Lucene search
+L

TIBCO FTL Detection (Windows SMB Login)

🗓️ 22 Nov 2018 00:00:00Reported by Copyright (C) 2018 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 19 Views

TIBCO FTL Detection on Windows SMB Login. Detects installed TIBCO FTL version and location by searching the registry via SMB

Code
# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.112437");
  script_version("2024-02-08T14:36:53+0000");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"last_modification", value:"2024-02-08 14:36:53 +0000 (Thu, 08 Feb 2024)");
  script_tag(name:"creation_date", value:"2018-11-22 12:51:12 +0100 (Thu, 22 Nov 2018)");
  script_tag(name:"qod_type", value:"registry");
  script_name("TIBCO FTL Detection (Windows SMB Login)");

  script_tag(name:"summary", value:"Detection of the installed version of TIBCO FTL on Windows.

  The script logs in via SMB and searches the registry for TIBCO FTL installations,
  version and location information.");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2018 Greenbone AG");
  script_family("Product detection");
  script_dependencies("smb_reg_service_pack.nasl");
  script_mandatory_keys("SMB/WindowsVersion", "SMB/Windows/Arch");
  script_require_ports(139, 445);

  exit(0);
}

include("cpe.inc");
include("host_details.inc");
include("smb_nt.inc");
include("secpod_smb_func.inc");

os_arch = get_kb_item("SMB/Windows/Arch");
if(!os_arch)
  exit(0);

if(!registry_key_exists(key:"SOFTWARE\Wow6432Node\TIBCO Software Inc (http://www.tibco.com/)") && !registry_key_exists(key:"SOFTWARE\TIBCO"))
  exit( 0 );

if("x86" >< os_arch) {
  key_list = make_list("SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\");
}
else if("x64" >< os_arch) {
  key_list =  make_list("SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\",
                        "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\");
}

if(isnull(key_list)) exit(0);

foreach key (key_list) {
  foreach item (registry_enum_keys(key:key)) {
    name = registry_get_sz(key:key + item, item:"DisplayName");

    if ("TIBCO FTL" >< name && "Community" >< name) {
      base = "cpe:/a:tibco:ftl_community_edition:";
      app = "TIBCO FTL Community Edition";
    } else if ("TIBCO FTL" >< name && "Developer" >< name) {
      base = "cpe:/a:tibco:ftl_developer_edition:";
      app = "TIBCO FTL Developer Edition";
    } else if ("TIBCO FTL" >< name && "Enterprise" >< name) {
      base = "cpe:/a:tibco:ftl_enterprise_edition:";
      app = "TIBCO FTL Enterprise Edition";
    } else {
      continue;
    }

    version = registry_get_sz(key:key + item, item:"DisplayVersion");
    insloc = registry_get_sz(key:key + item, item:"InstallLocation");

    # nb: Absolute paths to fetch version and location
    if(!version) {
      version = registry_get_sz(key:"SOFTWARE\TIBCO\ftl\", item:"version");
    }
    if(!insloc) {
      insloc = registry_get_sz(key:"SOFTWARE\TIBCO\ftl\", item:"installLocation");
    }

    set_kb_item(name:"tibco/ftl/win/detected", value:TRUE);

    if("64" >< os_arch && "Wow6432Node" >!< key)
      base += "x64:";

    register_and_report_cpe(app:app, ver:version, concluded:version, base:base, expr:"^([0-9.]+)", insloc:insloc);

    exit(0);
  }
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation