nessus-plugins/scripts smb_nt_ms05-001.nasl, NONE, 1.1 smb_nt_ms05-002.nasl, NONE, 1.1 smb_nt_ms05-003.nasl, NONE, 1.1

[npouvesle_at_nessus.org]

Update of /usr/local/cvs/nessus-plugins/scripts
In directory raccoon.nessus.org:/tmp/cvs-serv28238

Added Files:
	smb_nt_ms05-001.nasl smb_nt_ms05-002.nasl smb_nt_ms05-003.nasl 
Log Message:
Added.

--- NEW FILE: smb_nt_ms05-001.nasl ---
#
# (C) Tenable Network Security
#
if(description)
{
 script_id(16123);
 script_version("$Revision: 1.1 $");
 script_cve_id("CAN-2004-1043");
 name["english"] = "HTML Help Code Execution (890175) (registry check)";
 
 script_name(english:name["english"]);
 
 desc["english"] = "
The remote host contains a version of the HTML Help ActiveX control which
is vulnerable to a security flaw which may allow an attacker to execute
arbitrary code on the remote host by constructing a malicious web page
and entice a victim to visit this web page.

Solution : http://www.microsoft.com/technet/security/bulletin/ms05-001.mspx
Risk factor : High";

 script_description(english:desc["english"]);
 
 summary["english"] = "Checks the remote registry for MS05-001";

 script_summary(english:summary["english"]);
 
 script_category(ACT_GATHER_INFO);
 
 script_copyright(english:"This script is Copyright (C) 2005 Tenable Network Security");
 family["english"] = "Windows : Microsoft Bulletins";
 script_family(english:family["english"]);
 
 script_dependencies("smb_hotfixes.nasl");
 script_require_keys("SMB/Registry/Enumerated");
 exit(0);
}

include("smb_hotfixes.inc");


if ( hotfix_check_sp(nt:7, xp:3, win2k:5, win2003:1) <= 0 ) exit(0);

if ( hotfix_missing(name:"890175") > 0 )
	security_hole(get_kb_item("SMB/transport"));

--- NEW FILE: smb_nt_ms05-002.nasl ---
#
# (C) Tenable Network Security
#
if(description)
{
 script_id(15962);
 script_version("$Revision: 1.1 $");
 script_cve_id("CAN-2004-1305", "CAN-2004-1049");
 name["english"] = "Cursor and Icon Format Handling Code Execution (891711) (registry check)";
 
 script_name(english:name["english"]);
 
 desc["english"] = "
The remote host contains a version of the Windows kernel which is vulnerable
to a security flaw in the way that cursors and icons are handleld. An attacker
may be able to execute arbitrary code on the remote host by constructing a
malicious web page and entice a victim to visit this web page. An attacker may
send a malicious email to the victim to exploit this flaw too.

Solution : http://www.microsoft.com/technet/security/bulletin/ms05-002.mspx
Risk factor : High";

 script_description(english:desc["english"]);
 
 summary["english"] = "Checks the remote registry for MS05-002";

 script_summary(english:summary["english"]);
 
 script_category(ACT_GATHER_INFO);
 
 script_copyright(english:"This script is Copyright (C) 2005 Tenable Network Security");
 family["english"] = "Windows : Microsoft Bulletins";
 script_family(english:family["english"]);
 
 script_dependencies("smb_hotfixes.nasl");
 script_require_keys("SMB/Registry/Enumerated");
 exit(0);
}

include("smb_hotfixes.inc");


if ( hotfix_check_sp(nt:7, xp:2, win2k:5, win2003:1) <= 0 ) exit(0);

if ( hotfix_missing(name:"891711") > 0 )
	security_hole(get_kb_item("SMB/transport"));

--- NEW FILE: smb_nt_ms05-003.nasl ---
#
# (C) Tenable Network Security
#
if(description)
{
 script_id(16125);
 script_version("$Revision: 1.1 $");
 script_cve_id("CAN-2004-897");
 name["english"] = "Indexing Service Code Execution (871250) (registry check)";
 
 script_name(english:name["english"]);
 
 desc["english"] = "
The remote host contains a version of the Indexing Service which is
vulnerable to a security flaw which may allow an attacker to execute
arbitrary code on the remote host by constructing a malicious query.

Solution : http://www.microsoft.com/technet/security/bulletin/ms05-003.mspx
Risk factor : High";

 script_description(english:desc["english"]);
 
 summary["english"] = "Checks the remote registry for MS05-003";

 script_summary(english:summary["english"]);
 
 script_category(ACT_GATHER_INFO);
 
 script_copyright(english:"This script is Copyright (C) 2005 Tenable Network Security");
 family["english"] = "Windows : Microsoft Bulletins";
 script_family(english:family["english"]);
 
 script_dependencies("smb_hotfixes.nasl");
 script_require_keys("SMB/Registry/Enumerated");
 exit(0);
}

include("smb_hotfixes.inc");

if ( hotfix_check_sp(nt:7, xp:2, win2k:5, win2003:1) <= 0 ) exit(0);

if ( hotfix_missing(name:"871250") > 0 )
	security_hole(get_kb_item("SMB/transport"));