On Wed, Nov 02, 2016 at 03:52:44PM +0100, Christian Fischer wrote:
> 2. Network Vulnerability Tests (NVT)
> 
> These are manually created tests which are e.g. checking actively and/or
> version/CPE based (e.g. cpe:/a:php:php:5.6.26) for a vulnerability. For
> these it doesn't matter if you have a custom build PHP or not, as long
> as PHP is correctly detected.

For example scripts/2016/gb_php_mult_vuln03_sep16_lin.nasl, right?

But I see, this test has:
(...)
script_dependencies("gb_php_detect.nasl", "os_fingerprint.nasl");
script_mandatory_keys("php/installed","Host/runs_unixoide");
script_require_ports("Services/www", 80);
(...)

And gb_php_detect.nasl also has this "script_require_ports("Services/www",
80);" dependency.

As I mentioned I don't have a running port 80 and I don't have a PHP
banner on it. Should there tests to be more generic? Based on
gb_php_detect_lin.nasl also?

Best,
Tom

-- 
> β€œIt’s not the daily increase but the daily decrease.
>  Hack away at the unessential.”
>                                          – Bruce Lee
> http://tjadowski.sdf.org
_______________________________________________
Openvas-plugins mailing list
Openvas-plugins@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to