Afternoon Daryl, I have the same duties with Sophos antivirus :o) Under unix environment writing a Nessus plugin is easy. But under windows I'm still investigating on this subject and Renaud Deraison suggested to have a look on DLL version because Nessus is able to grab details from DLL files. May be you should do the same with SAV DLLs... Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT Operations | BT | E: thomas.nguyenvan@private |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899| www.btireland.com -----Original Message----- From: Chambers, Daryl [HDS] [mailto:daryl.chambers@private] Sent: 09 February 2007 13:11 To: Thomas Nguyen Van; plugins-writers@private Subject: RE: [Plugins-writers] RE: Plugins-writers Digest, Vol 40, Issue 4 Linux and Windows are the two platforms I am running Nessus on. The SAV is on Windows boxes only. We are trying to get updates done, and i was tasked to monitor the updates through Nessus. _____ From: plugins-writers-bounces@private [mailto:plugins-writers-bounces@private] On Behalf Of Thomas Nguyen Van Sent: Friday, February 09, 2007 3:53 AM To: 'plugins-writers@private' Subject: [Plugins-writers] RE: Plugins-writers Digest, Vol 40, Issue 4 Morning Daryl, Could you precise on which platform (Solaris, windows, ...) ? For example, if you go under Linux/Unix, if you type the following command, you can find those info: # uvscan --version Virus Scan for Linux v4.40.0 Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights reserved. (408) 988-3832 LICENSED COPY - Sep 23 2004 Scan engine v4.4.00 for Linux. Virus data file v4959 created Feb 08 2007 Scanning for 227549 viruses, trojans and variants. Regards, Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT Operations | BT | E: thomas.nguyenvan@private |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899| www.btireland.com -----Original Message----- From: plugins-writers-request@private [mailto:plugins-writers-request@private <mailto:plugins-writers-request@private> ] Sent: 08 February 2007 17:00 To: plugins-writers@private Subject: Plugins-writers Digest, Vol 40, Issue 4 Send Plugins-writers mailing list submissions to plugins-writers@private To subscribe or unsubscribe via the World Wide Web, visit http://mail.nessus.org/mailman/listinfo/plugins-writers <http://mail.nessus.org/mailman/listinfo/plugins-writers> or, via email, send a message with subject or body 'help' to plugins-writers-request@private You can reach the person managing the list at plugins-writers-owner@private When replying, please edit your Subject line so it is more specific than "Re: Contents of Plugins-writers digest..." Today's Topics: 1. Symantec Plugins (Chambers, Daryl [HDS]) ---------------------------------------------------------------------- Message: 1 Date: Thu, 8 Feb 2007 09:19:32 -0500 From: "Chambers, Daryl [HDS]" <daryl.chambers@private> Subject: [Plugins-writers] Symantec Plugins To: <plugins-writers@private> Message-ID: <5637C643F42E1C49AE53E0BF2B96EBE605C46DF1@private> Content-Type: text/plain; charset="us-ascii" Is there a plugin anyone has created that will send an alert if the Symantec Version is not the latest one? There are some serious vulnerabilities in the earlier versions however the only plugin I see simply checks to see if a password vulnerability exists that was in versions prior to 5.x (I also posted this to the general board) Thanks, Daryl L. Chambers Jr. Security Audit Analyst Desk 407.822.2939 Cell 407.401.0775 One Team Driving Customer Success and Shareholder Value -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b59b28 72/attachment.htm <http://mail.nessus.org/pipermail/plugins-writers/attachments/20070208/b59b2 872/attachment.htm> ------------------------------ _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers <http://mail.nessus.org/mailman/listinfo/plugins-writers> End of Plugins-writers Digest, Vol 40, Issue 4 ********************************************** BT Communications Ireland Limited is a wholly owned subsidiary of BT Group plc Registered in Ireland, Registration No. 141524 Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland This electronic message contains information (and may contain files) from BT Communications Ireland Limited which may be privileged or confidential. The information is intended to be for the sole use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information and or files is prohibited. If you have received this electronic message in error, please notify us by telephone or email (to the numbers or address above) immediately. http://www.btireland.ie <http://www.btireland.ie> BT Communications Ireland Limited is a wholly owned subsidiary of BT Group plc Registered in Ireland, Registration No. 141524 Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland This electronic message contains information (and may contain files) from BT Communications Ireland Limited which may be privileged or confidential. The information is intended to be for the sole use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information and or files is prohibited. If you have received this electronic message in error, please notify us by telephone or email (to the numbers or address above) immediately. http://www.btireland.ie _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2.1.3 : Fri Feb 09 2007 - 05:19:18 PST