[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openvas-development
Subject:    Re: [Openvas-devel] FreeBSD detection routine is not working?
From:       Eero Volotinen <eero.volotinen () iki ! fi>
Date:       2016-02-09 7:28:30
Message-ID: CABzZrXfwhKq3_nAMec=+KfhFWFkoOPXAMv3GxvWREncFo5=CeA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Looks like motd and lastlogin affects on detection. Is there some nice way
to get this working without .hushlogin file?

I also think that FreeBSD detection code is a bit (or more) broken.
requires some rework. at least it does not work on freebsd 10.X

--
Eero

2016-02-08 21:22 GMT+02:00 Eero Volotinen <eero.volotinen@iki.fi>:

> Hi,
>
> Looks like detection of FreeBSD is not working? see the results:
>
>
> Vulnerability Detection Result
> System identifier unknown:
> "/bin/sh -c 'LANG=C; LC_ALL=C; uname -a'
> Last login: Mon Feb  8 23:10:21 2016 from 10.140.0.35
> FreeBSD 10.1-RELEASE (GENERIC) #0 r274401: Tue Nov 11 21:02:49 UTC 2014
>
> Welcome to FreeBSD!
>
> Release Notes, Errata: https://www.FreeBSD.org/releases/
> Security Advisories:   https://www.FreeBSD.org/security/
> FreeBSD Handbook:      https://www.FreeBSD.org/handbook/
> FreeBSD FAQ:           https://www.FreeBSD.org/faq/
> Questions List:
> https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/
> FreeBSD Forums:        https://forums.FreeBSD.org/
>
> Documents installed with the system are in the
> /usr/local/share/doc/freebsd/
> directory, or can be installed later with:  pkg install en-freebsd-doc
> For other languages, replace "en" with a language code like de or fr.
>
> Show the version of FreeBSD installed:  freebsd-version ; uname -a
> Please include that output and any error messages when posting questions.
> Introduction to manual pages:  man man
> FreeBSD directory layout:      man hier
>
> Edit /etc/motd to change this login announcement.
> root@eero:~ # /bin/sh -c 'LANG=C; LC_ALL=C; uname -a'
> FreeBSD eero 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11
> 21:02:49 UTC 2014   ↵
>   root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC  amd64
> root@eero:~ # "
> Therefore no local security checks applied (missing list of installed
> packages)
> though ssh login provided and works
>
>
> --
> Eero
>
>
>

[Attachment #5 (text/html)]

<div dir="ltr"><div>Looks like motd and lastlogin affects on detection. Is there some \
nice way to get this working without .hushlogin file?<br><br></div><div>I also think \
that FreeBSD detection code is a bit (or more) broken. requires some rework. at least \
it does not work on freebsd 10.X<br></div><div><br>--<br></div>Eero<br></div><div \
class="gmail_extra"><br><div class="gmail_quote">2016-02-08 21:22 GMT+02:00 Eero \
Volotinen <span dir="ltr">&lt;<a href="mailto:eero.volotinen@iki.fi" \
target="_blank">eero.volotinen@iki.fi</a>&gt;</span>:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div><div>Hi,<br><br></div>Looks like \
detection of FreeBSD is not working? see the results:<br><br><br>Vulnerability \
Detection Result<br>System identifier unknown:<br>&quot;/bin/sh -c &#39;LANG=C; \
LC_ALL=C; uname -a&#39;<br>Last login: Mon Feb   8 23:10:21 2016 from \
10.140.0.35<br>FreeBSD 10.1-RELEASE (GENERIC) #0 r274401: Tue Nov 11 21:02:49 UTC \
2014<br><br>Welcome to FreeBSD!<br><br>Release Notes, Errata: <a \
href="https://www.FreeBSD.org/releases/" \
target="_blank">https://www.FreeBSD.org/releases/</a><br>Security Advisories:     <a \
href="https://www.FreeBSD.org/security/" \
target="_blank">https://www.FreeBSD.org/security/</a><br>FreeBSD Handbook:           \
<a href="https://www.FreeBSD.org/handbook/" \
target="_blank">https://www.FreeBSD.org/handbook/</a><br>FreeBSD FAQ:                 \
<a href="https://www.FreeBSD.org/faq/" \
target="_blank">https://www.FreeBSD.org/faq/</a><br>Questions List: <a \
href="https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/" \
target="_blank">https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/</a><br>FreeBSD \
Forums:               <a href="https://forums.FreeBSD.org/" \
target="_blank">https://forums.FreeBSD.org/</a><br><br>Documents installed with the \
system are in the /usr/local/share/doc/freebsd/<br>directory, or can be installed \
later with:   pkg install en-freebsd-doc<br>For other languages, replace \
&quot;en&quot; with a language code like de or fr.<br><br>Show the version of FreeBSD \
installed:   freebsd-version ; uname -a<br>Please include that output and any error \
messages when posting questions.<br>Introduction to manual pages:   man \
man<br>FreeBSD directory layout:           man hier<br><br>Edit /etc/motd to change \
this login announcement.<br>root@eero:~ # /bin/sh -c &#39;LANG=C; LC_ALL=C; uname \
-a&#39;<br>FreeBSD eero 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11 \
21:02:49 UTC 2014     ↵<br>   \
root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC   amd64<br>root@eero:~ # \
&quot;<br>Therefore no local security checks applied (missing list of installed \
packages)<br>though ssh login provided and \
works<br><br><br>--<br></div>Eero<br><div><br><br></div></div> \
</blockquote></div><br></div>



_______________________________________________
Openvas-devel mailing list
Openvas-devel@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-devel

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic