Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

follow-up issue "Fix: Fix scan config creation from CERT-Bunds." #1129

Open
Brom2023 opened this issue Aug 2, 2024 · 0 comments
Open

follow-up issue "Fix: Fix scan config creation from CERT-Bunds." #1129

Brom2023 opened this issue Aug 2, 2024 · 0 comments

Comments

@Brom2023
Copy link

Brom2023 commented Aug 2, 2024

Expected behavior

using script cfg-gen.gmp.py results in generating a configuration with all nvts selected for cve's within a specific cert-advisory.

Current behavior

A new configuration is created. The two basic port-NVT's(oid=1.3.6.1.4.1.25623.1.0.14259 & 1.3.6.1.4.1.25623.1.0.100315) needed by each scan configuration are set. Any other modification either fails silently or with an error the last commit tried to fix.

Creating scan config for WID-SEC-2024-1071
gvmerr=<GvmResponseError status="400" message="Attempt to modify NVT in whole-only family SuSE Local Security Checks">
gvmerr=<GvmResponseError status="400" message="Attempt to modify NVT in whole-only family Mageia Linux Local Security Checks">
gvmerr=<GvmResponseError status="400" message="Attempt to modify NVT in whole-only family Ubuntu Local Security Checks">

Steps to reproduce

  1. downloading https://github.com/greenbone/gvm-tools/blob/main/scripts/cfg-gen-for-certs.gmp.py

2.Creating scan config for WID-SEC-2024-1071
e.g. gvm-script --timeout -1 ssh ./cfg-gen.gmp.py WID-SEC-2024-1071

GVM versions

gvm-tools: gvm-cli 24.7.0 (API version 24.7.0)
on GEA and on client

Environment

Operating system:
GEA 650
Version 22.04.22

Logfiles

Aug 02 14:48:53 GSMSMPB sshd[3347]: pam_unix(sshd:session): session opened for user gmp(uid=108) by (uid=0)
Aug 02 14:48:56 GSMSMPB gvmd[3356]: Scan config scanconfig_for_WID-SEC-2024-1071 (a8a665ba-e834-4f3c-8673-034d41896a63) has been created by <user>
Aug 02 14:48:56 GSMSMPB gvmd[3356]: Scan config scanconfig_for_WID-SEC-2024-1071 (a8a665ba-e834-4f3c-8673-034d41896a63) could not be modified by <user>
Aug 02 14:48:56 GSMSMPB gvmd[3356]: Scan config scanconfig_for_WID-SEC-2024-1071 (a8a665ba-e834-4f3c-8673-034d41896a63) could not be modified by <user>
Aug 02 14:48:56 GSMSMPB gvmd[3356]: Scan config scanconfig_for_WID-SEC-2024-1071 (a8a665ba-e834-4f3c-8673-034d41896a63) could not be modified by <user>
Aug 02 14:48:56 GSMSMPB gvmd[3356]: Scan Config scanconfig_for_WID-SEC-2024-1071 (a8a665ba-e834-4f3c-8673-034d41896a63) has been modified by <user>
Aug 02 14:48:56 GSMSMPB sshd[3347]: pam_unix(sshd:session): session closed for user gmp

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant