Nessus 3.0.4, Nessus 2.2.9, NessusClient 1.0.0

Tools

Nessus 3、GPLなNessusの最新版が出ています。同時にNessusClientもRCがとれ1.0.0がリリースされています。
Nessus 3.0.3からの変更点

Nessus daemon ('nessusd') :

  • Processing the plugins after an update is faster
  • Better detection and handling of corrupt db files
  • It is now possible to use 'default' in a port range just like any other port (ie: '1,default,443,8080')
  • Avoid a deadlock in the main process when waiting for a sub process to die
  • nessus_tcp_scanner works much better when used over a slow network link
  • nessus_tcp_scanner now offers some options accessible thru the GUI
  • If 'log_whole_attack' is set to 'no' , do not print messages about shared sockets in the logs
  • Fixed the 'on_exit()' nasl function
  • Fixed 'nasl -k' which would sometimes not work properly
  • Avoid doing some un-necessary system calls, thus resulting in a lower load during a scan (esp. on Mac OS X)
  • Fixed a bug in ssh_func.inc which would prevent it from working against HP/UX

Command line client ('nessus') :

  • Logs much faster in a remote nessusd scanner
  • Fixed a possible memory corruption issue when creating a list of plugins to launch
  • Fixed a corruption of the .nessusrc files when receiving some plugin prefs ending by a space

Mac OS X specific changes :

  • Opening and closing a session window would stop all on-going scans
  • Creating a policy and defining it as 'shared' immediately saves the policies on disk

Windows specific changes :

  • Not a beta any more
  • Fixed file lock issues

Nessus 2.2.8からの変更点

Nessus Daemon ('nessusd') :

  • Fixed a bug in the PCAP handler which in turn should fix synscan.nes (thanks to Marcel )
  • Fixed a banner encoding problem in nessus_tcp_scanner and find_service
  • Fixed a possible deadlock in synscan
  • Avoid a deadlock in the main process when waiting for a sub process to die
  • nessus_tcp_scanner works much better when used over a slow network link
  • nessus_tcp_scanner now offers some options accessible thru the GUI
  • Fixed a bug in ssh_func.inc which would prevent it from working against HP/UX (and in general which would break a communication where messages pop up on stderr in the middle of receiving data on stdout)

Nessus Client ('nessus') :

  • Fixed a possible memory corruption issue when creating a list of plugins to launch
  • Fixed a corruption of the .nessusrc files when receiving some plugin prefs ending by a space

NessusClient 1.0.0RC5からの変更点

  • Loads much faster
  • Fixed various bugs which could possibly lead to a segmentation fault