[Openvas-devel] Multiple? issues in secpod_oxid_eshop_priv_escalation_vuln.nasl

Thomas Reinke lists at securityspace.com
Thu Sep 17 15:31:50 CEST 2009


Hi,

This test is tripping false on every system we run it against that
has a web server, presumably because of the security_note that
displays the version without checking if eship was installed.

Also, I'm not sure if the line

    if(eshopVer[1] = "^4\.")

is doing what was intended.

Thomas


More information about the Openvas-devel mailing list