Re: Bug in NSE core, I think

[Ron <ron () skullsecurity net>]

On 08/25/2009 07:47 PM, Ron wrote:
> I haven't tracked down exactly what's going on, but it appears to cause
> a bug in one of my scripts. I believe it steps from a local variable
> getting whacked, because it's ending up wrong by the end of my script.
>
> That's how I originally noticed this behaviour.
>
> Ron
Aha, it took me awhile but I tracked down this issue. It's actually in 
the caching that was recently checked in. Because of the cache, 
different vhosts are returning the same result, which is wrong. 
test.skullsecurity.org returns totally different results than 
www.skullsecurity.org, but the cache doesn't realize that.

I'd suggest modifying the HTTP caching to use host.targetname, if 
possible. Patrick, do you see any issues with that?

Thanks,
Ron

--
Ron Bowes
http://www.skullsecurity.org/

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org