Mailing List Archive

RE: Plugins-writers Digest, Vol 40, Issue 4
Morning Daryl,

Could you precise on which platform (Solaris, windows, ...) ?

For example, if you go under Linux/Unix, if you type the following command,
you can find those info:
# uvscan --version

Virus Scan for Linux v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832 LICENSED COPY - Sep 23 2004

Scan engine v4.4.00 for Linux.
Virus data file v4959 created Feb 08 2007
Scanning for 227549 viruses, trojans and variants.

Regards,

Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT
Operations | BT |
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899|
www.btireland.com



-----Original Message-----
From: plugins-writers-request@list.nessus.org
[mailto:plugins-writers-request@list.nessus.org]
Sent: 08 February 2007 17:00
To: plugins-writers@list.nessus.org
Subject: Plugins-writers Digest, Vol 40, Issue 4


Send Plugins-writers mailing list submissions to
plugins-writers@list.nessus.org

To subscribe or unsubscribe via the World Wide Web, visit
http://mail.nessus.org/mailman/listinfo/plugins-writers
or, via email, send a message with subject or body 'help' to
plugins-writers-request@list.nessus.org

You can reach the person managing the list at
plugins-writers-owner@list.nessus.org

When replying, please edit your Subject line so it is more specific than
"Re: Contents of Plugins-writers digest..."


Today's Topics:

1. Symantec Plugins (Chambers, Daryl [HDS])


----------------------------------------------------------------------

Message: 1
Date: Thu, 8 Feb 2007 09:19:32 -0500
From: "Chambers, Daryl [HDS]" <daryl.chambers@hdsupply.com>
Subject: [Plugins-writers] Symantec Plugins
To: <plugins-writers@list.nessus.org>
Message-ID:

<5637C643F42E1C49AE53E0BF2B96EBE605C46DF1@HSIEML01.hsi.hughessupply.com>

Content-Type: text/plain; charset="us-ascii"

Is there a plugin anyone has created that will send an alert if the Symantec
Version is not the latest one? There are some serious vulnerabilities in the
earlier versions however the only plugin I see simply checks to see if a
password vulnerability exists that was in versions prior to 5.x (I also
posted this to the general board)

Thanks,


Daryl L. Chambers Jr.
Security Audit Analyst
Desk 407.822.2939
Cell 407.401.0775

One Team Driving Customer Success and Shareholder Value


-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b59b28
72/attachment.htm

------------------------------

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

End of Plugins-writers Digest, Vol 40, Issue 4
**********************************************



BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland

This electronic message contains information (and may contain files) from BT
Communications Ireland Limited which may be privileged or confidential. The
information is intended to be for the sole use of the individual(s) or
entity named above. If you are not the intended recipient be aware that any
disclosure, copying, distribution or use of the contents of this information
and or files is prohibited. If you have received this electronic message in
error, please notify us by telephone or email (to the numbers or address
above) immediately. http://www.btireland.ie
RE: RE: Plugins-writers Digest, Vol 40, Issue 4 [ In reply to ]
Linux and Windows are the two platforms I am running Nessus on. The SAV
is on Windows boxes only. We are trying to get updates done, and i was
tasked to monitor the updates through Nessus.

________________________________

From: plugins-writers-bounces@list.nessus.org
[mailto:plugins-writers-bounces@list.nessus.org] On Behalf Of Thomas
Nguyen Van
Sent: Friday, February 09, 2007 3:53 AM
To: 'plugins-writers@list.nessus.org'
Subject: [Plugins-writers] RE: Plugins-writers Digest, Vol 40, Issue 4



Morning Daryl,

Could you precise on which platform (Solaris, windows, ...) ?

For example, if you go under Linux/Unix, if you type the following
command, you can find those info:
# uvscan --version

Virus Scan for Linux v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832 LICENSED COPY - Sep 23 2004

Scan engine v4.4.00 for Linux.
Virus data file v4959 created Feb 08 2007
Scanning for 227549 viruses, trojans and variants.

Regards,

Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT
Operations | BT |
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432
5899| www.btireland.com



-----Original Message-----
From: plugins-writers-request@list.nessus.org
[mailto:plugins-writers-request@list.nessus.org]
Sent: 08 February 2007 17:00
To: plugins-writers@list.nessus.org
Subject: Plugins-writers Digest, Vol 40, Issue 4


Send Plugins-writers mailing list submissions to
plugins-writers@list.nessus.org

To subscribe or unsubscribe via the World Wide Web, visit
http://mail.nessus.org/mailman/listinfo/plugins-writers
or, via email, send a message with subject or body 'help' to
plugins-writers-request@list.nessus.org

You can reach the person managing the list at
plugins-writers-owner@list.nessus.org

When replying, please edit your Subject line so it is more specific than
"Re: Contents of Plugins-writers digest..."


Today's Topics:

1. Symantec Plugins (Chambers, Daryl [HDS])


----------------------------------------------------------------------

Message: 1
Date: Thu, 8 Feb 2007 09:19:32 -0500
From: "Chambers, Daryl [HDS]" <daryl.chambers@hdsupply.com>
Subject: [Plugins-writers] Symantec Plugins
To: <plugins-writers@list.nessus.org>
Message-ID:

<5637C643F42E1C49AE53E0BF2B96EBE605C46DF1@HSIEML01.hsi.hughessupply.com>


Content-Type: text/plain; charset="us-ascii"

Is there a plugin anyone has created that will send an alert if the
Symantec Version is not the latest one? There are some serious
vulnerabilities in the earlier versions however the only plugin I see
simply checks to see if a password vulnerability exists that was in
versions prior to 5.x (I also posted this to the general board)

Thanks,


Daryl L. Chambers Jr.
Security Audit Analyst
Desk 407.822.2939
Cell 407.401.0775

One Team Driving Customer Success and Shareholder Value


-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b5
9b2872/attachment.htm

------------------------------

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

End of Plugins-writers Digest, Vol 40, Issue 4
**********************************************



BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland

This electronic message contains information (and may contain files)
from BT Communications Ireland Limited which may be privileged or
confidential. The information is intended to be for the sole use of the
individual(s) or entity named above. If you are not the intended
recipient be aware that any disclosure, copying, distribution or use of
the contents of this information and or files is prohibited. If you have
received this electronic message in error, please notify us by telephone
or email (to the numbers or address above) immediately.
http://www.btireland.ie
RE: RE: Plugins-writers Digest, Vol 40, Issue 4 [ In reply to ]
Afternoon Daryl,

I have the same duties with Sophos antivirus :o)
Under unix environment writing a Nessus plugin is easy. But under windows
I'm still investigating on this subject and Renaud Deraison suggested to
have a look on DLL version because Nessus is able to grab details from DLL
files.

May be you should do the same with SAV DLLs...


Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT
Operations | BT |
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899|
www.btireland.com

-----Original Message-----
From: Chambers, Daryl [HDS] [mailto:daryl.chambers@hdsupply.com]
Sent: 09 February 2007 13:11
To: Thomas Nguyen Van; plugins-writers@list.nessus.org
Subject: RE: [Plugins-writers] RE: Plugins-writers Digest, Vol 40, Issue 4


Linux and Windows are the two platforms I am running Nessus on. The SAV is
on Windows boxes only. We are trying to get updates done, and i was tasked
to monitor the updates through Nessus.

_____

From: plugins-writers-bounces@list.nessus.org
[mailto:plugins-writers-bounces@list.nessus.org] On Behalf Of Thomas Nguyen
Van
Sent: Friday, February 09, 2007 3:53 AM
To: 'plugins-writers@list.nessus.org'
Subject: [Plugins-writers] RE: Plugins-writers Digest, Vol 40, Issue 4



Morning Daryl,

Could you precise on which platform (Solaris, windows, ...) ?

For example, if you go under Linux/Unix, if you type the following command,
you can find those info:
# uvscan --version

Virus Scan for Linux v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832 LICENSED COPY - Sep 23 2004

Scan engine v4.4.00 for Linux.
Virus data file v4959 created Feb 08 2007
Scanning for 227549 viruses, trojans and variants.

Regards,

Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT
Operations | BT |
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899|
www.btireland.com



-----Original Message-----
From: plugins-writers-request@list.nessus.org
[mailto:plugins-writers-request@list.nessus.org
<mailto:plugins-writers-request@list.nessus.org> ]
Sent: 08 February 2007 17:00
To: plugins-writers@list.nessus.org
Subject: Plugins-writers Digest, Vol 40, Issue 4


Send Plugins-writers mailing list submissions to
plugins-writers@list.nessus.org

To subscribe or unsubscribe via the World Wide Web, visit
http://mail.nessus.org/mailman/listinfo/plugins-writers
<http://mail.nessus.org/mailman/listinfo/plugins-writers>
or, via email, send a message with subject or body 'help' to
plugins-writers-request@list.nessus.org

You can reach the person managing the list at
plugins-writers-owner@list.nessus.org

When replying, please edit your Subject line so it is more specific than
"Re: Contents of Plugins-writers digest..."


Today's Topics:

1. Symantec Plugins (Chambers, Daryl [HDS])


----------------------------------------------------------------------

Message: 1
Date: Thu, 8 Feb 2007 09:19:32 -0500
From: "Chambers, Daryl [HDS]" <daryl.chambers@hdsupply.com>
Subject: [Plugins-writers] Symantec Plugins
To: <plugins-writers@list.nessus.org>
Message-ID:

<5637C643F42E1C49AE53E0BF2B96EBE605C46DF1@HSIEML01.hsi.hughessupply.com>

Content-Type: text/plain; charset="us-ascii"

Is there a plugin anyone has created that will send an alert if the Symantec
Version is not the latest one? There are some serious vulnerabilities in the
earlier versions however the only plugin I see simply checks to see if a
password vulnerability exists that was in versions prior to 5.x (I also
posted this to the general board)

Thanks,


Daryl L. Chambers Jr.
Security Audit Analyst
Desk 407.822.2939
Cell 407.401.0775

One Team Driving Customer Success and Shareholder Value


-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b59b28
72/attachment.htm
<http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b59b2
872/attachment.htm>

------------------------------

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
<http://mail.nessus.org/mailman/listinfo/plugins-writers>

End of Plugins-writers Digest, Vol 40, Issue 4
**********************************************



BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland

This electronic message contains information (and may contain files) from BT
Communications Ireland Limited which may be privileged or confidential. The
information is intended to be for the sole use of the individual(s) or
entity named above. If you are not the intended recipient be aware that any
disclosure, copying, distribution or use of the contents of this information
and or files is prohibited. If you have received this electronic message in
error, please notify us by telephone or email (to the numbers or address
above) immediately. http://www.btireland.ie <http://www.btireland.ie>




BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland

This electronic message contains information (and may contain files) from BT
Communications Ireland Limited which may be privileged or confidential. The
information is intended to be for the sole use of the individual(s) or
entity named above. If you are not the intended recipient be aware that any
disclosure, copying, distribution or use of the contents of this information
and or files is prohibited. If you have received this electronic message in
error, please notify us by telephone or email (to the numbers or address
above) immediately. http://www.btireland.ie