*** Eero Volotinen wrote:

> Looks like there are some bug in pkg-lib-gentoo.inc ? I did some debugging
> again and usually gentoo checks works, if both parameters are not passed to
> library.

in pkg-lib-gentoo.inc the second foreach is missing a split().

foreach vver (unaffected) {
  vvercomp = split(vver, sep:' ', keep:0);
  [...]

> as only vulnerable parameter is passed to library. any idea how to debug
> this issue as it's a bit complex debug authenticated checks with libraries?

Edit gather-package-list.nasl. Above 'port = get_preference("auth_port_ssh");' 
add

set_kb_item(name:"Secret/SSH/login", value:"root");
set_kb_item(name:"Secret/SSH/password", value:"password");

openvas-nasl -i /var/lib/openvas/plugins/ -X -B -d -t 192.168.2.49 
gather-package-list.nasl 2012/glsa_201110_10.nasl

Micha

-- 
Michael Meyer                  OpenPGP Key: 0xAF069E9152A6EFA6 
http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to