Re: plugins_bugtraq_id, plugins_cve_id and plugins_xrefs oddities

On Sat, Apr 03, 2004 at 04:03:06AM +0200, Jan Fredrik Leversund wrote:

I hope this isn't too late to be of use...

> The following preference settings are supposed to add information to
> the
> PLUGIN_LIST message in NTP/1.2:
> 
> plugins_bugtraq_id
> plugins_cve_id
> plugins_xrefs 
> 
> I was having some trouble making this work, 

These are some possible extensions specified when negotiating the NTP
protocol. That is, immediately on connecting you would put something like:

< NTP/1.2 >< plugins_cve_id plugins_bugtraq_id plugins_xrefs >

Indeed, look in nessus-core/nessus/nessus.h for PROTO_NAME -- that gives
the extensions used by the nessus client when it connects. 

> 1. The PLUGIN_LIST is dumped immediately when the client logs on, before
> the client sends it's preference list.

You can, by the way, skip this using the extension "fast_login". 

> 2. There is no way to enable the extra info in the nessusd.conf file, it
> has to be done using the PREFERENCES message sent from the client.

I don't understand -- what extra info?

> 3. There is no way to make the server resend the PLUGIN_LIST (at least
> to my knowledge).

Provided you specify the md5_caching extension when connecting, you can
use the COMPLETE_LIST message to list plugins; eg,

< NTP/1.2 >< md5_caching plugins_cve_id plugins_bugtraq_id plugins_xrefs >
...
CLIENT <|> COMPLETE_LIST <|> CLIENT

George
-- 
[email protected]

_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAev5zsWUciNmuHkURAgSxAJ905nm7b1tDQBRfO/iTZYhNGt/7fACgqVT/
MY4TGow0Lbo2+WYO5tv62ZE=
=qZrs
-----END PGP SIGNATURE-----