[Openvas-commits] r11808 - in trunk/openvas-plugins: . scripts
scm-commit@wald.intevation.org
scm-commit at wald.intevation.org
Mon Oct 17 17:36:12 CEST 2011
Author: mime
Date: 2011-10-17 17:36:04 +0200 (Mon, 17 Oct 2011)
New Revision: 11808
Modified:
trunk/openvas-plugins/ChangeLog
trunk/openvas-plugins/scripts/gb_apache_49957.nasl
Log:
Fixed possible false negative
Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog 2011-10-17 14:38:22 UTC (rev 11807)
+++ trunk/openvas-plugins/ChangeLog 2011-10-17 15:36:04 UTC (rev 11808)
@@ -1,3 +1,8 @@
+2011-10-17 Michael Meyer <michael.meyer at greenbone.net>
+
+ * scripts/gb_apache_49957.nasl:
+ Fixed possible false negative.
+
2011-10-17 Henri Doreau <henri.doreau at greenbone.net>
Made gather-package-list.nasl directly register CPEs for the OS that
Modified: trunk/openvas-plugins/scripts/gb_apache_49957.nasl
===================================================================
--- trunk/openvas-plugins/scripts/gb_apache_49957.nasl 2011-10-17 14:38:22 UTC (rev 11807)
+++ trunk/openvas-plugins/scripts/gb_apache_49957.nasl 2011-10-17 15:36:04 UTC (rev 11808)
@@ -69,7 +69,7 @@
if(!get_port_state(port))exit(0);
banner = get_http_banner(port: port);
-if(!banner || "Apache" >!< banner)exit(0);
+if(banner && ("Apache" >!< banner && banner !~ "HTTP/1.. 50[2|3]"))exit(0);
req = string("GET @localhost HTTP/1.0\r\n\r\n");
result = http_keepalive_send_recv(port:port, data:req, bodyonly:FALSE);
@@ -79,9 +79,11 @@
ip3 = "5555.6666.7777.8888";
req = string("GET @", ip3 ," HTTP/1.0\r\n\r\n");
+
result2 = http_keepalive_send_recv(port:port, data:req, bodyonly:FALSE);
-if(ereg(pattern:"HTTP/1.. 200", string:result2) && "Bad Gateway" >< result2) {
+if(ereg(pattern:"HTTP/1.. 200", string:result2) && "Bad Gateway" >< result2 ||
+ ereg(pattern:"HTTP/1.. 502", string:result2)) {
security_warning(port:port);
exit(0);
More information about the Openvas-commits
mailing list