Mapping between plugin id's and CVE-ID and bugtraq id's

[Raghunandan]

Hi All,
I wanted to know is there any list which maps the plugin id's to the
cve-id and the bugtraq id's.

Thanks
raghu

[Javier Fernandez-Sanguino]

Post by Raghunandan
Hi All,
I wanted to know is there any list which maps the plugin id's to the
cve-id and the bugtraq id's.

There's no public list AFAIK, but you can easily extract this from the
plugins quite easily. If you want a script that already does this
check the nessus-extract script in the 'nessus-tools' directory of the
CVS. Latest version available at:

http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/nessus-tools/nessus-extract/nessus-extract.pl?rev=1.4.2.8&content-type=text/vnd.viewcvs-markup

This version will print in whatever output format you choose (text,
csv or sql statemtns) the information it extracts from the plugins.

If you are interested in getting this mapping onto a database create
the database as described in both the README file and the SQL
statements at:

http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/nessus-core/doc/database/?hideattic=0&only_with_tag=NESSUS_SQL

And then run, for example:

$ nessus-extract -p /var/lib/nessus/plugins -f sql | mysql

And you will get updated plugin, plugincve and pluginbid databases.
Notice this script only works with NASL plugins. For C plugins you
will have to review them manually.

If you have any issues with the above code please let me know, it's
been a while since I used it myself.

Regards

Javier