home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / modules / nessus-2.2.8.mo / usr / lib / nessus / plugins / CSCec42751.nasl < prev    next >
Text File  |  2005-01-14  |  3KB  |  141 lines
  1. #
  2. # (C) Tenable Network Security
  3. #
  4. #
  5. #
  6.  
  7.  
  8. if(description)
  9. {
  10.  script_id(12270);
  11.  script_bugtraq_id(10504);
  12.  script_version("$Revision: 1.2 $");
  13.  
  14.  name["english"] = "CSCec42751, CSCed45576 and CSCed48590";
  15.  script_name(english:name["english"]);
  16.  
  17.  desc["english"] = "
  18. The remote switch is vulnerable to various flaws which may allow an
  19. attacker to disable this device remotely by doing a TCP-ACK denial
  20. of service attack.
  21.  
  22. This vulnerability is documented with the CISCO bugs ID CSCec42751,
  23. CSCed45576 and CSCed48590
  24.  
  25. Solution : http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml
  26. Risk factor : High";
  27.  script_description(english:desc["english"]);
  28.  
  29.  summary["english"] = "Uses SNMP to determine if a flaw is present";
  30.  script_summary(english:summary["english"]);
  31.  
  32.  script_category(ACT_GATHER_INFO);
  33.  
  34.  script_copyright(english:"This script is (C) 2004 Tenable Network Security");
  35.  
  36.  script_family(english:"CISCO");
  37.  
  38.  script_dependencie("snmp_sysDesc.nasl",
  39.              "snmp_cisco_type.nasl");
  40.  script_require_keys("SNMP/community",
  41.               "SNMP/sysDesc",
  42.               "CISCO/model");
  43.  exit(0);
  44. }
  45.  
  46.  
  47. # The code starts here
  48. ok=0;
  49. os = get_kb_item("SNMP/sysDesc"); if(!os)exit(0);
  50. hardware = get_kb_item("CISCO/model"); if(!hardware)exit(0);
  51.  
  52.  
  53.  
  54.  
  55. # Check for the required hardware...
  56. #----------------------------------------------------------------
  57. # catalyst.*
  58. if(ereg(string:hardware, pattern:"^catalyst.*$"))ok=1;
  59.  
  60. if(!ok)exit(0);
  61. ok = 0;
  62.  
  63.  
  64. # Check for the required operating system...
  65. #----------------------------------------------------------------
  66. # Is this CatOS ?
  67. if(!egrep(pattern:".*Cisco Catalyst Operating System.*", string:os))exit(0);
  68. # 8.3
  69. if(egrep(string:os, pattern:"(8\.3\([0-1]\)|8\.3),"))ok=1;
  70.  
  71. # 8.2
  72. if(egrep(string:os, pattern:"(8\.2\([0-1]\)|8\.2),"))ok=1;
  73.  
  74. # 8.1
  75. if(egrep(string:os, pattern:"(8\.1\([0-9]*\)|8\.1),"))ok=1;
  76.  
  77. # 8.0
  78. if(egrep(string:os, pattern:"(8\.0\([0-9]*\)|8\.0),"))ok=1;
  79.  
  80. # 7.6
  81. if(egrep(string:os, pattern:"(7\.6\([0-5]\)|7\.6),"))ok=1;
  82.  
  83. # 7.5
  84. if(egrep(string:os, pattern:"(7\.5\([0-9]*\)|7\.5),"))ok=1;
  85.  
  86. # 7.4
  87. if(egrep(string:os, pattern:"(7\.4\([0-9]*\)|7\.4),"))ok=1;
  88.  
  89. # 7.3
  90. if(egrep(string:os, pattern:"(7\.3\([0-9]*\)|7\.3),"))ok=1;
  91.  
  92. # 7.2
  93. if(egrep(string:os, pattern:"(7\.2\([0-9]*\)|7\.2),"))ok=1;
  94.  
  95. # 7.1
  96. if(egrep(string:os, pattern:"(7\.1\([0-9]*\)|7\.1),"))ok=1;
  97.  
  98. # 7.0
  99. if(egrep(string:os, pattern:"(7\.0\([0-9]*\)|7\.0),"))ok=1;
  100.  
  101. # 6.4
  102. if(egrep(string:os, pattern:"(6\.4\([0-8]\)|6\.4),"))ok=1;
  103.  
  104. # 6.3
  105. if(egrep(string:os, pattern:"(6\.3\([0-9]*\)|6\.3),"))ok=1;
  106.  
  107. # 6.2
  108. if(egrep(string:os, pattern:"(6\.2\([0-9]*\)|6\.2),"))ok=1;
  109.  
  110. # 6.1
  111. if(egrep(string:os, pattern:"(6\.1\([0-9]*\)|6\.1),"))ok=1;
  112.  
  113. # 6.0
  114. if(egrep(string:os, pattern:"(6\.0\([0-9]*\)|6\.0),"))ok=1;
  115.  
  116. # 5.5
  117. if(egrep(string:os, pattern:"(5\.5\(([0-9]|1[0-9])\)|5\.5),"))ok=1;
  118.  
  119. # 5.4
  120. if(egrep(string:os, pattern:"(5\.4\([0-9]*\)|5\.4),"))ok=1;
  121.  
  122. # 5.3
  123. if(egrep(string:os, pattern:"(5\.3\([0-9]*\)|5\.3),"))ok=1;
  124.  
  125. # 5.2
  126. if(egrep(string:os, pattern:"(5\.2\([0-9]*\)|5\.2),"))ok=1;
  127.  
  128. # 5.1
  129. if(egrep(string:os, pattern:"(5\.1\([0-9]*\)|5\.1),"))ok=1;
  130.  
  131. # 5.0
  132. if(egrep(string:os, pattern:"(5\.0\([0-9]*\)|5\.0),"))ok=1;
  133.  
  134. # Older than that
  135. if(egrep(string:os, pattern:"([1-4]\.0\([0-9]*\)|[1-4]\.0),"))ok=1;
  136.  
  137.  
  138. #----------------------------------------------
  139.  
  140. if(ok)security_hole(port:161, proto:"udp");
  141.