Lucene search

K
nessusThis script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.XEDUS_DETECT.NASL
HistorySep 03, 2004 - 12:00 a.m.

Xedus Detection

2004-09-0300:00:00
This script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7

The remote host runs Xedus Peer-to-Peer web server. It provides the ability to share files, music, and any other media, as well as create robust and dynamic websites, which can feature database access and file system access, with full .NET support.

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(14644);
  script_version("1.21");
  script_cvs_date("Date: 2019/11/22");

  script_name(english:"Xedus Detection");
  script_summary(english:"Checks for presence of Xedus");
 
  script_set_attribute(attribute:"synopsis", value:
"A web server is running on the remote host." );
  script_set_attribute(attribute:"description", value:
"The remote host runs Xedus Peer-to-Peer web server. It provides
the ability to share files, music, and any other media, as well 
as create robust and dynamic websites, which can feature 
database access and file system access, with full .NET support." );
  script_set_attribute(attribute:"risk_factor", value:"None" );
  script_set_attribute(attribute:"solution", value:"n/a" );
  script_set_attribute(attribute:"plugin_publication_date", value: "2004/09/03");
  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:jerod_moemeka:xedus");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Peer-To-Peer File Sharing");
  script_require_ports("Services/www", 4274);
  script_dependencies("httpver.nasl");
  exit(0);
}


include("http_func.inc");
include("global_settings.inc");
include("http_keepalive.inc");

exit(0); # FP-prone
port = 4274;
if(!get_port_state(port))exit(0);

 soc = http_open_socket(port);
 if(soc)
 {
  buf = http_get(item:"/testgetrequest.x?param='free%20nessus'", port:port);
  send(socket:soc, data:buf);
  rep = http_recv(socket:soc);
  if(egrep(pattern:"free nessus", string:rep))
  {
    set_kb_item(name:string("xedus/",port,"/running"),value: TRUE);
    set_kb_item(name:"Services/www/" + port + "/embedded", value:TRUE);
    security_note(port);
  }
  http_close_socket(soc);
 }
exit(0);