Mailing List Archive

rule change request for 34098
Hi there

This is the SSH-based DMI check (bios_get_info_ssh.nasl). Two things
that dmidecode returns (at least on Linux boxes) that isn't recorded in the
Nessus output are:

Product Name:
Serial Number:

On HP and Dell boxes, this returns model details and serviceTag/Serial
numbers.

Adding those to the output would allow us to better use Nessus as an
Asset tracking tool, as we are (successfully) starting to use it for
Windows.

I haven't tested it, but I think changing the line:

keys = make_list("Vendor", "Version", "Release Date");

to

keys = make_list("Vendor", "Version", "Release Date"," Product Name", "
Serial Number");

would be all it takes?


Thanks!

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
Re: rule change request for 34098 [ In reply to ]
On Monday 12 January 2009 01:23:39 Jason Haar wrote:
> I haven't tested it, but I think changing the line:
> keys = make_list("Vendor", "Version", "Release Date");
> to
> keys = make_list("Vendor", "Version", "Release Date"," Product Name", "
> Serial Number");
> would be all it takes?

No, that's not so simple, as the new keys are in the "System information"
section, not "BIOS information".
Anyway, we are going to publish a new script that displays this information.
We also modified the current script to save the output of the dmidecode
command into the KB (key name = "Host/dmidecode"), so that you can do
whatever you want want with it.

Thanks for you suggestion!

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus