[Plugins-writers] bind_query.nasl false negative [PATCH]

From: Hubert Seiwert (hubert@private)
Date: Thu Feb 02 2006 - 05:47:54 PST


Hi,

bind_query.nasl checks for globally usable nameservers.
It queries kb key "Services/dns", if not set it exits.

I'm finding that sometimes only Services/udp/dns=53 is getting set after 
11002 (dns_server.nasl) is run (according to the KB file), but not 
Services/dns, so bind_query doesn't run its test.

I edited bind_query.nasl (see patch) and I'm now getting correct 
positive results on DNS servers where I've manually confirmed with dig 
that they are global resolvers.

Regards,

-- 
Hubert Seiwert

Internet Security Specialist, Westpoint Ltd
Albion Wharf, 19 Albion Street, Manchester M1 5LN, United Kingdom

Web: www.westpoint.ltd.uk
Tel: +44-161-2371028


--- /usr/lib/nessus/plugins/bind_query.nasl     2006-01-27 12:51:23.000000000 +0000
+++ bind_query.nasl     2006-02-02 13:26:55.000000000 +0000
@@ -84,7 +84,7 @@
 include("dns_func.inc");
 include("byte_func.inc");

-if ( ! get_kb_item("Services/dns") ) exit(0);
+if ( (!get_kb_item("Services/dns")) && (!get_kb_item("Services/udp/dns") )) exit(0);

 host = "www";
 domain = get_kb_item("Settings/third_party_domain");


_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Thu Feb 02 2006 - 05:48:32 PST