http_port(default:80, embedded: 1);\n\nr = http_send_recv3(method:\"GET\", item:\"/\", port:port, exit_on_fail: 1);\n\nh = parse_http_headers(status_line: r[0], headers: r[1]);\nif (isnull(h)) exit(1, \"Could not parse HTTP headers\");\nsrv = h[\"server\"];\n\nif (\"VisualRoute\" >< srv)\n {\n report = 'The remote version of VisualRoute is ' + srv;\n security_note(port:port, extra:report);\n set_kb_item(name:\"www/\" + port + \"/embedded\", value:TRUE);\n }\n\n", "naslFamily": "Web Servers", "pluginID": "10744", "cpe": []}

{"openvas": [{"lastseen": "2017-07-02T21:10:06", "references": [], "pluginID": "10744", "description": "We detected the remote web server as being a VisualRoute web server. \nThis server allows attackers to perform a traceroute to a third party's \nhosts without revealing themselves to the target of the traceroute.", "edition": 1, "reporter": "This script is Copyright (C) 2001 SecuriTeam", "published": "2005-11-03T00:00:00", "title": "VisualRoute Web Server Detection", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": [], "modified": "2017-03-22T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=10744", "id": "OPENVAS:10744", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: visualroute_server_detect.nasl 5676 2017-03-22 16:29:37Z cfi $\n# Description: VisualRoute Web Server Detection\n#\n# Authors:\n# Noam Rathaus <noamr@securiteam.com>\n#\n# Copyright:\n# Copyright (C) 2001 Noam Rathaus <noamr@securiteam.com>\n# Copyright (C) 2001 SecuriTeam\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ntag_summary = \"We detected the remote web server as being a VisualRoute web server. \nThis server allows attackers to perform a traceroute to a third party's \nhosts without revealing themselves to the target of the traceroute.\";\n\ntag_solution = \"Disable the VisualRoute web server, or block the web server's\nport number on your Firewall.\";\n\nif(description)\n{\n script_id(10744);\n script_version(\"$Revision: 5676 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-03-22 17:29:37 +0100 (Wed, 22 Mar 2017) $\");\n script_tag(name:\"creation_date\", value:\"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n\n name = \"VisualRoute Web Server Detection\";\n script_name(name);\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"qod_type\", value:\"remote_banner\");\n\n script_copyright(\"This script is Copyright (C) 2001 SecuriTeam\");\n family = \"General\";\n script_family(family);\n\n script_dependencies(\"gb_get_http_banner.nasl\");\n script_mandatory_keys(\"VisualRoute/banner\");\n script_require_ports(\"Services/www\", 8000);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n exit(0);\n}\n\ninclude(\"http_func.inc\");\n \nport = get_http_port( default:8000 );\n\n banner = get_http_banner(port:port);\n if(!banner)exit(0);\n\n\n if (egrep(pattern:\"^Server: VisualRoute (tm) \", string:banner))\n {\n security_message(port);\n }\n\n\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2018-04-06T11:15:51", "references": [], "pluginID": "136141256231010744", "description": "We detected the remote web server as being a VisualRoute web server. \nThis server allows attackers to perform a traceroute to a third party's \nhosts without revealing themselves to the target of the traceroute.", "edition": 1, "reporter": "This script is Copyright (C) 2001 SecuriTeam", "published": "2005-11-03T00:00:00", "type": "openvas", "title": "VisualRoute Web Server Detection", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "General", "bulletinFamily": "scanner", "cvelist": [], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231010744", "id": "OPENVAS:136141256231010744", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: visualroute_server_detect.nasl 9348 2018-04-06 07:01:19Z cfischer $\n# Description: VisualRoute Web Server Detection\n#\n# Authors:\n# Noam Rathaus <noamr@securiteam.com>\n#\n# Copyright:\n# Copyright (C) 2001 Noam Rathaus <noamr@securiteam.com>\n# Copyright (C) 2001 SecuriTeam\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ntag_summary = \"We detected the remote web server as being a VisualRoute web server. \nThis server allows attackers to perform a traceroute to a third party's \nhosts without revealing themselves to the target of the traceroute.\";\n\ntag_solution = \"Disable the VisualRoute web server, or block the web server's\nport number on your Firewall.\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.10744\");\n script_version(\"$Revision: 9348 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:01:19 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n\n name = \"VisualRoute Web Server Detection\";\n script_name(name);\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"qod_type\", value:\"remote_banner\");\n\n script_copyright(\"This script is Copyright (C) 2001 SecuriTeam\");\n family = \"General\";\n script_family(family);\n\n script_dependencies(\"gb_get_http_banner.nasl\");\n script_mandatory_keys(\"VisualRoute/banner\");\n script_require_ports(\"Services/www\", 8000);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n exit(0);\n}\n\ninclude(\"http_func.inc\");\n \nport = get_http_port( default:8000 );\n\n banner = get_http_banner(port:port);\n if(!banner)exit(0);\n\n\n if (egrep(pattern:\"^Server: VisualRoute (tm) \", string:banner))\n {\n security_message(port);\n }\n\n\n", "cvss": {"score": 0.0, "vector": "NONE"}}]}