[Plugins-writers] plugin 14378 fails to report Netasq fw manager

Previous message: how2 vuln: "[Plugins-writers] plugin 22194 - potential false positive?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

michel.casabona@private

Hello all,

The script netasq.nasl failed to detect the firewall manager because the second
regex doesn't catch the "disconnect" message.

Excerpt from a trace:

(TRACE) ret -> 200 code=00100200 msg="Commande inconnue"..
(TRACE) call ereg(, , ^200 code=[0-9]+ msg=.* , 200 code=00100200
msg="Commande inconnue".. )
(TRACE) ret -> 103 code=00700500 msg="D..connexion"..
(TRACE) call ereg(, , ^103 code=[0-9]+ msg=.*\.\.\. , 103
code=00700500 msg="D..connexion".. )

Simple patch:

--- /opt/nessus/lib/nessus/plugins/netasq.nasl  2006-07-31
15:18:29.000000000 +0100
+++ netasq.nasl 2006-09-21 18:22:54.194957300 +0100
@@ -88,3 +88,3 @@
        r=recv(socket:soc,length:512);
-       if (ereg(pattern:"^103 code=[0-9]+ msg=.*\.\.\.", string:r))
+       if (ereg(pattern:"^103 code=[0-9]+ msg=.*\n", string:r))
        {

Thanks.

-- 
Michel Casabona
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers
