Lucene search
+L

McAfee Vulnerability Manager Detection

🗓️ 20 Mar 2014 00:00:00Reported by Copyright (C) 2014 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 11 Views

Detects the installed version of McAfee Vulnerability Manager by searching for it in the registry via smb

Code
# SPDX-FileCopyrightText: 2014 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.804249");
  script_version("2023-07-25T05:05:58+0000");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"last_modification", value:"2023-07-25 05:05:58 +0000 (Tue, 25 Jul 2023)");
  script_tag(name:"creation_date", value:"2014-03-20 13:18:23 +0530 (Thu, 20 Mar 2014)");
  script_tag(name:"qod_type", value:"registry");
  script_name("McAfee Vulnerability Manager Detection");


  script_tag(name:"summary", value:"Detects the installed version of McAfee Vulnerability Manager.

The script logs in via smb, searches for McAfee Vulnerability Manager in the
registry and gets the version from registry.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2014 Greenbone AG");
  script_family("Product detection");
  script_dependencies("smb_reg_service_pack.nasl");
  script_mandatory_keys("SMB/WindowsVersion", "SMB/Windows/Arch");
  script_require_ports(139, 445);
  exit(0);
}

include("smb_nt.inc");
include("secpod_smb_func.inc");
include("cpe.inc");
include("host_details.inc");

os_arch = get_kb_item("SMB/Windows/Arch");
if(!os_arch){
  exit(0);
}

if("x86" >< os_arch){
  key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\";
}

## Presently Adobe RoboHelp 64bit application is not available
else if("x64" >< os_arch){
  key =  "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\";
}

if(!registry_key_exists(key:key)){
  exit(0);
}

foreach item (registry_enum_keys(key:key))
{
  mName = registry_get_sz(key:key + item, item:"DisplayName");

  if(mName && mName =~ "McAfee Vulnerability Manager")
  {
    mVer = registry_get_sz(key:key + item, item:"DisplayVersion");

    if(mVer)
    {
      set_kb_item(name:"McAfee/Vulnerability/Manager", value:mVer);

      insloc = registry_get_sz(key:key + item, item:"InstallLocation");
      if(!insloc){
        insloc = "Could not find the install location from registry";
      }

      cpe = build_cpe(value:mVer, exp:"^([0-9.]+)", base:"cpe:/a:mcafee:vulnerability_manager:");
        if(isnull(cpe))
          cpe = "cpe:/a:mcafee:vulnerability_manager";

      register_product(cpe: cpe, location: insloc);

      log_message(data: build_detection_report(app: mName,
                                               version: mVer,
                                               install: insloc,
                                               cpe: cpe,
                                               concluded: mVer));
    }
  }
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation