false postitive with agora.nasl

From: Georges Dagousset (georges.dagoussetat_private)
Date: Mon Feb 04 2002 - 07:11:41 PST

Next message: Michel Arboi: "RFP's whisker wrapper"

Previous message: Georges Dagousset: "false postitive with agora.nasl"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have tested agora.nasl (10836) against a SQUID Proxy Box.
This Plugin reveals a false positive hole on port 3128 (squid).

So I propose a patch:

port = get_kb_item("Services/www");
if(!port)port = 80;

should be replace by

port = is_cgi_installed("/store/agora.cgi");
if(!port)exit(0);

Regards,
Georges Dagousset

Next message: Michel Arboi: "RFP's whisker wrapper"
Previous message: Georges Dagousset: "false postitive with agora.nasl"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Feb 04 2002 - 07:15:50 PST