false postitive with agora.nasl

From: Georges Dagousset (georges.dagoussetat_private)
Date: Mon Feb 04 2002 - 07:11:41 PST

  • Next message: Georges Dagousset: "false postitive with agora.nasl" 

    I have tested agora.nasl (10836) against a SQUID Proxy Box.
This Plugin reveals a false positive hole on port 3128 (squid).

So I propose a patch:

port = get_kb_item("Services/www");
if(!port)port = 80;

should be replace by

port = is_cgi_installed("/store/agora.cgi");
if(!port)exit(0);

Regards,
Georges Dagousset

    This archive was generated by hypermail 2b30 : Mon Feb 04 2002 - 07:14:14 PST