fidius-cvedb 0.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. data/Gemfile +7 -0
  2. data/LICENSE +57 -0
  3. data/README.md +106 -0
  4. data/Rakefile +15 -0
  5. data/bin/fidius-cvedb +64 -0
  6. data/fidius-cvedb.gemspec +22 -0
  7. data/lib/cveparser/main.rb +31 -0
  8. data/lib/cveparser/ms_parser.rb +65 -0
  9. data/lib/cveparser/parser.rb +138 -0
  10. data/lib/cveparser/parser_model.rb +72 -0
  11. data/lib/cveparser/rails_store.rb +266 -0
  12. data/lib/db/migrate/20101122144313_create_impacts.rb +14 -0
  13. data/lib/db/migrate/20101122145008_create_default_impacts.rb +19 -0
  14. data/lib/db/migrate/20101122153216_create_cvsses.rb +19 -0
  15. data/lib/db/migrate/20101122174719_create_products.rb +19 -0
  16. data/lib/db/migrate/20101122175021_create_vulnerable_softwares.rb +16 -0
  17. data/lib/db/migrate/20101122175244_create_vulnerable_configurations.rb +14 -0
  18. data/lib/db/migrate/20101122175402_create_nvd_entries.rb +18 -0
  19. data/lib/db/migrate/20101125140254_create_vulnerability_references.rb +16 -0
  20. data/lib/db/migrate/20101202100411_create_xmls.rb +14 -0
  21. data/lib/db/migrate/20101210141850_create_mscves.rb +14 -0
  22. data/lib/db/migrate/20110118124541_change_impacts_structure.rb +13 -0
  23. data/lib/db/migrate/20110118131643_destroy_vulnerable_configurations.rb +13 -0
  24. data/lib/fidius-cvedb.rb +17 -0
  25. data/lib/fidius-cvedb/railtie.rb +14 -0
  26. data/lib/fidius-cvedb/version.rb +5 -0
  27. data/lib/models/fidius/cve_db/cve_connection.rb +7 -0
  28. data/lib/models/fidius/cve_db/cvss.rb +5 -0
  29. data/lib/models/fidius/cve_db/impact.rb +2 -0
  30. data/lib/models/fidius/cve_db/mscve.rb +3 -0
  31. data/lib/models/fidius/cve_db/nvd_entry.rb +23 -0
  32. data/lib/models/fidius/cve_db/product.rb +6 -0
  33. data/lib/models/fidius/cve_db/vulnerability_reference.rb +3 -0
  34. data/lib/models/fidius/cve_db/vulnerable_configuration.rb +6 -0
  35. data/lib/models/fidius/cve_db/vulnerable_software.rb +6 -0
  36. data/lib/models/fidius/cve_db/xml.rb +2 -0
  37. data/lib/tasks/db_backup.rake +30 -0
  38. data/lib/tasks/nvd_migrate.rake +25 -0
  39. data/lib/tasks/parse_cves.rake +146 -0
  40. data/test/cve_parser_test.rb +25 -0
  41. data/test/test_references.xml +9 -0
  42. data/test/test_v2.xml +3 -0
  43. metadata +120 -0
@@ -0,0 +1,9 @@
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
+ <nvd xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns="http://scap.nist.gov/schema/feed/vulnerability/2.0" nvd_xml_version="2.0" pub_date="2011-02-08T06:05:00" xsi:schemaLocation="http://scap.nist.gov/schema/feed/vulnerability/2.0 http://nvd.nist.gov/schema/nvd-cve-feed_2.0.xsd">
3
+ <entry id="CVE-2009-5051">
4
+ <vuln:references xml:lang="en" reference_type="UNKNOWN">
5
+ <vuln:source>CONFIRM</vuln:source>
6
+ <vuln:reference xml:lang="en" href="http://www.hastymail.org/security/">http://www.hastymail.org/security/</vuln:reference>
7
+ </vuln:references>
8
+ </entry>
9
+ </nvd>
@@ -0,0 +1,3 @@
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
+ <nvd xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns="http://scap.nist.gov/schema/feed/vulnerability/2.0" nvd_xml_version="1.0" pub_date="2011-02-08T06:05:00" xsi:schemaLocation="http://scap.nist.gov/schema/feed/vulnerability/2.0 http://nvd.nist.gov/schema/nvd-cve-feed_2.0.xsd">
3
+ </nvd>
metadata ADDED
@@ -0,0 +1,120 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: fidius-cvedb
3
+ version: !ruby/object:Gem::Version
4
+ prerelease: false
5
+ segments:
6
+ - 0
7
+ - 0
8
+ - 2
9
+ version: 0.0.2
10
+ platform: ruby
11
+ authors:
12
+ - Andreas Bender
13
+ - "Jens F\xC3\xA4rber"
14
+ autorequire:
15
+ bindir: bin
16
+ cert_chain: []
17
+
18
+ date: 2011-02-10 00:00:00 +01:00
19
+ default_executable:
20
+ dependencies:
21
+ - !ruby/object:Gem::Dependency
22
+ name: nokogiri
23
+ prerelease: false
24
+ requirement: &id001 !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - ">="
28
+ - !ruby/object:Gem::Version
29
+ segments:
30
+ - 0
31
+ version: "0"
32
+ type: :runtime
33
+ version_requirements: *id001
34
+ description: "This gem provides an opportunity to run a vulnerability database in your own environt. Therefore it comes with a parser for the National Vulnerability Database and ActiveRecord models for storing the entries in a local database and accessing Entries comfortable with Rails. "
35
+ email:
36
+ - bender@tzi.de
37
+ - jfaerber@tzi.de
38
+ executables:
39
+ - fidius-cvedb
40
+ extensions: []
41
+
42
+ extra_rdoc_files: []
43
+
44
+ files:
45
+ - Gemfile
46
+ - LICENSE
47
+ - README.md
48
+ - Rakefile
49
+ - bin/fidius-cvedb
50
+ - fidius-cvedb.gemspec
51
+ - lib/cveparser/main.rb
52
+ - lib/cveparser/ms_parser.rb
53
+ - lib/cveparser/parser.rb
54
+ - lib/cveparser/parser_model.rb
55
+ - lib/cveparser/rails_store.rb
56
+ - lib/db/migrate/20101122144313_create_impacts.rb
57
+ - lib/db/migrate/20101122145008_create_default_impacts.rb
58
+ - lib/db/migrate/20101122153216_create_cvsses.rb
59
+ - lib/db/migrate/20101122174719_create_products.rb
60
+ - lib/db/migrate/20101122175021_create_vulnerable_softwares.rb
61
+ - lib/db/migrate/20101122175244_create_vulnerable_configurations.rb
62
+ - lib/db/migrate/20101122175402_create_nvd_entries.rb
63
+ - lib/db/migrate/20101125140254_create_vulnerability_references.rb
64
+ - lib/db/migrate/20101202100411_create_xmls.rb
65
+ - lib/db/migrate/20101210141850_create_mscves.rb
66
+ - lib/db/migrate/20110118124541_change_impacts_structure.rb
67
+ - lib/db/migrate/20110118131643_destroy_vulnerable_configurations.rb
68
+ - lib/fidius-cvedb.rb
69
+ - lib/fidius-cvedb/railtie.rb
70
+ - lib/fidius-cvedb/version.rb
71
+ - lib/models/fidius/cve_db/cve_connection.rb
72
+ - lib/models/fidius/cve_db/cvss.rb
73
+ - lib/models/fidius/cve_db/impact.rb
74
+ - lib/models/fidius/cve_db/mscve.rb
75
+ - lib/models/fidius/cve_db/nvd_entry.rb
76
+ - lib/models/fidius/cve_db/product.rb
77
+ - lib/models/fidius/cve_db/vulnerability_reference.rb
78
+ - lib/models/fidius/cve_db/vulnerable_configuration.rb
79
+ - lib/models/fidius/cve_db/vulnerable_software.rb
80
+ - lib/models/fidius/cve_db/xml.rb
81
+ - lib/tasks/db_backup.rake
82
+ - lib/tasks/nvd_migrate.rake
83
+ - lib/tasks/parse_cves.rake
84
+ - test/cve_parser_test.rb
85
+ - test/test_references.xml
86
+ - test/test_v2.xml
87
+ has_rdoc: true
88
+ homepage: http://fidius.me
89
+ licenses: []
90
+
91
+ post_install_message:
92
+ rdoc_options: []
93
+
94
+ require_paths:
95
+ - lib
96
+ required_ruby_version: !ruby/object:Gem::Requirement
97
+ none: false
98
+ requirements:
99
+ - - ">="
100
+ - !ruby/object:Gem::Version
101
+ segments:
102
+ - 0
103
+ version: "0"
104
+ required_rubygems_version: !ruby/object:Gem::Requirement
105
+ none: false
106
+ requirements:
107
+ - - ">="
108
+ - !ruby/object:Gem::Version
109
+ segments:
110
+ - 0
111
+ version: "0"
112
+ requirements: []
113
+
114
+ rubyforge_project: ""
115
+ rubygems_version: 1.3.7
116
+ signing_key:
117
+ specification_version: 3
118
+ summary: Provides a parser and ActiveRecord models for the Common Vulnerability and Exposures (CVE) entries offered by the National Vulnerability Database (http://nvd.nist.gov/).
119
+ test_files: []
120
+