risu 1.7.0 → 1.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 23f609c5df6f31deb50608fdf1beff5b6a8b3783
-  data.tar.gz: 46319a15896857ccb3b72cb7401c9ea696392888
+  metadata.gz: f8b56c0da2dc7bc99cb12f074a266cb974b6b0e8
+  data.tar.gz: 8beff1b136dfdd21db5c615c5b0c6cac4c080afa
 SHA512:
-  metadata.gz: ad64d389f1cd8fbc67c0cb6de29a9bcb3b3f930e1a8fe0949e1cdec4323c3648907a4dd0a0ef7a2bf36c88f65ea84b06cd49bdc0face447396a81499b4c2ce0e
-  data.tar.gz: 54f0eed09834c480da59f3552e145f3e953f662a9e946d587e63df2672406145b0fd8289b62301e26d1139e0672836665e3817e51557070242a06edcb4058fc0
+  metadata.gz: 4ddd9137d0e2c2e7d10f19f206d0c920924961b15f82a7c3a822977dfe0ac0d75e64ee6e563a5206d2717c3376743da04e858f70040b03186069ad9a6f49c4ae
+  data.tar.gz: 831ebf0f7b7eef82188d8bf385a6cdcf0c99435955f3ad34ddfcb53405cd7805cd300252c55a783ec3d1a31e23eca6c1ede14a9bab56eb85845d77643fbfb3e7

data/NEWS.markdown

@@ -1,5 +1,15 @@
 # News
 
+#1.7.1 (September 25, 2014)
+- Updated Windows Patch Rollup
+- Added CA Brightstor Arcserve Backup Rollup
+- Updated the RootCause plug-ins list
+- Updated some of the default credential plug-ins list
+- Models
+	- HostProperty Model
+		- UnsupportedProduct:microsoft:windows_xp
+		- UnsupportedProduct:microsoft:windows_2000
+
 #1.7.0 (September 12, 2014)
 - Update Copyrights to 2014
 - Wiki

data/README.markdown

@@ -6,7 +6,7 @@
 
 Risu is [Nessus](http://www.nessus.org) parser, that converts the generated reports into a [ActiveRecord](http://api.rubyonrails.org/classes/ActiveRecord/Base.html) database, this allows for easy report generation and vulnerability verification.
 
-Version **1.7.0** is the current release.
+Version **1.7.1** is the current release.
 
 ## Requirements
 

data/Rakefile

@@ -44,7 +44,7 @@ end
 
 task :release => [:tag_and_bag, :build] do
  	system "gem push #{Risu::APP_NAME}-#{Risu::VERSION}.gem"
-	puts "Just released #{Risu::APP_NAME} v#{Risu::VERSION}. #{Risu::APP_NAME} is an Nessus XML parser/database/report generator. More information at http://arxopia.com/projects/risu/"
+	puts "Just released #{Risu::APP_NAME} v#{Risu::VERSION}. #{Risu::APP_NAME} is an Nessus XML parser/database/report generator. More information at http://github.com/arxopia/risu/"
 end
 
 task :clean do

data/lib/risu.rb

@@ -26,7 +26,7 @@
 
 module Risu
 	APP_NAME = "risu"
-	VERSION = "1.7.0"
+	VERSION = "1.7.1"
 	GRAPH_WIDTH = 750
 	#                  red     orange  yellow  green    blue   purple        grey           pink
 	GRAPH_COLORS = %w(#d2403f #ec9241 #fcc343 #50ad51 #397bbb #8E6B8E black #cccccc brown #e52d89)

data/lib/risu/base/template_helper.rb

@@ -149,7 +149,7 @@ module Risu
 			def default_credential_plugins
 				[
 					10862, 25927, 32315, 65950, 39364, 33852, 11454, 51369, 
-					26918,
+					26918, 76073, 24745, 11245
 				].uniq
 			end		
 

data/lib/risu/parsers/nessus/nessus_sax_listener.rb

@@ -56,7 +56,8 @@ module Risu
 						"pcidss:unprotected_mssql_db", "pcidss:obsolete_software", "pcidss:www:sql_injection", "pcidss:backup_files",
 						"traceroute-hop-0", "traceroute-hop-1", "traceroute-hop-2", "operating-system-unsupported", "patch-summary-total-cves",
 						"pcidss:insecure_http_methods", "LastUnauthenticatedResults", "LastAuthenticatedResults", "cpe-0", "cpe-1", 
-						"cpe-2", "cpe-3", "Credentialed_Scan", "policy-used", "UnsupportedProduct:microsoft:windows_xp::sp2"
+						"cpe-2", "cpe-3", "Credentialed_Scan", "policy-used", "UnsupportedProduct:microsoft:windows_xp::sp2",
+						"UnsupportedProduct:microsoft:windows_xp", "UnsupportedProduct:microsoft:windows_2000"
 					]
 
 					@valid_host_properties_regex = Array[

data/lib/risu/parsers/nessus/postprocess/ca_brightstor_arcserve.rb

@@ -0,0 +1,57 @@
+# Copyright (c) 2010-2014 Arxopia LLC.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+#
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+
+module Risu
+	module Parsers
+		module Nessus
+			module PostProcess
+				class CABrightstorArcServe < Risu::Base::PostProcessBase
+
+					#
+					def initialize
+						@info =
+						{
+							:description => "CA BrightStor ARCserve Backup Patch Rollup",
+							:plugin_id => -99982,
+							:plugin_name => "Update to the latest CA BrightStor ARCserve Backup",
+							:item_name => "Update to the latest CA BrightStor ARCserve Backup",
+							:plugin_ids => [
+								24015,
+								24816,
+								25086,
+								26970,
+								32398,
+								34393,
+								22510,
+								23841,
+							]
+						}
+					end
+				end
+			end
+		end
+	end
+end

data/lib/risu/parsers/nessus/postprocess/root_cause.rb

@@ -255,7 +255,21 @@ module Risu
 							39468 => "Vendor Patch",
 							-99983 => "Vendor Patch",
 							-99984 => "Vendor Patch",
-							
+							48264 => "Vendor Patch",
+							51956 => "Vendor Patch",
+							24015 => "Vendor Patch",
+							55992 => "Vendor Patch",
+							40564 => "Vendor Patch",
+							38664 => "Vendor Patch",
+							34393 => "Vendor Patch",
+							32398 => "Vendor Patch",
+							26970 => "Vendor Patch",
+							25086 => "Vendor Patch",
+							24816 => "Vendor Patch",
+							-99982 => "Vendor Patch",
+							34725 => "Vendor Patch",
+							42424 => "Vendor Patch",
+							77200 => "Vendor Patch",
 
 							
 							33850 => "Vendor Support",
@@ -284,7 +298,7 @@ module Risu
 							19699 => "Vendor Support",
 							57859 => "Vendor Support",
 							56998 => "Vendor Support",
-
+							73598 => "Vendor Support",
 
 							49071 => "Configuration",
 							41028 => "Configuration",
@@ -349,8 +363,10 @@ module Risu
 							11714 => "Configuration",
 							10203 => "Configuration",
 							29224 => "Configuration",
-
-
+							24745 => "Configuration",
+							11245 => "Configuration",
+							76073 => "Configuration",
+							10907 => "Configuration",
 
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/windows.rb

@@ -28,7 +28,7 @@ module Risu
 	module Parsers
 		module Nessus
 			module PostProcess
-				class OpenSSL < Risu::Base::PostProcessBase
+				class WindowsPatches < Risu::Base::PostProcessBase
 
 					#
 					def initialize
@@ -45,8 +45,11 @@ module Risu
 								58435,
 								35635,
 								22034,
-								
-								
+								51956,
+								40564,
+								45517,
+								62940,
+
 							]
 						}
 					end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: risu
 version: !ruby/object:Gem::Version
-  version: 1.7.0
+  version: 1.7.1
 platform: ruby
 authors:
 - Jacob Hammack
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-09-12 00:00:00.000000000 Z
+date: 2014-09-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: simplecov
@@ -241,6 +241,7 @@ files:
 - lib/risu/parsers/nessus/postprocess/adobe_air.rb
 - lib/risu/parsers/nessus/postprocess/adobe_reader.rb
 - lib/risu/parsers/nessus/postprocess/apache.rb
+- lib/risu/parsers/nessus/postprocess/ca_brightstor_arcserve.rb
 - lib/risu/parsers/nessus/postprocess/core_ftp.rb
 - lib/risu/parsers/nessus/postprocess/flash_player.rb
 - lib/risu/parsers/nessus/postprocess/flexnet.rb