[Plugins-writers] Plugins 10861 and 15894

Previous message: Jason Haar: "Re: [Plugins-writers] Plugin ID 11485"
Next in thread: Nicolas Pouvesle: "Re: [Plugins-writers] Plugins 10861 and 15894"
Reply: Nicolas Pouvesle: "Re: [Plugins-writers] Plugins 10861 and 15894"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

sclowers@private

Plugin ID 10861 relies on output from Plugin ID 15894 as the excerpt from
Plugin ID 10861 source shows below.

****************Plugin ID 10861***************************************

# Superceeded by MS04-040

if ( get_kb_item("SMB/KB889293") ) exit(0);

I believe Plugin ID 15894 has an error in the code shown below. On all of
our Win XP machines I checked, the item under that key is listed as
"IsInstalled".

***************Plugin ID 15894*****************************************

key = "SOFTWARE\Microsoft\Active Setup\Installed
Components\{839117ee-2132-4bae-a56a-42b50204c9b9}";

 item = "Installed"; [ should be "IsInstalled" ]

This causes the check in Plugin 15894 to return erroneous results which then
causes Plugin 10861 to return erroneous results. 

I edited /usr/local/lib/nessus/plugins/smb_nt_ms04-040.nasl on my Nessus
server changing item = "Installed"  to  item = "IsInstalled"  and re-ran the
scan. This seems to have fixed the problem.

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers