Re: Determining vulnerability to issues described by SAs

2006-07-05 Thread freebsd-security
Hi Colin, On Fri, 30 Jun 2006 20:13:44 -0700, Colin Percival wrote: >Dolan- Gavitt, Brendan F. wrote: >> I've been trying for the past few days to come up with a method for >> checking a FreeBSD system to see if it is vulnerable to an issue >> described by a FreeBSD security advisory in some aut

Re: Determining vulnerability to issues described by SAs

2006-06-30 Thread Colin Percival
Dolan- Gavitt, Brendan F. wrote: > I've been trying for the past few days to come up with a method for > checking a FreeBSD system to see if it is vulnerable to an issue > described by a FreeBSD security advisory in some automated way [...] Yes, this is a problem. > [1] Checking the patch

Determining vulnerability to issues described by SAs

2006-06-30 Thread Dolan- Gavitt, Brendan F.
Hi, I've been trying for the past few days to come up with a method for checking a FreeBSD system to see if it is vulnerable to an issue described by a FreeBSD security advisory in some automated way, similar to the way portaudit can use VuXML to check for vulnerabilities in ports. Right now, I'm