Secure testing team - Jun 2009 - Bug#534846: Missing the openvas-nvt-sync script

Package: openvas-server
Severity: grave
Tags: security



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, ''unstable''), (500,
''testing''), (500, ''stable'')
Architecture: x86_64

Kernel: Linux 2.6.29-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Dear maintainers,

I am missing the script "openvas-nvt-sync" in this package, although
it is
in the source package.

Without this script it is not possible, to upgrade the needed plugins for
openvas-server (openvasd). But missing or old plugins mean:

1. A system cannot be secured, as wholes are not recognized (security
problem)

2. This package is not correct functioning.

3. Any server tested with this package cannot be trusted.

Hint: The latest source-version did build very well on my amd64-system. So i
suggest to upgrade to the latest version.


Hans-J. Ullrich