xxx.nasl does'nt work on international version of Windows (one more time)

From: Georges Dagousset (georges.dagoussetat_private)
Date: Wed Dec 05 2001 - 01:02:37 PST

  • Next message: Georges Dagousset: "xxx.nasl does'nt work on international version of Windows (one more time)" 

    Hello all,

I just download the last plugin alchemy_eye_http.nasl, and
install Alchemy Eye.

The plugin don't alert me, because there is 2 problems:
1/ My SystemRoot is "C:\WINDOWS" and not "C:\WINNT"
and the plugin test only WINNT/system32/ipconfig.exe

2/ My Windows is a french one, so the output for ipconfig.exe is:
Configuration IP de Windows 2000

Ethernet carte Connexion au réseau local :

        Suffixe DNS spéc. à la connexion. :
        Adresse IP. . . . . . . . . . . . : xxx.xxx.xxx.xxx
        Masque de sous-réseau . . . . . . : 255.255.255.0
        Passerelle par défaut . . . . . . : xxx.xxx.xxx.xxx

and the plugin parse the output and checks for "IP Configuration"

My proposals:
1/ always test the dirs WINDOWS and WINNT
2/ always use a command giving the same result whatever the system language.
The "cmd.exe" should be nice if nessus checks for the "Microsoft Corp."
string.
I suggest to choose ONE command (and the parse string) and to use it
in all new plugins.

Comments and suggestions are welcome!



So for this plugin, my change are:
pat = "IP Configuration"; #string returned by webserver if it's vulnerable
becomes
pat = "Microsoft Corp."; #string returned by webserver if it's vulnerable

and
 url = string("/cgi-bin", dir[d],
"/../../../../../../../../WINNT/system32/ipconfig.exe");
 if(check(req:url))exit(0);
becomes
 url = string("/cgi-bin", dir[d],
"/../../../../../../../../WINNT/system32/cmd.exe");
 if(check(req:url))exit(0);
 url = string("/cgi-bin", dir[d],
"/../../../../../../../../WINDOWS/system32/cmd.exe");
 if(check(req:url))exit(0);


Regards,
Georges Dagousset

    This archive was generated by hypermail 2b30 : Wed Dec 05 2001 - 01:08:02 PST