[17:12:22] Checking application versions...
[17:12:22] Info: Starting test name 'apps'
[17:12:26] Checking version of Exim MTA [ Warning ]
[17:12:27] Warning: Application 'exim', version '4.69', is out of date, and possibly a security risk.
[17:12:27] Checking version of GnuPG [ Warning ]
[17:12:27] Warning: Application 'gpg', version '1.4.9', is out of date, and possibly a security risk.
[17:12:28] Info: Application 'httpd' not found.
[17:12:28] Info: Application 'named' not found.
[17:12:28] Checking version of OpenSSL [ Warning ]
[17:12:29] Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a security risk.
[17:12:29] Info: Application 'php' not found.
[17:12:29] Checking version of Procmail MTA [ OK ]
[17:12:30] Info: Application 'procmail' version '3.22' found.
[17:12:30] Info: Application 'proftpd' not found.
[17:12:30] Checking version of OpenSSH [ Warning ]
[17:12:31] Warning: Application 'sshd', version '5.1p1', is out of date, and possibly a security risk.
[17:12:31] Info: Applications checked: 5 out of 9
Кусок из rkhunter:
Код: Выделить всё
APP_NAMES="exim:Exim MTA
gpg:GnuPG
httpd:Apache
named:Bind DNS
openssl:OpenSSL
php:PHP
procmail:Procmail MTA
proftpd:ProFTPd
sshd:OpenSSH"
APPS_TOTAL_COUNT=`echo "${APP_NAMES}" | wc -l | tr -d ' '`
#
# Get the list of whitelisted application versions.
#
APP_WHITELIST=""
RKHTMVAR=`get_option 2 single APP_WHITELIST` || exit 1
test -n "${RKHTMVAR}" && APP_WHITELIST=`echo " ${RKHTMVAR} " | tr '[A-Z]' '[a-z]'`
IFS=$IFSNL
for APP in ${APP_NAMES}; do
APP=`echo "${APP}" | sed -e 's/^[ ]*//'`
APPLICATION=`echo "${APP}" | cut -d: -f1`
APPLICATION_DESC=`echo "${APP}" | cut -d: -f2-`
IFS=$RKHIFS
APP_CMD_FOUND=`find_cmd ${APPLICATION}`
IFS=$IFSNL
if [ -z "${APP_CMD_FOUND}" ]; then
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%-1"
continue
fi
#
# Find out the version of the application.
#
APPS_COUNT=`expr ${APPS_COUNT} + 1`
VERSION=""
WHOLE_VERSION=""
#
# Applications which are whitelisted completely (no specific
# version number), are handled first.
#
if [ -n "`echo \"${APP_WHITELIST}\" | grep \" ${APPLICATION} \"`" ]; then
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%0%-2"
else
case "${APPLICATION}" in
exim)
WHOLE_VERSION=`${APP_CMD_FOUND} -bV 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | grep '^Exim version [0-9]' | awk '{ print $3 }'`
;;
gpg)
WHOLE_VERSION=`${APP_CMD_FOUND} --version --homedir / 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | grep 'GnuPG' | awk '{ print $3 }'`
;;
httpd)
WHOLE_VERSION=`${APP_CMD_FOUND} -v 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | grep -i '^Server version:[ ][ ]*Apache/[0-9]' | cut
-d' ' -f3 | cut -d'/' -f2`
;;
named)
WHOLE_VERSION=`${APP_CMD_FOUND} -v 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | egrep '^(named|BIND)[ ][ ]*[0-9]' | grep -v '/'
| awk '{ print $2 }'`
if [ -n "`echo \"${VERSION}\" | grep '-'`" ]; then
VERSION=`echo "${VERSION}" | cut -d'-' -f1`
fi
if [ -z "${VERSION}" ]; then
VERSION=`${APP_CMD_FOUND} -v | awk '{ print $2 }'`
fi
;;
openssl)
WHOLE_VERSION=`${APP_CMD_FOUND} version 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | grep '^OpenSSL[ ][ ]*[0-9]' | cut -d' ' -f2`
;;
php)
WHOLE_VERSION=`${APP_CMD_FOUND} -v 2>/dev/null`
VERSION=`echo "${WHOLE_VERSION}" | grep '^PHP[ ][ ]*[0-9]' | awk '{ print $2 }' | cut -d
'-' -f1`
;;
procmail)
WHOLE_VERSION=`${APP_CMD_FOUND} -v 2>&1`
VERSION=`echo "${WHOLE_VERSION}" | grep '^procmail[ ][ ]*v[0-9]' | awk '{ print $2 }'
| sed -e 's/^v//'`
;;
proftpd)
WHOLE_VERSION=`${APP_CMD_FOUND} -v 2>&1`
VERSION=`echo "${WHOLE_VERSION}" | grep 'ProFTPD[ ][ ]*Version[ ][ ]*[0-9
]' | awk '{ print $4 }'`
;;
sshd)
WHOLE_VERSION=`${APP_CMD_FOUND} -t -d 2>&1`
VERSION=`echo "${WHOLE_VERSION}" | grep 'sshd version OpenSSH' | sed -e 's/^.*sshd version Ope
nSSH_//' | cut -d' ' -f1`
if [ -n "`echo \"${VERSION}\" | grep '+'`" ]; then
VERSION=`echo "${VERSION}" | cut -d'+' -f1`
fi
;;
esac
VERSION=`echo "${VERSION}" | tr -d '\r'`
WHOLE_VERSION=`echo "${WHOLE_VERSION}" | tr -d '\r'`
if [ -z "${VERSION}" ]; then
WHOLE_VERSION=`echo "${WHOLE_VERSION}" | tr '\n' '%'`
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%%0%${WHOLE_VERSION}"
continue
fi
#
# Now see if the application version is known to be bad.
#
RKHTMPVAR=`echo "${VERSION}" | sed -e 's/\./\\\./g'`
if [ -n "`echo \"${APP_WHITELIST}\" | grep \" ${APPLICATION}:${RKHTMPVAR} \"`" ]; then
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%${VERSION}%-1"
elif [ -n "`egrep \"^${APPLICATION}:.* ${RKHTMPVAR}( |$)\" ${DB_PATH}/programs_bad.dat 2>&1`" ]; then
APPS_FAILED_COUNT=`expr ${APPS_FAILED_COUNT} + 1`
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%${VERSION}%1"
else
APP_RESULTS="${APP_RESULTS}
${APPLICATION}%${APPLICATION_DESC}%${VERSION}%0"
fi
fi
doneЧто делать? Или тупо забить!
P.S.
Сверил md5sum с офф.зеркалом всё норм.
