[Plugins-writers] webserver_robot.nasl

Previous message: David Lodge: "[Plugins-writers] Amendment to ssh_detect.nasl"
In reply to: David Lodge: "[Plugins-writers] Amendment to ssh_detect.nasl"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

scotts@private

Hi list-

There is an error in webserver_robot.nasl that is causing it to false
positive on virtually all of my servers.

The following:

include("http_func.inc");
port = get_http_port(default:80);

res = is_cgi_installed(port:port, item:"/robot.txt");
if(port)
{
 sockwww = http_open_socket(port);
 if (sockwww)
 {

Should be:

if(res)
{
 sockwww = http_open_socket(res);

Because is_cgi_installed() returns a port number and that's what we are
connecting to.

Sincerely,
Scott

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers