[Openvas-commits] r11808 - in trunk/openvas-plugins: . scripts

scm-commit@wald.intevation.org scm-commit at wald.intevation.org
Mon Oct 17 17:36:12 CEST 2011


Author: mime
Date: 2011-10-17 17:36:04 +0200 (Mon, 17 Oct 2011)
New Revision: 11808

Modified:
   trunk/openvas-plugins/ChangeLog
   trunk/openvas-plugins/scripts/gb_apache_49957.nasl
Log:
Fixed possible false negative

Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog	2011-10-17 14:38:22 UTC (rev 11807)
+++ trunk/openvas-plugins/ChangeLog	2011-10-17 15:36:04 UTC (rev 11808)
@@ -1,3 +1,8 @@
+2011-10-17  Michael Meyer <michael.meyer at greenbone.net>
+
+	* scripts/gb_apache_49957.nasl:
+	Fixed possible false negative.
+
 2011-10-17  Henri Doreau <henri.doreau at greenbone.net>
 
 	Made gather-package-list.nasl directly register CPEs for the OS that

Modified: trunk/openvas-plugins/scripts/gb_apache_49957.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_apache_49957.nasl	2011-10-17 14:38:22 UTC (rev 11807)
+++ trunk/openvas-plugins/scripts/gb_apache_49957.nasl	2011-10-17 15:36:04 UTC (rev 11808)
@@ -69,7 +69,7 @@
 if(!get_port_state(port))exit(0);
 
 banner = get_http_banner(port: port);
-if(!banner || "Apache" >!< banner)exit(0);
+if(banner && ("Apache" >!< banner && banner !~ "HTTP/1.. 50[2|3]"))exit(0);
 
 req = string("GET @localhost HTTP/1.0\r\n\r\n");
 result = http_keepalive_send_recv(port:port, data:req, bodyonly:FALSE);
@@ -79,9 +79,11 @@
 ip3 = "5555.6666.7777.8888"; 
 
 req = string("GET @", ip3 ," HTTP/1.0\r\n\r\n");
+
 result2 = http_keepalive_send_recv(port:port, data:req, bodyonly:FALSE);
 
-if(ereg(pattern:"HTTP/1.. 200", string:result2) && "Bad Gateway" >< result2) { 
+if(ereg(pattern:"HTTP/1.. 200", string:result2) && "Bad Gateway" >< result2 ||
+   ereg(pattern:"HTTP/1.. 502", string:result2)) { 
 
   security_warning(port:port);
   exit(0);



More information about the Openvas-commits mailing list