
Copyright © 2002-2012 Tenable Network Security, Inc.
CANVAS : D2ExploitPack
CORE : true
CVSSTEMPORAL : CVSS2#E:F/RL:OF/RC:C
These keywords are displayed only in
vulnerabilities detected by PVS 3.4 and greater.
Same as “sport”, but for destination ports.
Each Tenable plugin for the PVS is included in a family. This
designation allows Tenable to group PVS plugins into easily
managed sets that can be reported on individually.
Same as “hs_sport” except for destination ports.
Normally, when the PVS runs its plugins, they are either free
ranging looking for matches on any port, or fixed to specific
ports with the “sport” or “dport” keywords. In very high
speed networks, many plugins have a fall-back port, known
as a high-speed port, which focuses the plugin only on one
specific port. In high speed more, the performance of a PVS
plugin with an “hs_sport” keyword is exactly the same as if
the plugin was written with the “sport” keyword.
Each PVS plugin needs a unique rule ID. Tenable assigns
these 16 bit numbers within the overall Nessus range of valid
entries. Current plugin IDs can be listed at Tenable’s website
for the PVS.
This keyword specifies a set of one or more simple ASCII
patterns that must be present in order for the more complex
pattern analysis to take place. The “match” keyword gives
the PVS a lot of its performance and functionality. With this
keyword, if it does not see a simple pattern, the entire plugin
will not match.
This option will affect the output sent to servers specified
with realtime-syslog, as well as the data in the file
specified with realtime-file. By specifying a maximum
number of bytes, the syslog message generated from the
current sniffed packet will be truncated accordingly.
This is the name of the vulnerability the PVS has detected.
Multiple PVS plugins can have the same name, but this is not
encouraged.
To track compatibility with the Nessus vulnerability scanner,
Tenable has attempted to associate PVS vulnerability checks
with relevant Nessus vulnerability checks. Multiple Nessus
IDs can be listed under one “nid” entry such as
“nid=10222,10223”.
Kommentare zu diesen Handbüchern