Class: Risu::Parsers::Nessus::PostProcess::OpenSSLRollups

Inherits:
Base::PostProcessBase show all
Defined in:
lib/risu/parsers/nessus/postprocess/openssl.rb

Instance Attribute Summary

Attributes inherited from Base::PostProcessBase

#info

Instance Method Summary collapse

Methods inherited from Base::PostProcessBase

#<=>, #==, #calculate_severity, #create_item, #create_plugin, #has_findings, #has_host_findings, inherited, #run

Constructor Details

#initialize ⇒ OpenSSLRollups

Returns a new instance of OpenSSLRollups.



29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
 
# File 'lib/risu/parsers/nessus/postprocess/openssl.rb', line 29

def initialize
	@info =
	{
		:description => "OpenSSL Patch Rollup",
		:plugin_id => -99984,
		:plugin_name => "Missing the latest OpenSSL Patches",
		:item_name => "Update to the latest OpenSSL",
		:plugin_ids => [
			11267, #OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities
			12110, #OpenSSL < 0.9.6m / 0.9.7d Multiple Remote DoS
			74363, #OpenSSL 0.9.8 < 0.9.8za Multiple Vulnerabilities
			77086, #OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities
			74326, #OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability
			73412, #OpenSSL Heartbeat Information Disclosure (Heartbleed)
			77200, #OpenSSL 'ChangeCipherSpec' MiTM Vulnerability
			17757, #OpenSSL < 0.9.7l / 0.9.8d Multiple Vulnerabilities
			73404, #OpenSSL 1.0.1 < 1.0.1g Multiple Vulnerabilities (Heartbleed)
			74364, #OpenSSL 1.0.1 < 1.0.1h Multiple Vulnerabilities
			77088, #OpenSSL 1.0.1 < 1.0.1i Multiple Vulnerabilities
			17755, #OpenSSL < 0.9.7h / 0.9.8a Protocol Version Rollback
			17756, #OpenSSL < 0.9.7k / 0.9.8c PKCS Padding RSA Signature Forgery Vulnerability
			17758, #OpenSSL < 0.9.7m / 0.9.8e Buffer Overflow (deprecated)
			17759, #OpenSSL < 0.9.8 Weak Default Configuration
			17761, #OpenSSL < 0.9.8i Denial of Service
			17762, #OpenSSL < 0.9.8j Signature Spoofing
			17763, #OpenSSL < 0.9.8k Multiple Vulnerabilities
			17765, #OpenSSL < 0.9.8l Multiple Vulnerabilities
			57459, #OpenSSL < 0.9.8s Multiple Vulnerabilities
			58799, #OpenSSL < 0.9.8w ASN.1 asn1_d2i_read_bio Memory Corruption
			17760, #OpenSSL < 0.9.8f Multiple Vulnerabilities
			56996, #OpenSSL < 0.9.8h Multiple Vulnerabilities
			58564, #OpenSSL < 0.9.8u Multiple Vulnerabilities
			59076, #OpenSSL 0.9.8 < 0.9.8x DTLS CBC Denial of Service
			64532, #OpenSSL < 0.9.8y Multiple Vulnerabilities
			71857, #OpenSSL 1.0.1 < 1.0.1f Multiple Vulnerabilities
			78554, #OpenSSL 1.0.1 < 1.0.1j Multiple Vulnerabilities (POODLE)
			80568, #OpenSSL 1.0.1 < 1.0.1k Multiple Vulnerabilities (FREAK)
			82032, #OpenSSL 1.0.1 < 1.0.1m Multiple Vulnerabilities
			84153, #OpenSSL 1.0.1 < 1.0.1n Multiple Vulnerabilities (Logjam)
			51892, #OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Session Resume Ciphersuite Downgrade Issue
			17766, #OpenSSL < 0.9.8p / 1.0.0b Buffer Overflow
			17767, #OpenSSL < 0.9.8p / 1.0.0e Double Free Vulnerability
			90888, #OpenSSL 1.0.1 < 1.0.1o ASN.1 Encoder Negative Zero Value Handling RCE -
			93814, #OpenSSL 1.0.1 < 1.0.1u Multiple Vulnerabilities
			89081, #OpenSSL 1.0.1 < 1.0.1s Multiple Vulnerabilities (DROWN)
			84636, #OpenSSL 1.0.1 < 1.0.1p Multiple Vulnerabilities -
			87221, #OpenSSL 1.0.1 < 1.0.1q Multiple DoS -
			88529, #OpenSSL 1.0.1 < 1.0.1r Multiple Vulnerabilities -
			90890, #OpenSSL 1.0.1 < 1.0.1t Multiple Vulnerabilities -
			93112, #OpenSSL < 1.1.0 Default Weak 64-bit Block Cipher
			89082, #OpenSSL 1.0.2 < 1.0.2g Multiple Vulnerabilities (DROWN)
			96873, #OpenSSL 1.0.2 < 1.0.2k Multiple Vulnerabilities
			93815, #OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities
			78552, #OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities
80566, #OpenSSL 0.9.8 < 0.9.8zd Multiple Vulnerabilities
82030, #OpenSSL 0.9.8 < 0.9.8zf Multiple Vulnerabilities
84151, #OpenSSL 0.9.8 < 0.9.8zg Multiple Vulnerabilities
87219, #OpenSSL 0.9.8 < 0.9.8zh X509_ATTRIBUTE Memory Leak DoS
87222, #OpenSSL 1.0.2 < 1.0.2e Multiple Vulnerabilities
88530, #OpenSSL 1.0.2 < 1.0.2f Multiple Vulnerabilities
90891, #OpenSSL 1.0.2 < 1.0.2h Multiple Vulnerabilities
109945, #OpenSSL 1.0.x < 1.0.2o Multiple Vulnerabilities
112119, #OpenSSL 1.0.x < 1.0.2p Multiple Vulnerabilities
104408, #OpenSSL 1.0.x < 1.0.2m RSA/DSA Unspecified Carry Issue
		]
	}
end