Questions on product detections

Scanning / scan configuration
1

Hello,

We are trying the Greenbone Enterprise Appliance Trial 24.10.1. We have a Windows server, which we would like to check for vulnerabilities.

For test purposes, we placed the vulnerable files openssl dll - libcrypto-1_1.dll and vulnerable 7-zip binary in directory d:\temp\vuln.

Then we tried Full and Fast scan. The scanner found vulnerable 7-zip binary under C:\Program Files\7-zip, but not in and d:\temp\vuln.

Also, the scanner didn’t find a vulnerable dll libcrypto-1_1.dll under d:\temp\vuln, which is obviously vulnerable.

It is standard behaviour, or should I do more fine-tuning of the scanner?

Thank you.

Best regards,

Vladislav

2

Hello,

and welcome to this community forums. Only two short hints:

  1. OpenSSL: This is expected behavior, there is no support for detecting OpenSSL on Windows via such .dll files
  2. 7-Zip: Enabling the How to enable Detection of Portable Apps on Windows? option might help, please keep the notes recently added there on the limitations
1 Like
3

Hi,

thank you very much for explaning.
Best regards,

V.