check_dns_tcp.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

#
# This script was written by Michel Arboi <[e-mail]>
# GNU Public Licence
# 
# This is not really a security check.
# See STD0013

if(description)
{
 script_id(18356);
 
 script_version ("$Revision: 38 $");
 name["english"] = "DNS Server on UDP and TCP";
 script_name(english:name["english"]);
 
 desc["english"] = "
A DNS server is running on this port but 
it only answers to UDP requests.
This means that TCP requests are blocked by a firewall.

This configuration is incorrect: TCP might be used by any 
request, it is not restricted to zone transfers.
Read RFC1035 or STD0013 for more information.

Risk factor : Low";


 script_description(english:desc["english"]);
 
 summary["english"] = "Checks if the remote DNS servers answers on TCP too";
 script_summary(english:summary["english"]);
 
 script_category(ACT_GATHER_INFO);

 script_dependencies('external_svc_ident.nasl', 'dns_server.nasl');
 script_copyright(english:"This script is Copyright (C) 2005 Michel Arboi");
 family["english"] = "General";
 script_family(english:family["english"]);

 exit(0);
}

#

include('global_settings.inc');
include('misc_func.inc');

if (! thorough_tests && report_verbosity < 2)
{
 debug_print('will only run in "Verbose report" or "Thorough tests" mode\n');
 exit(0);
}


port = get_kb_item('Services/udp/dns');
if (! port) exit(0);

if (! get_udp_port_state(port)) exit(0);	# Only on TCP?

if (verify_service(port: port, ipproto: 'tcp', proto: 'dns')) exit(0);
soc = open_sock_tcp(port);
if (! soc) security_note(port);
else
{
 close(soc);
 if (get_port_state(port))
   register_service(port: port, proto: 'dns');
}