List executable and writable-executable Files, list path variable

# SPDX-FileCopyrightText: 2010 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.96084");
  script_version("2025-10-10T15:40:56+0000");
  script_tag(name:"last_modification", value:"2025-10-10 15:40:56 +0000 (Fri, 10 Oct 2025)");
  script_tag(name:"creation_date", value:"2010-06-02 09:25:45 +0200 (Wed, 02 Jun 2010)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"qod_type", value:"executable_version");
  script_name("List executable and writable-executable Files, list path variable");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2010 Greenbone AG");
  script_family("IT-Grundschutz");
  script_mandatory_keys("Compliance/Launch/GSHB");
  script_dependencies("compliance_tests.nasl", "find_service.nasl", "gather-package-list.nasl");

  script_tag(name:"summary", value:"List executable and writable-executable files, list path
  variable over an SSH Connection.

  Check for executable Files outside /usr/local/bin:/usr/bin:/bin:/usr/bin/X11:
  /usr/games:/sbin:/usr/sbin:/usr/local/sbin:, check for user write permission on
  valid executables.");

  exit(0);
}

include("ssh_func.inc");
include("misc_func.inc");
include("port_service_func.inc");

port = get_preference("auth_port_ssh");
if(!port)
  port = ssh_get_port(default:22, ignore_unscanned:TRUE);

sock = ssh_login_or_reuse_connection();
if(!sock) {
  error = ssh_get_error();
  if (!error) error = "No SSH Port or Connection!";
  log_message(port:port, data:error);
  set_kb_item(name: "GSHB/executable", value:"error");
  set_kb_item(name: "GSHB/write-executable", value:"error");
  set_kb_item(name: "GSHB/path", value:"error");
  set_kb_item(name: "GSHB/executable/log", value:error);
  exit(0);
}

executable = ssh_cmd(socket:sock, cmd:"find / -mount -type f -perm -001");
writeexecutable = ssh_cmd(socket:sock, cmd:"find / -mount -type f -perm -003");
path = ssh_cmd(socket:sock, cmd:"export");

#if ("FIND: Invalid switch" >< executable|| "FIND: Parameterformat falsch" >< executable){
#  set_kb_item(name: "GSHB/executable", value:"windows");
#  set_kb_item(name: "GSHB/write-executable", value:"windows");
#  set_kb_item(name: "GSHB/path", value:"windows");
#  exit(0);
#}

if (!executable) executable = "none";
else{
  Lst = split(executable, keep:FALSE);
  executable = "";
  for (i=0; i<max_index(Lst); i++){
  if (Lst[i] =~ "^/usr/local/bin/.*" || Lst[i] =~ "^/usr/bin/.*" || Lst[i] =~ "^/bin/.*" || Lst[i] =~ "^/usr/games/.*" || Lst[i] =~ "^/sbin/.*" || Lst[i] =~ "^/usr/sbin/.*" ||  Lst[i] =~ "^/usr/local/sbin/.*" || Lst[i] =~ "^/var/lib/.*" || Lst[i] =~ "^/lib/.*" || Lst[i] =~ "^/usr/lib/.*" || Lst[i] =~ "^/etc/.*" || Lst[i] =~ ".*(Keine Berechtigung|Permission denied).*") continue;
  executable += Lst[i] + '\n';
  }
}

if (!writeexecutable) writeexecutable = "none";
else{
  Lst = split(writeexecutable, keep:FALSE);
  if (Lst){
    writeexecutable = "";
    for (i=0; i<max_index(Lst); i++){
    if (Lst[i] =~ ".*(Keine Berechtigung|Permission denied).*") continue;
    writeexecutable += Lst[i] + '\n';
    }
  }
}
if (writeexecutable == "") writeexecutable = "none";

if (!path) path = "none";
else path = egrep(string:path, pattern:" PATH=", icase:FALSE);

set_kb_item(name: "GSHB/executable", value:executable);
set_kb_item(name: "GSHB/write-executable", value:writeexecutable);
set_kb_item(name: "GSHB/path", value:path);
exit(0);