home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / CSCdx17916.nasl < prev    next >
Text File  |  2005-01-14  |  5KB  |  185 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. # See the Nessus Script License for details
  5. #
  6. #
  7.  
  8.  
  9. if(description)
  10. {
  11.  script_id(11632);
  12.  script_cve_id("CAN-2003-0305");
  13.  
  14.  script_version("$Revision: 1.4 $");
  15.  
  16.  name["english"] = "CSCdx17916, CSCdx61997";
  17.  
  18.  script_name(english:name["english"]);
  19.  
  20.  desc["english"] = "
  21.  
  22. It is possible to crash the remote router by sending malformed
  23. Response Time Responder (RTR) packets. 
  24. For this flaw to be exploitable, the router needs
  25. to have RTR responder enabled.
  26.  
  27. This bug is referenced as CISCO bug id CSCdx17916 and CSCdx61997
  28.  
  29. Solution : See http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml
  30. Risk factor : High
  31.  
  32. *** As Nessus solely relied on the banner of the remote host
  33. *** this might be a false positive
  34. ";
  35.  script_description(english:desc["english"]);
  36.  
  37.  summary["english"] = "Uses SNMP to determine if a flaw is present";
  38.  script_summary(english:summary["english"]);
  39.  
  40.  script_category(ACT_GATHER_INFO);
  41.  
  42.  script_copyright(english:"This script is (C) 2003 Tenable Network Security");
  43.  
  44.  script_family(english:"CISCO");
  45.  
  46.  script_dependencie("snmp_sysDesc.nasl",
  47.              "snmp_cisco_type.nasl");
  48.  script_require_keys("SNMP/community",
  49.               "SNMP/sysDesc",
  50.               "CISCO/model");
  51.  exit(0);
  52. }
  53.  
  54.  
  55. # The code starts here
  56. ok=0;
  57. os = get_kb_item("SNMP/sysDesc"); if(!os)exit(0);
  58. hardware = get_kb_item("CISCO/model"); if(!hardware)exit(0);
  59.  
  60.  
  61.  
  62.  
  63. # Check for the required operating system...
  64. #----------------------------------------------------------------
  65. # Is this IOS ?
  66. if(!egrep(pattern:".*(Internetwork Operating|IOS).*", string:os))exit(0);
  67. # 12.0S
  68. if(egrep(string:os, pattern:"((12\.0\(([0-9]|[1-1][0-9]|2[0-0])\)|12\.0)S[0-9]*|12\.0\(21\)S[0-2]),"))ok=1;
  69.  
  70. # 12.0SC
  71. if(egrep(string:os, pattern:"(12\.0\([0-9]*\)|12\.0)SC[0-9]*,"))ok=1;
  72.  
  73. # 12.0SL
  74. if(egrep(string:os, pattern:"(12\.0\([0-9]*\)|12\.0)SL[0-9]*,"))ok=1;
  75.  
  76. # 12.0ST
  77. if(egrep(string:os, pattern:"((12\.0\(([0-9]|[1-1][0-9]|2[0-0])\)|12\.0)ST[0-9]*|12\.0\(21\)ST[0-1]),"))ok=1;
  78.  
  79. # 12.0WC
  80. if(egrep(string:os, pattern:"(12\.0\([0-4]\)|12\.0)WC[0-9]*,"))ok=1;
  81.  
  82. # 12.0SX
  83. if(egrep(string:os, pattern:"(12\.0\([0-9]*\)|12\.0)SX[0-9]*,"))ok=1;
  84.  
  85. # 12.0SY
  86. if(egrep(string:os, pattern:"(12\.0\(([0-9]|[1-1][0-9]|2[0-1])\)|12\.0)SY[0-9]*,"))ok=1;
  87.  
  88. # 12.1
  89. if(egrep(string:os, pattern:"(12\.1\(([0-9]|1[0-7])\)|12\.1),"))ok=1;
  90.  
  91. # 12.1E
  92. if(egrep(string:os, pattern:"(12\.1\(([0-9]|1[0-2])\)|12\.1)E[0-9]*,"))ok=1;
  93.  
  94. # 12.1EA
  95. if(egrep(string:os, pattern:"(12\.1\([0-9]*\)|12\.1)EA[0-9]*,"))ok=1;
  96.  
  97. # 12.1EW
  98. if(egrep(string:os, pattern:"(12\.1\(([0-9]|1[0-0])\)|12\.1)EW[0-9]*,"))ok=1;
  99.  
  100. # 12.1EX
  101. if(egrep(string:os, pattern:"(12\.1\(([0-9]|1[0-0])\)|12\.1)EX[0-9]*,"))ok=1;
  102.  
  103. # 12.1XF
  104. if(egrep(string:os, pattern:"(12\.1\([0-9]*\)|12\.1)XF[0-9]*,"))ok=1;
  105.  
  106. # 12.1XG
  107. if(egrep(string:os, pattern:"(12\.1\([0-9]*\)|12\.1)XG[0-9]*,"))ok=1;
  108.  
  109. # 12.1YG
  110. if(egrep(string:os, pattern:"(12\.1\([0-9]*\)|12\.1)YG[0-9]*,"))ok=1;
  111.  
  112. # 12.1YC
  113. if(egrep(string:os, pattern:"(12\.1\([0-9]*\)|12\.1)YC[0-9]*,"))ok=1;
  114.  
  115. # 12.2
  116. if(egrep(string:os, pattern:"(12\.2\([0-9]\)|12\.2),"))ok=1;
  117.  
  118. # 12.2BC
  119. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)BC[0-9]*,"))ok=1;
  120.  
  121. # 12.2BY
  122. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)BY[0-9]*,"))ok=1;
  123.  
  124. # 12.2BZ
  125. if(egrep(string:os, pattern:"(12\.2\(([0-9]|1[0-4])\)|12\.2)BZ[0-9]*,"))ok=1;
  126.  
  127. # 12.2DA
  128. if(egrep(string:os, pattern:"(12\.2\(([0-9]|1[0-1])\)|12\.2)DA[0-9]*,"))ok=1;
  129.  
  130. # 12.2MB
  131. if(egrep(string:os, pattern:"((12\.2\([0-3]\)|12\.2)MB[0-9]*|12\.2\(4\)MB[0-4]),"))ok=1;
  132.  
  133. # 12.2S
  134. if(egrep(string:os, pattern:"(12\.2\(([0-9]|1[0-1])\)|12\.2)S[0-9]*,"))ok=1;
  135.  
  136. # 12.2XC
  137. if(egrep(string:os, pattern:"((12\.2\([0-0]\)|12\.2)XC[0-9]*|12\.2\(1\)XC[0-4]),"))ok=1;
  138.  
  139. # 12.2XD
  140. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XD[0-9]*,"))ok=1;
  141.  
  142. # 12.2XE
  143. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XE[0-9]*,"))ok=1;
  144.  
  145. # 12.2XH
  146. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XH[0-9]*,"))ok=1;
  147.  
  148. # 12.2XI
  149. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XI[0-9]*,"))ok=1;
  150.  
  151. # 12.2XJ
  152. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XJ[0-9]*,"))ok=1;
  153.  
  154. # 12.2XK
  155. if(egrep(string:os, pattern:"((12\.2\([0-1]\)|12\.2)XK[0-9]*|12\.2\(2\)XK[0-2]),"))ok=1;
  156.  
  157. # 12.2XL
  158. if(egrep(string:os, pattern:"((12\.2\([0-3]\)|12\.2)XL[0-9]*|12\.2\(4\)XL[0-4]),"))ok=1;
  159.  
  160. # 12.2XM
  161. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)XM[0-9]*,"))ok=1;
  162.  
  163. # 12.2YA
  164. if(egrep(string:os, pattern:"((12\.2\([0-3]\)|12\.2)YA[0-9]*|12\.2\(4\)YA[0-2]),"))ok=1;
  165.  
  166. # 12.2YB
  167. if(egrep(string:os, pattern:"(12\.2\([0-7]\)|12\.2)YB[0-9]*,"))ok=1;
  168.  
  169. # 12.2YC
  170. if(egrep(string:os, pattern:"((12\.2\([0-3]\)|12\.2)YC[0-9]*|12\.2\(4\)YC[0-3]),"))ok=1;
  171.  
  172. # 12.2YF
  173. if(egrep(string:os, pattern:"(12\.2\([0-9]*\)|12\.2)YF[0-9]*,"))ok=1;
  174.  
  175. # 12.2YG
  176. if(egrep(string:os, pattern:"(12\.2\([0-3]\)|12\.2)YG[0-9]*,"))ok=1;
  177.  
  178. # 12.2YH
  179. if(egrep(string:os, pattern:"(12\.2\([0-3]\)|12\.2)YH[0-9]*,"))ok=1;
  180.  
  181.  
  182. #----------------------------------------------
  183.  
  184. if(ok)security_hole(port:161, proto:"udp");
  185.