The current osticket_detect.nasl script does not detect latest
versions 1.3.0 and 1.3.1 of the osTicket product. (It detects upto
1.2.7 only.)
This is because, it searches for a pattern 'alt="osTicket"' in the
file open.php to make sure the page is from osTicket. (Line 72).
But that pattern does not exist in the latest versions. They have
changed it from alt="osTicket" to alt= "Main".
Changing the search pattern from 'alt="osTicket"' to
'alt="osTicket.*"' will match the string 'alt="osTicket STS v1.2
Copyright (c) 2003 osTicket.com"' at the bottom of the page.
Here I am attaching a patch which will support detection of versions
1.3.0 and 1.3.1.
Any comments are welcome.
Kind Regards,
Jayesh KS
===========================
73c73
< if (egrep(pattern:'alt="osTicket"', string:res, icase:TRUE)) {
---
> if (egrep(pattern:'alt="osTicket.*', string:res, icase:TRUE)) {
86c86
<
---
> #Added support for versions 1.3.0 and 1.3.1
96a97,105
> if (egrep(pattern:"osTicket: Customer Support System", string:res)) {
> req = http_get(item:string(dir, "/include/main.php?",
> "config[search_disp]=true&include_dir=",
> "../automail.pl/"),port:port );
> res = http_keepalive_send_recv(port:port, data:req, bodyonly:TRUE);
> if ('Invalid path' >< res ) ver = "1.3.1";
> else ver="1.3.0";
> }
>
98c107
< if (egrep(pattern:"You do not have access to attachments",
string:res)) {
---
> else if (egrep(pattern:"You do not have access to attachments", string:res)) {
104a114
>
107c117
<
---
>
================
_______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2.1.3 : Fri Jun 17 2005 - 04:34:23 PDT