July PT
|
|
Jeff Ito-2
|
All,
Attached are the oval PT definitions for MS08-037 , 038, and 039. New inventory definitions have been created for: Exchange 2007 SP1 Microsoft Windows Server 2008 - Itanium Inventory definition 1641 for Exchange 2007 (no service pack) has been modified since the method it was using to check for lack of a service pack is not valid for Exchange 2007. We have not gotten to MS08-040, if someone else would like to pick this one up. Jeff Ito To unsubscribe, send an email message to LISTSERV@... with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to OVAL-DISCUSSION-LIST-request@.... <?xml version="1.0" encoding="UTF-8"?> <oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"> <generator> <oval:product_name>The OVAL Repository</oval:product_name> <oval:schema_version>5.4</oval:schema_version> <oval:timestamp>2008-06-10T14:10:49.392-04:00</oval:timestamp> </generator> <definitions> <definition id="oval:org.mitre.oval:def:229" version="2" class="inventory"> <!-- 2K SP4 --> <metadata> <title>Microsoft Windows 2000 SP4 or later is installed</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> </affected> <description>The operating system installed on the system is Microsoft Windows 2000 SP4.</description> <oval_repository> <dates> <submitted date="2006-07-25T12:05:33"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change> <status_change date="2006-09-27T12:29:16.978-04:00">INTERIM</status_change> <status_change date="2006-10-16T15:58:35.885-04:00">ACCEPTED</status_change> <modified comment="Added CPE reference." date="2007-04-30T07:48:00.915-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </modified> <status_change date="2007-04-30T08:11:20.008-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:40.599-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/> <criterion comment="SP4 or later Installed" test_ref="oval:org.mitre.oval:tst:3073"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:565" version="2" class="inventory"> <!-- 2K3 SP1 --> <metadata> <title>Microsoft Windows Server 2003 SP1 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 1 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2006-07-25T12:05:33"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change> <status_change date="2006-09-27T12:29:31.197-04:00">INTERIM</status_change> <status_change date="2006-10-16T15:58:44.696-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.371-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:28:41.395-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:23.334-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1935" version="2" class="inventory"> <!-- 2K3 SP2 --> <metadata> <title>Microsoft Windows Server 2003 SP2 (x86) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x86"/> <description>A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.</description> <oval_repository> <dates> <submitted date="2007-04-09T09:49:32"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2007-04-09T11:20:00.000-05:00">DRAFT</status_change> <status_change date="2007-04-25T19:52:21.584-04:00">INTERIM</status_change> <modified comment="Dropped tst:4078 in favor of existing tst:3019." date="2007-04-26T13:47:00.955-04:00"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </modified> <status_change date="2007-05-23T15:05:34.661-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.742-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:25:17.766-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:15.390-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:730" version="2" class="inventory"> <!-- 2K3 x64 --> <metadata> <title>Microsoft Windows Server 2003 (x64) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003:::x64"/> <description>A version of Microsoft Windows Server 2003 (x64) is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:25.745-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:28.055-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.114-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:29:06.138-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:24.051-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:2161" version="2" class="inventory"> <!-- 2K3 x64 SP2 --> <metadata> <title>Microsoft Windows Server 2003 SP2 (x64) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:x64"/> <description>A version of Microsoft Windows Server 2003 SP2 (x64) is installed.</description> <oval_repository> <dates> <submitted date="2007-07-10T18:34:24"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2007-07-10T18:34:24">DRAFT</status_change> <status_change date="2007-08-01T22:26:16.096-04:00">INTERIM</status_change> <status_change date="2007-08-20T08:04:40.731-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.780-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:25:55.801-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:17.838-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003 service pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3019"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1205" version="2" class="inventory"> <!-- 2K3 ia64 SP1 --> <metadata> <title>Microsoft Windows Server 2003 (ia64) SP1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp1:itanium"/> <description>A version of Microsoft Windows Server 2003 (ia64) Service Pack 1 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:16:45.596-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:19.196-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.275-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:22:23.300-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:10.886-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/> <criterion comment="Win2K/XP/2003 service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1442" version="2" class="inventory"> <!-- 2K3 ia64 SP2 --> <metadata> <title>Microsoft Windows Server 2003 (ia64) SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003::sp2:itanium"/> <description>A version of Microsoft Windows Server 2003 (ia64) Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-08-15T09:28:35"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2007-08-15T09:28:35">DRAFT</status_change> <status_change date="2007-10-24T17:10:53.045-04:00">INTERIM</status_change> <status_change date="2007-11-13T12:00:59.698-05:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.098-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:23:15.120-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:12.481-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4"/> <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/> <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:105" version="3" class="inventory"> <!-- XP --> <metadata> <title>Microsoft Windows XP is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp"/> <description>The operating system installed on the system is Microsoft Windows XP.</description> <oval_repository> <dates> <submitted date="2006-06-26T12:55:00.000-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change> <modified comment="Added CPE reference." date="2007-04-30T07:48:00.244-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </modified> <status_change date="2007-04-30T08:01:55.267-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:25.969-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.073-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:27:52.098-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:10.499-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:521" version="3" class="inventory"> <!-- XP SP2 --> <metadata> <title>Microsoft Windows XP SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2"/> <description>The operating system installed on the system is Microsoft Windows XP SP2.</description> <oval_repository> <dates> <submitted date="2006-07-25T12:05:33"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change> <status_change date="2006-09-27T12:29:29.930-04:00">INTERIM</status_change> <status_change date="2006-10-16T15:58:43.496-04:00">ACCEPTED</status_change> <modified comment="Added CPE reference." date="2007-04-30T07:48:00.073-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </modified> <status_change date="2007-04-30T08:00:54.097-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:48.210-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.488-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:27:40.511-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:20.931-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/> <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5631" version="0" class="inventory"> <!-- XP SP3 --> <metadata> <title>Microsoft Windows XP (x86) SP3 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp3:x86"/> <description>A version of Microsoft Windows XP (x86) Service Pack 3 is installed.</description> <oval_repository> <dates> <submitted date="2008-06-10T14:50:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-06-12T13:58:47.155-04:00">DRAFT</status_change> <status_change date="2008-06-30T04:00:18.370-04:00">INTERIM</status_change> </dates> <status>INTERIM</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/> <criterion comment="Win2K/XP/2003 service pack 3 is installed" test_ref="oval:org.mitre.oval:tst:7814"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:720" version="2" class="inventory"> <!-- XP x64 SP1 --> <metadata> <title>Microsoft Windows XP Professional x64 Edition SP1 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp1:x64"/> <description>A version of Microsoft Windows XP Professional x64 Edition Service Pack 1 is installed.</description> <oval_repository> <dates> <submitted date="2007-03-05T09:00:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </submitted> <status_change date="2007-03-05T09:00:00">DRAFT</status_change> <status_change date="2007-03-21T16:17:24.909-04:00">INTERIM</status_change> <status_change date="2007-04-10T13:44:27.909-04:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.527-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:28:52.548-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:23.716-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4193" version="2" class="inventory"> <!-- XP x64 SP2 --> <metadata> <title>Microsoft Windows XP x64 Edition SP2 is installed</title> <affected family="windows"> <platform>Microsoft Windows XP</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp::sp2:x64"/> <description>A version of Microsoft Windows XP Professional x64 Edition Service Pack 2 is installed.</description> <oval_repository> <dates> <submitted date="2007-11-15T15:56:12"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2007-11-16T08:53:11.596-05:00">DRAFT</status_change> <status_change date="2007-12-03T04:06:19.275-05:00">INTERIM</status_change> <status_change date="2007-12-24T04:06:02.885-05:00">ACCEPTED</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.080-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-04T11:21:54.103-04:00">INTERIM</status_change> <status_change date="2008-04-21T04:00:19.231-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="a version of Microsoft Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1282" version="2" class="inventory"> <!-- Vista --> <metadata> <title>Microsoft Windows Vista (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit)</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T12:15:00.000-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:46.566-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:26.800-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.410-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.749-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:11.683-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4873" version="1" class="inventory"> <!-- Vista SP1 --> <metadata> <title>Microsoft Windows Vista (32-bit) Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x86"/> <description>The operating system installed on the system is Microsoft Windows Vista (32-bit) Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.495-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.108-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.428-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.497-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:2041" version="2" class="inventory"> <!-- Vista x64 --> <metadata> <title>Microsoft Windows Vista x64 Edition is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista:::x64"/> <description>The operating system installed on the system is Microsoft Windows Vista x64 Edition</description> <oval_repository> <dates> <submitted date="2007-04-11T11:27:37.975-04:00"> <contributor organization="The MITRE Corporation">Jonathan Baker</contributor> </submitted> <status_change date="2007-04-11T11:27:37.975-04:00">DRAFT</status_change> <status_change date="2007-04-30T08:18:48.676-04:00">INTERIM</status_change> <status_change date="2007-05-23T15:05:38.024-04:00">ACCEPTED</status_change> <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </modified> <status_change date="2008-03-31T04:00:20.760-04:00">INTERIM</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.142-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:15.809-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5254" version="1" class="inventory"> <!-- Vista x64 SP1 --> <metadata> <title>Microsoft Windows Vista x64 Edition Service Pack 1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista::sp1:x64"/> <description>The operating system installed on the system is Microsoft Windows Vista x64 Edition Service Pack 1</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:29.700-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.236-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:21.267-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:14.836-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> <criterion comment="Win2K/XP/2003/Vista service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2843"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:4870" version="1" class="inventory"> <!-- 2K8 --> <metadata> <title>Microsoft Windows Server 2008 (32-bit) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008:::x86"/> <description>The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:25.280-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.555-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:20.181-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:10.618-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/> <criterion negate="true" comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:5356" version="1" class="inventory"> <!-- 2K8 x64 --> <metadata> <title>Microsoft Windows Server 2008 x64 Edition is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp1:x64"/> <description>The operating system installed on the system is Microsoft Windows Server 2008 x64 Edition</description> <oval_repository> <dates> <submitted date="2008-03-26T10:44:02"> <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor> </submitted> <status_change date="2008-03-26T16:27:25.493-04:00">DRAFT</status_change> <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.340-04:00"> <contributor organization="The MITRE Corporation">Andrew Buttner</contributor> </modified> <status_change date="2008-04-21T04:00:21.761-04:00">INTERIM</status_change> <status_change date="2008-05-12T04:00:15.160-04:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/> <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/> </criteria> </definition> <definition id="oval:org.mitre.oval:def:1869" version="2" class="inventory"> <!-- Exchange 2003 SP2 --> <metadata> <title>Microsoft Exchange Server 2003 Service Pack 2 is installed</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_srv:2003:sp2"/> <description>Exchange Server 2003 SP2 is installed.</description> <oval_repository> <dates> <submitted date="2007-05-09T10:04:48"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change> <status_change date="2007-05-31T15:26:36.384-04:00">INTERIM</status_change> <status_change date="2007-06-15T11:07:36.442-04:00">ACCEPTED</status_change> <modified comment="set datatype to int" date="2007-10-25T16:45:00.345-04:00"> <contributor organization="Opsware, Inc.">Jeff Cheng</contributor> </modified> <status_change date="2007-10-25T16:48:05.799-04:00">INTERIM</status_change> <status_change date="2007-11-13T12:01:03.015-05:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria> <criterion comment="Exchange Server 2003,SP2 is installed." test_ref="oval:org.mitre.oval:tst:1202"/> </criteria> </definition> <!-- def 1641 revised --> <definition id="oval:org.mitre.oval:def:1641" version="2" class="inventory"> <!-- Exchange 2007 --> <metadata> <title>Microsoft Exchange Server 2007 (no Service Pack) is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_srv:2007:gold"/> <description>Exchange Server 2007 (no Service Pack) is installed.</description> <oval_repository> <dates> <submitted date="2007-05-09T10:04:48"> <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor> </submitted> <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change> <status_change date="2007-05-31T15:26:34.310-04:00">INTERIM</status_change> <status_change date="2007-06-15T11:07:35.112-04:00">ACCEPTED</status_change> <modified comment="set datatype to int" date="2007-10-25T16:45:00.621-04:00"> <contributor organization="Opsware, Inc.">Jeff Cheng</contributor> </modified> <status_change date="2007-10-25T16:51:06.842-04:00">INTERIM</status_change> <status_change date="2007-11-13T12:01:00.696-05:00">ACCEPTED</status_change> </dates> <status>ACCEPTED</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="Exchange Server 2007 is installed." test_ref="oval:com.secure-elements.oval:tst:99440"/> <criterion comment="No Exchange Server 2007 SP is installed." test_ref="oval:com.secure-elements.oval:tst:99441"/> </criteria> </definition> <definition id="oval:com.secure-elements.oval:def:9944" version="0" class="inventory"> <!-- Exchange 2007 SP1--> <metadata> <title>Microsoft Exchange Server 2007 SP1 is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2003</platform> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_srv:2007:sp1"/> <description>Exchange Server 2007 SP1 is installed.</description> <oval_repository> <dates> <submitted date="2008-07-08T14:18:00"> <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="AND"> <criterion comment="Exchange Server 2007 is installed." test_ref="oval:com.secure-elements.oval:tst:99440"/> <criterion comment="Exchange Server 2007 SP1 is installed." test_ref="oval:com.secure-elements.oval:tst:99442"/> </criteria> </definition> <definition id="oval:com.secure-elements.oval:def:9948" version="0" class="inventory"> <!-- 2K8 ia64 --> <metadata> <title>Microsoft Windows Server 2008 Itanium-Based Edition is installed</title> <affected family="windows"> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2008::sp1:itanium"/> <description>The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition</description> <oval_repository> <dates> <submitted date="2008-07-08T14:18:00"> <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria> <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/> <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/> <criterion comment="a version of Windows for the ia64 architecture is installed" test_ref="oval:org.mitre.oval:tst:2747"/> </criteria> </definition> <definition id="oval:com.secure-elements.oval:def:9950" version="1" class="vulnerability"> <!-- MS08-037 --> <metadata> <title>DNS Insufficient Socket Entropy Vulnerability</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> <platform>Microsoft Windows XP</platform> <platform>Microsoft Windows Server 2003</platform> </affected> <reference source="CVE" ref_id="CVE-2008-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447"/> <description>A spoofing vulnerability exists in Windows DNS client and Windows DNS server. This vulnerability could allow a remote unauthenticated attacker to quickly and reliably spoof responses and insert records into the DNS server or client cache, thereby redirecting Internet traffic.</description> <oval_repository> <dates> <submitted date="2008-07-08T14:18:00"> <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/> <criterion comment="dnsapi.dll version is less than 5.0.2195.7158" test_ref="oval:com.secure-elements.oval:tst:99501"/> </criteria> <criteria operator="AND"> <extend_definition comment="Microsoft Windows XP SP2 is installed" definition_ref="oval:org.mitre.oval:def:521"/> <criterion comment="dnsapi.dll version is less than 5.1.2600.3394" test_ref="oval:com.secure-elements.oval:tst:99502"/> </criteria> <criteria operator="AND"> <extend_definition comment="Microsoft Windows XP SP3 is installed" definition_ref="oval:org.mitre.oval:def:5631"/> <criterion comment="dnsapi.dll version is less than 5.1.2600.5625" test_ref="oval:com.secure-elements.oval:tst:99503"/> </criteria> <criteria operator="AND"> <extend_definition comment="Microsoft Windows XP (x64) is installed" definition_ref="oval:org.mitre.oval:def:720"/> <criterion comment="dnsapi.dll version is less than 5.2.3790.3161" test_ref="oval:com.secure-elements.oval:tst:99504"/> </criteria> <criteria operator="AND"> <extend_definition comment="Microsoft Windows XP SP2 (x64) is installed" definition_ref="oval:org.mitre.oval:def:4193"/> <criterion comment="dnsapi.dll version is less than 5.2.3790.4318" test_ref="oval:com.secure-elements.oval:tst:99505"/> </criteria> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2K3 Server SP1 is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows 2K3 Server (x64) is installed" definition_ref="oval:org.mitre.oval:def:730"/> <extend_definition comment="Microsoft Windows 2K3 Server SP1 (ia64) is installed" definition_ref="oval:org.mitre.oval:def:1205"/> </criteria> <criterion comment="dnsapi.dll version is less than 5.2.3790.3161" test_ref="oval:com.secure-elements.oval:tst:99504"/> </criteria> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2K3 Server SP2 is installed" definition_ref="oval:org.mitre.oval:def:1935"/> <extend_definition comment="Microsoft Windows 2K3 Server SP2 (x64) is installed" definition_ref="oval:org.mitre.oval:def:2161"/> <extend_definition comment="Microsoft Windows 2K3 Server SP2 (ia64) is installed" definition_ref="oval:org.mitre.oval:def:1442"/> </criteria> <criterion comment="dnsapi.dll version is less than 5.2.3790.4318" test_ref="oval:com.secure-elements.oval:tst:99505"/> </criteria> </criteria> </definition> <definition id="oval:com.secure-elements.oval:def:9949" version="1" class="vulnerability"> <!-- MS08-037 --> <metadata> <title>DNS Cache Poisoning Vulnerability</title> <affected family="windows"> <platform>Microsoft Windows 2000</platform> <platform>Microsoft Windows Server 2003</platform> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CVE" ref_id="CVE-2008-1454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1454"/> <description>A cache poisoning vulnerability exists in Windows DNS Server. The vulnerability could allow an unauthenticated remote attacker to send specially crafted responses to DNS requests made by vulnerable systems, thereby poisoning the DNS cache and redirecting Internet traffic from legitimate locations.</description> <oval_repository> <dates> <submitted date="2008-07-08T14:18:00"> <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/> <criterion comment="dns.exe version is less than 5.0.2195.7162" test_ref="oval:com.secure-elements.oval:tst:99491"/> </criteria> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2K3 Server SP1 is installed" definition_ref="oval:org.mitre.oval:def:565"/> <extend_definition comment="Microsoft Windows 2K3 Server (x64) is installed" definition_ref="oval:org.mitre.oval:def:730"/> <extend_definition comment="Microsoft Windows 2K3 Server SP1 (ia64) is installed" definition_ref="oval:org.mitre.oval:def:1205"/> </criteria> <criterion comment="dns.exe version is less than 5.2.3790.3161" test_ref="oval:com.secure-elements.oval:tst:99492"/> </criteria> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2K3 Server SP2 is installed" definition_ref="oval:org.mitre.oval:def:1935"/> <extend_definition comment="Microsoft Windows 2K3 Server SP2 (x64) is installed" definition_ref="oval:org.mitre.oval:def:2161"/> <extend_definition comment="Microsoft Windows 2K3 Server SP2 (ia64) is installed" definition_ref="oval:org.mitre.oval:def:1442"/> </criteria> <criterion comment="dns.exe version is less than 5.2.3790.4318" test_ref="oval:com.secure-elements.oval:tst:99493"/> </criteria> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows 2008 Server is installed" definition_ref="oval:org.mitre.oval:def:4870"/> <extend_definition comment="Microsoft Windows 2008 Server (x64) is installed" definition_ref="oval:org.mitre.oval:def:5356"/> </criteria> <criterion comment="dns.exe version is less than 6.0.6001.22192" test_ref="oval:com.secure-elements.oval:tst:99494"/> </criteria> </criteria> </definition> <definition id="oval:com.secure-elements.oval:def:9947" version="1" class="vulnerability"> <!-- MS08-038 --> <metadata> <title>Windows Saved Search Vulnerability</title> <affected family="windows"> <platform>Microsoft Windows Vista</platform> <platform>Microsoft Windows Server 2008</platform> </affected> <reference source="CVE" ref_id="CVE-2008-1435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1435"/> <description>A remote code execution vulnerability exists when saving a specially crafted search file within Windows Explorer. This operation causes Windows Explorer to exit and restart in an exploitable manner.</description> <oval_repository> <dates> <submitted date="2008-07-08T14:18:00"> <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor> </submitted> </dates> <status>INITIAL SUBMISSION</status> </oval_repository> </metadata> <criteria operator="OR"> <criteria operator="AND"> <criteria operator="OR"> <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:1282"/> <extend_definition comment="Microsoft Windows Vista (x64) is installed" definition_ref="oval:org.mitre.oval:def:2041"/> </criteria> | |||||||||||||||
