Re: MS08-067?

Tim Rupp <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
Is there a setting in nessus that I need to have enabled to successfully
get past the

os = get_kb_item ("Host/OS/smb") ;
if ("Windows" >!< os) exit(0);


lines? I think something may be disabled somewhere because I have a
vulnerable machine but if I just call the raw nasl script with

/opt/nessus/bin/nasl -t IP file.nasl

it exits right there. If I remove those lines, the nasl check works.

Thanks in advance,
Tim

Renaud Deraison wrote:
> 
> Sorry for the delay.
> 
> So :
> 
> Plugin#34476 was released yesterday and checks for MS08-067 with  
> credentials (ie: it logs into the remote Windows systems and checks  
> the version of the DLL)
> 
> Plugin#34477 was released early today and checks for MS08-067 over the  
> network, without credentials.
> 
> 
> Both are in the plugin feeds (Pro and Home).
> 
> 
> http://www.nessus.org/plugins/index.php?view=single&id=34477
> http://www.nessus.org/plugins/index.php?view=single&id=34476
> 
> 
> 
> Have a good day,
> 
> 				-- Renaud
> 
> 
> On Oct 24, 2008, at 12:10 AM, Renaud Deraison wrote:
> 
>> Seems like I was a bit optimistic with regards to QA :) The plugin
>> with credential will be in the feed within an hour or so, and we're
>> investigating the credential-less plugin which will take slightly more
>> time.
>>
>> On Oct 23, 2008, at 11:13 PM, Renaud Deraison wrote:
>>
>>> On Oct 23, 2008, at 11:07 PM, Omen Wild wrote:
>>>
>>>> Anyone have a plugin for MS08-067
>>>> <http://www.microsoft.com/technet/security/Bulletin/ms08-067.mspx>,
>>>> CVE-2008-4250?  Sure would be nice to beat the hackers to the punch
>>>> on
>>>> this one.
>>> We have two plugins (one with credentials, one without). Both are in
>>> final stage of QA and should be in the feed within an hour or less.
>>>
>>>
>>> _______________________________________________
>>> Nessus mailing list
>>> [email protected]
>>> http://mail.nessus.org/mailman/listinfo/nessus
>>>
>> _______________________________________________
>> Nessus mailing list
>> [email protected]
>> http://mail.nessus.org/mailman/listinfo/nessus
>>
> 
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.