OSSIM BugTraq :: http://www.ossim.net/bugs/ OSSIM BugTraq :: OSSIM: Recently opened tasks 2010-08-24T07:04:57Z FS#66: xml error, custom events view http://www.ossim.net/bugs/index.php?do=details&task_id=66 2010-08-24T07:04:57Z repdet version 2.3.1 web frontend analysis -> siem -> custom -> configure event tabs adding some random columns generates common XML error: You have whitespaces in your response adding DATE from replacements tags is always generates the error for me.
web frontend

analysis -> siem -> custom -> configure event tabs

adding some random columns generates common XML error:
You have whitespaces in your response

adding DATE from replacements tags is always generates the error for me.

]]> FS#65: removing last plugin from plugin group http://www.ossim.net/bugs/index.php?do=details&task_id=65 2010-08-24T07:00:09Z repdet version 2.3.1 web frontend configuration -> collection-> plugin groups press "edit" on plugin group, than delete all plugins. after removing the last one you see: "Invalid ID" message
web frontend
configuration -> collection-> plugin groups

press "edit" on plugin group,
than delete all plugins.
after removing the last one you see:
"Invalid ID" message]]> FS#64: Error when add new profile in nfsen http://www.ossim.net/bugs/index.php?do=details&task_id=64 2010-07-05T08:32:49Z Guillermo Grande OSSIM version: 2.4 Schema Version: 2.3 In Monitors | Network --> New profile. OSSIM thinks that there is a try attack in the input form. Screenshots: http://bayimg.com/hAnoCAAch (before add the new profile) http://bayimg.com/HanOeAACh (after add the new profile) Schema Version: 2.3

In Monitors | Network --> New profile.

OSSIM thinks that there is a try attack in the input form.

Screenshots:

http://bayimg.com/hAnoCAAch (before add the new profile)

http://bayimg.com/HanOeAACh (after add the new profile)]]> FS#63: Written accent and host group http://www.ossim.net/bugs/index.php?do=details&task_id=63 2010-04-17T17:24:19Z Roberto P. Muñoz If you use a host group with written accent you won't see any host group in "Assets->Assets->Host groups", after delete it from db you'll see again, for example at db server: mysql> use ossim mysql> select * from host_group; +-------------------------+-------------+-------------+-------------+-------+ | name | threshold_c | threshold_a | rrd_profile | descr | +-------------------------+-------------+-------------+-------------+-------+ [.....] | Servidores_DNS_públicos | 30 | 30 | Server | | +-------------------------+-------------+-------------+-------------+-------+ mysql>delete from host_group where name='Servidores_DNS_públicos'; Query OK, 1 row affected (0.00 sec) If you use a host group with written accent you won't see any host group in "Assets->Assets->Host groups", after delete it from db you'll see again, for example at db server:

mysql> use ossim
mysql> select * from host_group;
+-------------------------+-------------+-------------+-------------+-------+
| name | threshold_c | threshold_a | rrd_profile | descr |
+-------------------------+-------------+-------------+-------------+-------+
[.....]
| Servidores_DNS_públicos | 30 | 30 | Server | |
+-------------------------+-------------+-------------+-------------+-------+

mysql>delete from host_group where name='Servidores_DNS_públicos';
Query OK, 1 row affected (0.00 sec)

]]> FS#62: Ping the remote Host & Scanning http://www.ossim.net/bugs/index.php?do=details&task_id=62 2010-03-18T17:18:18Z Jonathan Mahoney I've run tests on two different boxes, with OpenVAS 2 (didn't change any configurations after the install), Nessus 4.02 and Nessus 4.2. With all the tests, the Ping The Remote Host functionality doesn't work at all. The option is checked, but it doesn't determine if the host is alive or not. If the host is down, a basic scan takes 40 minutes, if the host is up it takes 2 minutes. It makes it very difficult to do any sort of meaningful scans on Class C networks etc.
With all the tests, the Ping The Remote Host functionality doesn't work at all. The option is checked, but it doesn't determine if the host is alive or not. If the host is down, a basic scan takes 40 minutes, if the host is up it takes 2 minutes. It makes it very difficult to do any sort of meaningful scans on Class C networks etc.]]> FS#61: 2.2.1 - missing scan job profiles for newly created users http://www.ossim.net/bugs/index.php?do=details&task_id=61 2010-03-18T15:44:40Z Greg Porter 2.2.1 - missing scan job profiles for newly created users FS#60: priority does not work http://www.ossim.net/bugs/index.php?do=details&task_id=60 2010-02-11T19:17:51Z Michael The priority setting suddenly does not work this week. No matter what value I signed via configuration->plugins, it is 0 when certain events populated. FS#59: action can not be selected http://www.ossim.net/bugs/index.php?do=details&task_id=59 2010-02-08T19:23:49Z Michael I am trying to create a new policy. I select an action in "All Actions" list, and it doen't move to "Selected", no matter left double-click, right double-click, plug and move. nothing appears in "Selected". FS#58: Logrotate is unable to rotate and compress OSSIM's own logs http://www.ossim.net/bugs/index.php?do=details&task_id=58 2009-12-14T19:23:33Z Robson Since the file /var/log/snort/alert is defined both in /etc/logrotate.d/snort and /etc/logrotate.d/ossim-agent, Logrotate is unable to rotate and compress the OSSIM agent's logs. FS#57: Text becomes unreadable while using graphical installer http://www.ossim.net/bugs/index.php?do=details&task_id=57 2009-10-08T08:55:38Z Tim Slot While installing sun-java with the graphical installer the text become unreadable.