cvs_in_www.nasl

From: Noam Rathaus (noamrat_private)
Date: Sun Mar 31 2002 - 08:31:25 PST

Previous message: Noam Rathaus: "Re: BadBlue Directory Traversal"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

The plugin: cvs_in_www.nasl  doesn't make sure that the response doesn't fall
over itself when it access a web server that didn't respond correctly to a
directory access. Further checks should be done. Maybe also checking that:
/CVS/root exists? or that /CVS/Repository?

Thanks
Noam Rathaus
CTO
Beyond Security Ltd
http://www.SecurITeam.com
http://www.BeyondSecurity.com

Previous message: Noam Rathaus: "Re: BadBlue Directory Traversal"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Mar 31 2002 - 08:32:06 PST