How to run the data import process step by step.
The CVEBrowserImport.sh shell script is just a front-end for the real shell scripts that do the importing job on CVEBrowser; Probably the user will want more control on how the whole process is being called:
Insert delays between steps in the importing process.
There is a failure in one of the three importing steps.
You are writing a wrapper around the tools.
Simple curiosity!
Please note than the programs assume than you have enough temporary space to perform the whole import operation. Also the current version doesn't erase the temporary files (this could be changed in the future).
How to import the Mitre dictionary on CVEBrowser
The user must follow this order in order to import a CVE / CAN file into the database.
Download the Mitre dictionary file using /opt/cvebrowser/bin/MitreDataRepository.sh.
Convert the CSV file to the CVEBrowser XML format. Currently only the Mitre GOVS format is the only supported format.
Import the XML CVEBrowser format into the database.
 | Once finished these steps the new dictionary data should be loaded into the database. |
To download the Mitre CVE / CAN file the following program is used:
/opt/cvebrowser/bin/MitreDataRepository.sh {-s Mitre URL} {-d CAN / CVE output CSV file}
To convert the CSV file to XML the following program is used:
/opt/cvebrowser/bin/CSVToXMLParser.sh {-s CAN / CVE input CSV file} {-d CVEBrowser CVE / CAN XML output file} {-x Location of the CVEBrowser DTD, used for validation.}
To import the CVEBrowser XML file into the database the following program is called:
/opt/cvebrowser/bin/XMLImporter.sh {-s CVEBrowser CVE / CAN XML input file} {-c Importer configuration file}
| The format of the importer property file was already show in the section 'Configuration file setup'. |
But the easiest way is to mimic the way the commands are called by the crontab scripts located in '/etc/cron.d/cvebrowser-cron-c*.cron'
For example, to download the CVE vulnerabilities
`rpm -q --queryformat "%{installprefix}" cvebrowser-tools`/bin/CVEBrowserImport.sh {-u http://www.cve.mitre.org/cve/downloads/full-cve.csv.gz} {-c `rpm -q --queryformat "%{installprefix}" cvebrowser-tools`/tmp/full-cve.csv.gz} {-x `rpm -q --queryformat "%{installprefix}" cvebrowser-tools`/tmp/CVEXMLOutputfile.xml} {-p `rpm -q --queryformat "%{installprefix}" cvebrowser-tools`/etc/XMLImporter-cve.main.properties}