This plugin has been deprecated due to Microsoft removing downloads to related KBs. These were removed due to Access Denied errors which have been resolved in later cumulative patches.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from the Microsoft Security Updates API. The text
# itself is copyright (C) Microsoft Corporation.
#
include("compat.inc");
if (description)
{
script_id(110990);
script_version("1.8");
script_cvs_date("Date: 2019/11/04");
script_cve_id(
"CVE-2018-8202",
"CVE-2018-8260",
"CVE-2018-8284",
"CVE-2018-8356"
);
script_bugtraq_id(
104664,
104665,
104666,
104667
);
script_xref(name:"MSKB", value:"4338606");
script_xref(name:"MSKB", value:"4338605");
script_xref(name:"MSKB", value:"4338604");
script_xref(name:"MSKB", value:"4338602");
script_xref(name:"MSKB", value:"4338601");
script_xref(name:"MSKB", value:"4338600");
script_xref(name:"MSKB", value:"4338423");
script_xref(name:"MSKB", value:"4338422");
script_xref(name:"MSKB", value:"4338421");
script_xref(name:"MSKB", value:"4338420");
script_xref(name:"MSKB", value:"4338424");
script_xref(name:"MSKB", value:"4338819");
script_xref(name:"MSKB", value:"4338416");
script_xref(name:"MSKB", value:"4338417");
script_xref(name:"MSKB", value:"4338415");
script_xref(name:"MSKB", value:"4338418");
script_xref(name:"MSKB", value:"4338419");
script_xref(name:"MSKB", value:"4338610");
script_xref(name:"MSKB", value:"4338611");
script_xref(name:"MSKB", value:"4338612");
script_xref(name:"MSKB", value:"4338613");
script_xref(name:"MSKB", value:"4338829");
script_xref(name:"MSKB", value:"4338826");
script_xref(name:"MSKB", value:"4338825");
script_xref(name:"MSKB", value:"4338814");
script_xref(name:"MSFT", value:"MS18-4338606");
script_xref(name:"MSFT", value:"MS18-4338605");
script_xref(name:"MSFT", value:"MS18-4338604");
script_xref(name:"MSFT", value:"MS18-4338602");
script_xref(name:"MSFT", value:"MS18-4338601");
script_xref(name:"MSFT", value:"MS18-4338600");
script_xref(name:"MSFT", value:"MS18-4338423");
script_xref(name:"MSFT", value:"MS18-4338422");
script_xref(name:"MSFT", value:"MS18-4338421");
script_xref(name:"MSFT", value:"MS18-4338420");
script_xref(name:"MSFT", value:"MS18-4338424");
script_xref(name:"MSFT", value:"MS18-4338819");
script_xref(name:"MSFT", value:"MS18-4338416");
script_xref(name:"MSFT", value:"MS18-4338417");
script_xref(name:"MSFT", value:"MS18-4338415");
script_xref(name:"MSFT", value:"MS18-4338418");
script_xref(name:"MSFT", value:"MS18-4338419");
script_xref(name:"MSFT", value:"MS18-4338610");
script_xref(name:"MSFT", value:"MS18-4338611");
script_xref(name:"MSFT", value:"MS18-4338612");
script_xref(name:"MSFT", value:"MS18-4338613");
script_xref(name:"MSFT", value:"MS18-4338829");
script_xref(name:"MSFT", value:"MS18-4338826");
script_xref(name:"MSFT", value:"MS18-4338825");
script_xref(name:"MSFT", value:"MS18-4338814");
script_name(english:"Security Updates for Microsoft .NET Framework (July 2018) (deprecated)");
script_summary(english:"Checks for Microsoft security updates.");
script_set_attribute(attribute:"synopsis", value:
"This plugin has been deprecated.");
script_set_attribute(attribute:"description", value:
"This plugin has been deprecated due to Microsoft removing downloads
to related KBs. These were removed due to Access Denied errors which
have been resolved in later cumulative patches.");
# https://support.microsoft.com/en-us/help/4338606/description-of-the-security-only-update-for-net-framework-4-6-4-6-1-4
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6871a6a2");
# https://support.microsoft.com/en-us/help/4338605/description-of-the-security-only-update-for-net-framework-4-6-4-6-1-4
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d62bcc3d");
# https://support.microsoft.com/en-us/help/4338604/description-of-the-security-only-update-for-net-framework-4-6-4-6-1-4
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5af81d47");
# https://support.microsoft.com/en-us/help/4338602/description-of-the-security-only-update-for-net-framework-4-5-2-for-wi
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d75a65af");
# https://support.microsoft.com/en-us/help/4338601/description-of-the-security-only-update-for-net-framework-4-5-2-for-wi
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?44f66a8b");
# https://support.microsoft.com/en-us/help/4338600/description-of-the-security-only-update-for-net-framework-4-5-2-for-wi
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d144042d");
# https://support.microsoft.com/en-us/help/4338423/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?df31c224");
# https://support.microsoft.com/en-us/help/4338422/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e6a3fb46");
# https://support.microsoft.com/en-us/help/4338421/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8908e951");
# https://support.microsoft.com/en-us/help/4338420/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1ad1148d");
# https://support.microsoft.com/en-us/help/4338424/description-of-the-security-and-quality-rollup-for-net-framework-3-5-s
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5f015bf2");
# https://support.microsoft.com/en-us/help/4338819/windows-10-update-kb4338819
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b9bfc0c9");
# https://support.microsoft.com/en-us/help/4338416/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ce3ef6dc");
# https://support.microsoft.com/en-us/help/4338417/description-of-the-security-and-quality-rollup-update-for-net-framewor
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?50b55edf");
# https://support.microsoft.com/en-us/help/4338415/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8bd31c0d");
# https://support.microsoft.com/en-us/help/4338418/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?72e0da05");
# https://support.microsoft.com/en-us/help/4338419/description-of-the-security-and-quality-rollup-updates-for-net-framewo
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c0096c91");
# https://support.microsoft.com/en-us/help/4338610/description-of-the-security-only-update-for-net-framework-3-5-for-wind
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1340c27a");
# https://support.microsoft.com/en-us/help/4338611/description-of-the-security-only-update-for-net-framework-2-0-sp2-and
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?17109616");
# https://support.microsoft.com/en-us/help/4338612/description-of-the-security-only-update-for-net-framework-3-5-1-for-wi
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5e822fc3");
# https://support.microsoft.com/en-us/help/4338613/description-of-the-security-only-update-for-net-framework-3-5-for-wind
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?05dcc1e0");
# https://support.microsoft.com/en-us/help/4338829/windows-10-update-kb4338829
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a0a3fc8a");
# https://support.microsoft.com/en-us/help/4338826/windows-10-update-kb4338826
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?454614d0");
# https://support.microsoft.com/en-us/help/4338825/windows-10-update-kb4338825
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?3c803961");
# https://support.microsoft.com/en-us/help/4338814/windows-10-update-kb4338814
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6a189799");
script_set_attribute(attribute:"solution", value:
"Microsoft has released security updates for Microsoft .NET Framework.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-8284");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"vuln_publication_date", value:"2018/07/10");
script_set_attribute(attribute:"patch_publication_date", value:"2018/07/10");
script_set_attribute(attribute:"plugin_publication_date", value:"2018/07/10");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/a:microsoft:.net_framework");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Windows : Microsoft Bulletins");
script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("smb_check_dotnet_rollup.nasl", "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl", "microsoft_net_framework_installed.nasl");
script_require_keys("SMB/MS_Bulletin_Checks/Possible");
script_require_ports(139, 445, "Host/patch_management_checks");
exit(0);
}
exit(0,"This plugin has been deprecated, use smb_nt_ms18_aug_dotnet.nasl (plugin 111693) instead");
include("audit.inc");
include("global_settings.inc");
include("install_func.inc");
include("misc_func.inc");
include("smb_func.inc");
include("smb_hotfixes.inc");
include("smb_hotfixes_fcheck.inc");
get_kb_item_or_exit('SMB/MS_Bulletin_Checks/Possible');
bulletin = "MS18-07";
kbs = make_list(
"4338606",
"4338605",
"4338604",
"4338602",
"4338601",
"4338600",
"4338423",
"4338422",
"4338421",
"4338420",
"4338424",
"4338819",
"4338416",
"4338417",
"4338415",
"4338418",
"4338419",
"4338610",
"4338611",
"4338612",
"4338613",
"4338829",
"4338826",
"4338825",
"4338814"
);
if (get_kb_item('Host/patch_management_checks')) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);
get_kb_item_or_exit("SMB/Registry/Enumerated");
get_kb_item_or_exit('SMB/WindowsVersion', exit_code:1);
if (hotfix_check_sp_range(vista:'2', win7:'1', win8:'0', win81:'0', win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);
productname = get_kb_item_or_exit("SMB/ProductName", exit_code:1);
if ("Windows 8" >< productname && "Windows 8.1" >!< productname) audit(AUDIT_OS_SP_NOT_VULN);
else if ("Vista" >< productname) audit(AUDIT_OS_SP_NOT_VULN);
share = hotfix_get_systemdrive(exit_on_fail:TRUE, as_share:TRUE);
if (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);
app = 'Microsoft .NET Framework';
get_install_count(app_name:app, exit_if_zero:TRUE);
installs = get_combined_installs(app_name:app);
vuln = 0;
if (installs[0] == 0)
{
foreach install (installs[1])
{
version = install['version'];
if( version != UNKNOWN_VER &&
smb_check_dotnet_rollup(rollup_date:"07_2018", dotnet_ver:version))
vuln++;
}
}
if(vuln)
{
hotfix_security_hole();
hotfix_check_fversion_end();
exit(0);
}
else
{
hotfix_check_fversion_end();
audit(AUDIT_HOST_NOT, "affected");
}
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8260
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8284
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8356
www.nessus.org/u?05dcc1e0
www.nessus.org/u?1340c27a
www.nessus.org/u?17109616
www.nessus.org/u?1ad1148d
www.nessus.org/u?3c803961
www.nessus.org/u?44f66a8b
www.nessus.org/u?454614d0
www.nessus.org/u?50b55edf
www.nessus.org/u?5af81d47
www.nessus.org/u?5e822fc3
www.nessus.org/u?5f015bf2
www.nessus.org/u?6871a6a2
www.nessus.org/u?6a189799
www.nessus.org/u?72e0da05
www.nessus.org/u?8908e951
www.nessus.org/u?8bd31c0d
www.nessus.org/u?a0a3fc8a
www.nessus.org/u?b9bfc0c9
www.nessus.org/u?c0096c91
www.nessus.org/u?ce3ef6dc
www.nessus.org/u?d144042d
www.nessus.org/u?d62bcc3d
www.nessus.org/u?d75a65af
www.nessus.org/u?df31c224
www.nessus.org/u?e6a3fb46