Lucene search
+L

SMB: Gather file version info for authenticated scans

🗓️ 12 Dec 2018 00:00:00Reported by Copyright (C) 2018 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 16 Views

Gather file version info for authenticated scans of Microsoft Windows file

Code
# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.108517");
  script_version("2023-07-25T05:05:58+0000");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"last_modification", value:"2023-07-25 05:05:58 +0000 (Tue, 25 Jul 2023)");
  script_tag(name:"creation_date", value:"2018-12-12 10:15:08 +0100 (Wed, 12 Dec 2018)");
  script_name("SMB: Gather file version info for authenticated scans");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2018 Greenbone AG");
  script_family("Windows");
  script_dependencies("smb_reg_service_pack.nasl");
  script_require_ports(139, 445);
  script_mandatory_keys("SMB/WindowsVersion");

  script_tag(name:"summary", value:"This script gathers the version of various
  Microsoft Windows files and saves/caches them internally for faster access by
  other scripts during authenticated scans.");

  script_tag(name:"qod_type", value:"executable_version");

  exit(0);
}

include("smb_nt.inc");
include("secpod_smb_func.inc");

sysPath = smb_get_system32root();
if( ! sysPath )
  exit( 0 );

# nb: Can be used by smb_get_fileversion_from_cache() from secpod_smb_func.inc
# to avoid that VTs depending on the version of common files needs to call
# the fetch_file_version() function on their own and thus would require a
# script_require_ports(139, 445) which might slow down scans due to
# "non_simult_ports" of the scanner set to 139 and 445.
foreach file( make_list( "edgehtml.dll", "mshtml.dll" ) ) {
  vers = fetch_file_version( sysPath:sysPath, file_name:file );
  if( vers && vers =~ "^[0-9]+\." ) {
    set_kb_item( name:"SMB/lsc_file_version_cache/available", value:TRUE );
    set_kb_item( name:"SMB/lsc_file_version_cache/" + file + "/available", value:TRUE );
    set_kb_item( name:"SMB/lsc_file_version_cache/" + file + "/infos", value:sysPath + "\" + file + "#--#" + vers );
  }
}

exit( 0 );

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Jul 2023 00:00Current
6.9Medium risk
Vulners AI Score6.9
16