Mailing List Archive

Fwd: Dynamic Descriptions in Plugins
Can we get the following patch applied to iis_ver_check.nasl?

"""
--- old/iis_ver_check.nasl 2006-08-06 12:52:13.000000000 -0700
+++ iis_ver_check.nasl 2006-08-06 13:01:55.000000000 -0700
@@ -7,12 +7,5 @@
#
-if(description)
-{
- script_id(11874);
- script_version("$Revision: 1.14 $");
- name["english"] = "IIS Service Pack - 404";
- script_name(english:name["english"]);
-
- desc["english"] = "
+desc["english"] = "
The Patch level (Service Pack) of the remote IIS server appears to be
lower
than the current IIS service pack level. As each service pack typically
@@ -23,8 +16,15 @@
As such, the test can not be totally reliable and should be manually
confirmed.
-
Solution: Ensure that the server is running the latest stable Service
Pack
Risk factor : High";
+
+if(description)
+{
+ script_id(11874);
+ script_version("$Revision: 1.14 $");
+ name["english"] = "IIS Service Pack - 404";
+ script_name(english:name["english"]);
+
script_description(english:desc["english"]);

@@ -112,4 +112,4 @@
}
-if ( ver != "The remote IIS server *seems* to be " ) security_note
(port:port, data:ver);
+if ( ver != "The remote IIS server *seems* to be " ) security_note
(port:port, data:string(desc["english"], "\n\n", ver));
exit(0);
"""

Best regards,
Erik


Begin forwarded message:

> From: Erik Stephens <erik@edgeos.com>
> Date: December 19, 2004 2:39:32 PM PST
> To: plugins-writers@list.nessus.org
> Subject: Re: [Plugins-writers] Dynamic Descriptions in Plugins
>
> On Dec 19, 2004, at 5:53 AM, Renaud Deraison wrote:
>
>> Ideally, I'd rather have an 'extra' field to security_XXX().
>>
>> ie:
>> security_note(port:port, extra:"The remote host is running " + ver);
>
> That would be great! To concur with Michael Scheidell, it would be
> even better if there was some way to specify where the dynamic text
> would get plumbed in. However, if that is not worth the
> complication, then I'd be very satisfied with how you've described
> the interface.
>
> Regarding the plugin(s) that I currently have issue with, should I
> submit a patch using George's method until the security_xxx()
> methods support this interface?

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
Re: Fwd: Dynamic Descriptions in Plugins [ In reply to ]
On Sun, Aug 06, 2006 at 01:31:17PM -0700, Erik Stephens wrote:

> Can we get the following patch applied to iis_ver_check.nasl?

Done, thanks.


George
--
theall@tenablesecurity.com
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers