Nmap Development mailing list archives

Re: Possible Bug - [NSE] PHP version disclosure (OSVDB 12184)

From: Gutek <ange.gutek () gmail com>
Date: Tue, 10 Aug 2010 20:19:00 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tom,
Thanks a lot for your attention and reporting this lack of check !
Please find attached the appropriate patch, tested against both [several
30x and 40x] and [positive examples as commented inside the script]

Thanks again,

A.G.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkxhmBQACgkQ3aDTTO0ha7geZwCfbJCIDCw49YzXa2wwlIhYw58+
YkgAn3jBYALAgX9UMuEYzvYLlO4ZuP0U
=+CAE
-----END PGP SIGNATURE-----

Attachment: http-php-version.patch
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread:

Possible Bug - [NSE] PHP version disclosure (OSVDB 12184) Tom Sellers (Aug 09)
- Re: Possible Bug - [NSE] PHP version disclosure (OSVDB 12184) Gutek (Aug 10)
  - Re: Possible Bug - [NSE] PHP version disclosure (OSVDB 12184) David Fifield (Aug 10)
    - Re: Possible Bug - [NSE] PHP version disclosure (OSVDB 12184) Gutek (Aug 12)
    - Re: Possible Bug - [NSE] PHP version disclosure (OSVDB 12184) David Fifield (Aug 16)