Re: [Rkhunter-users] Vulnerable applications: 2

[Tim J. <jac...@ho...>]

Hi and welcome to the rkhunter mailing list!

As far as I know, the 2 vulnerable applications refer to the application 
scan in the log:
>* Application scan
>    Checking Apache2 modules ...                               [ Not found 
>]
>    Checking Apache configuration ...                          [ OK ]
>
>* Application version scan
>    - GnuPG 1.4.1                                              [ Old or 
>patched version ]
>    - Apache 2.0.54                                            [ OK ]
>    - Bind DNS 9.3.1                                           [ OK ]
>    - OpenSSL 0.9.7f                                           [ Old or 
>patched version ]
>    - PHP 5.0.4                                                [ OK ]
>    - Procmail MTA 3.22                                        [ OK ]
>    - ProFTPd 1.2.10                                           [ OK ]
>    - OpenSSH 4.0p1                                            [ OK ]

As you can see, there are 2 applications that were scanned but not OK, since 
there versions are not the latest ones (which can indicate that you've 
applied a patch or you should upgrade them).
In your case, it involves GnuPG and OpenSSL.

As for your other question: rkhunter has specific options to make it work 
without having to press enter (ie -sk, which is the same as 
--skip-keypress).

Best regards,

Tim


>
>Today's Topics:
>
>    1. Vulnerable applications: 2 (Pritesh Chandra)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Sat, 8 Jul 2006 12:14:38 +1200
>From: "Pritesh Chandra" <pri...@gm...>
>Subject: [Rkhunter-users] Vulnerable applications: 2
>To: <Rkh...@li...>
>Message-ID: <055e01c6a223$87f4a4b0$c901000a@pritesh>
>Content-Type: text/plain; charset="iso-8859-1"
>
>Hi there.  I am new to rkhunter.  I got it installed and running on my 
>server.
>
>I got "Vulnerable applications: 2" but i am not sure what its talking 
>about.  can someone help me on this.  also how can i aviod pressing th 
>enter button after very step. i mean i type -rkhunter -c and it does all 
>the test without me having to press the enter button about 5 times.
>
>thanks
>