pkg-lib-bsd.inc

漏洞扫描源码,可以扫描linux,windows,交换机路由器

# OpenVAS Vulnerability Test include file
# $Id$
# Description: Check if freebsd packages/patehlevels are up to date
#
# Authors:
# Thomas Reinke <[e-mail]>
#
# Copyright:
# Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License Version 2
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
#
# portver is a quick and easy way for us to determine if a particular package
# exists on a freebsd system., and if so, to return the version number of
# that package.
function portver(pkg) {
    pkgs = get_kb_item("ssh/login/freebsdpkg");
    if(!pkgs) return(NULL);
    narrowed = egrep(pattern:"^" + pkg + "-[0-9]", string:pkgs);
    if (!narrowed) return(NULL);
    list = split(narrowed, sep:'\n', keep:0);
    foreach package (list) {
	pat = string("^",pkg,"-([^ -]+) (.*)$");
	matches = eregmatch(pattern:pat, string:package);
	if(!isnull(matches)) {
	    return(matches[1]);
	}
    }
    return(NULL);
}

# Function to verify if a given patch level is outdated, and if so, to
# report that fact.  Relies on the kb to contain bsdrel and patchlevel.
function patchlevelcmp(rel, patchlevel) {
    kbrel = get_kb_item("ssh/login/freebsdrel");
    if(kbrel !=rel) return(0);
    kbpatchlevel = int(get_kb_item("ssh/login/freebsdpatchlevel"));
    if(kbpatchlevel<int(patchlevel)) {
	return(-1);
    } else if(kbpatchlevel>int(patchlevel)) {
	return(1);
    } else {
	return(0);
    }
}