我在 Ubuntu 20.04 上运行 vuls 服务器。安装的印象是它会扫描操作系统和非操作系统包。使用此配置,我可以扫描操作系统包中的漏洞,但是 vuls 报告显示非操作系统(自编译)包没有结果。我在这里有什么遗漏吗?我附上了我的 config.toml 和输出文件。
+++++config.toml 示例++++++
[cpeDict]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/cpe.sqlite3"
[cveDict]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/cve.sqlite3"
[ovalDict]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/oval.sqlite3"
[gost]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/gost.sqlite3"
[servers]
[servers.server99]
host = "10.45.3.130"
port = "22"
user = "support"
keyPath = "/home/ubuntu/.ssh/id_rsa"
scanMode = [ "fast" ]
cpeNames= [
"cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
"cpe:2.3:a:mongodb:mongodb:4.0.10:*:*:*:*:*:*:*",
"cpe:2.3:a:mongodb:database_tools:4.0.10:rc1:*:*:*:*:*:*",
"cpe:2.3:a:pcre:pcre:8.39:*:*:*:*:*:*:*",
"cpe:2.3:a:pcre:pcre2:10.34:*:*:*:*:*:*:*",
"cpe:2.3:a:gnu:ncurses:6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oniguruma_project:oniguruma:6.9.5:-:*:*:*:*:*:*",
"cpe:2.3:a:net-snmp:net-snmp:5.8:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*",
]