Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803513
Kategorie:Nmap NSE
Titel:Nmap NSE 6.01: http-malware-host
Zusammenfassung:Looks for signature of known server compromises.;;Currently, the only signature it looks for is the one discussed in the reference. This is;done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 (it attempts;to detect servers that always return 302). Thanks to Denis from the above link for finding this;technique!;;SYNTAX:;;http.pipeline: If set, it represents the number of HTTP requests that'll be;pipelined (ie, sent in a single request). This can be set low to make;debugging easier, or it can be set high to test how a server reacts (its;chosen max is ignored).;;http-max-cache-size: The maximum memory size (in bytes) of the cache.
Beschreibung:Summary:
Looks for signature of known server compromises.

Currently, the only signature it looks for is the one discussed in the reference. This is
done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 (it attempts
to detect servers that always return 302). Thanks to Denis from the above link for finding this
technique!

SYNTAX:

http.pipeline: If set, it represents the number of HTTP requests that'll be
pipelined (ie, sent in a single request). This can be set low to make
debugging easier, or it can be set high to test how a server reacts (its
chosen max is ignored).

http-max-cache-size: The maximum memory size (in bytes) of the cache.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

CopyrightCopyright (C) 2013 NSE-Script: The Nmap Security Scanner; NASL-Wrapper: Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.