cricketlkak.blogg.se - How to use nessus enum

For hardware, this would also denote the architecture, such as "i386".

Edition - The edition of the software, such as "pro" for "Professional Edition".

Update - The CPE name for the update or service pack, such as "Service Pack 3" in the case of Windows XP.

Version - The version numbers as represented by the product itself.

The following fields are "optional" and completed according to each specific entry: Product - Product name as specified in the CPE database, e.g., itunes, quicktime and firefox.Vendor - Defines the vendor name as the "highest organization-specific label of the organization's DNS name", which, in our case, would be "Tenable Security".Part - Determines the platform type using the following codes: a = application, h = hardware, o = operating system.Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a formal name format, a language for describing complex platforms, a method for checking names against a system, and a description format for binding text and tests to a name."įor uniformity, CPE uses the following format: cpe:/ Įach field is defined as follows, first by the required fields: Along the same lines, a new project from MITRE called CPE (Common Platform Enumeration) provides the public with a standard method to enumerate software: "CPE is a structured naming scheme for information technology systems, platforms, and packages. Standards such as CVE help us track and document thousands of vulnerabilities released each year. You may know the folks over at MITRE for their work on the CVE (Common Vulnerabilities & Exposures).