[Plugins-writers] Bug in find_service1.nasl?

From: Erik Stephens (erik@private)
Date: Tue Jun 21 2005 - 19:28:03 PDT


Seems like this plugin is incorrectly identifying services as  
HDDTEMP.  This regex looks bad to me:

   if (r0 =~ "^(\\|/dev/[a-z0-9/-]+\\|[^|]*\\|[^|]*\\|[^|]\\|)+$")
   {
     report_service(port: port, svc: 'hddtemp');
     exit(0);
   }

Looks like some pipes are not being escaped and are getting  
interpreted as OR.  Any thoughts?


Best regards,
Erik

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Tue Jun 21 2005 - 19:39:53 PDT