Skip to end of banner
Go to start of banner

Errata - 2.2.6 Serial false positive matching

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

There is a bug in Open-AudIT 2.2.6 when discovery queries a device with SSH access.

The bug is that the command issued (as below) does not send error output to /dev/null, and hence stores it in the "serial" attribute.

By default Open-AudIT will match based on serial. If you have changed the default, you should not be affected.

Therefore devices with SSH may be incorrectly identified as another separate device.ssh_helper.php

Worst case is to apply the fix below, then re-run your discoveries. You may end up with quite a few entries in the change_log, which can be safely ignored.

Users can either copy the attached file to:

Linux - /usr/local/open-audit/code_igniter/application/helpers/ssh_helper.php
Windows - c:\xampplite\open-audit\code_igniter\application\helpers\ssh_helper.php

Or users can edit the file at the above path. Line 575 should go from:

            'ubiquiti_serial' => 'grep serialno /proc/ubnthal/system.info | cut -d= -f2',

to

            'ubiquiti_serial' => 'grep serialno /proc/ubnthal/system.info 2>/dev/null | cut -d= -f2',

 

 

  • No labels