false postitive with agora.nasl

From: Georges Dagousset (georges.dagoussetat_private)
Date: Mon Feb 04 2002 - 07:11:41 PST

  • Next message: Georges Dagousset: "false postitive with agora.nasl"

    I have tested agora.nasl (10836) against a SQUID Proxy Box.
    This Plugin reveals a false positive hole on port 3128 (squid).
    
    So I propose a patch:
    
    port = get_kb_item("Services/www");
    if(!port)port = 80;
    
    should be replace by
    
    port = is_cgi_installed("/store/agora.cgi");
    if(!port)exit(0);
    
    Regards,
    Georges Dagousset
    



    This archive was generated by hypermail 2b30 : Mon Feb 04 2002 - 07:14:14 PST