Gb_sitecore_http_detect.nasl error

Vulnerability Tests
1

Hi, I scan a target and got the following error message:

(gb_sitecore_http_detect.nasl)(http_keepalive.inc:265) In function 'http_keepalive_recv_body()': recv_line: missing or undefined parameter length or socket

I think the plugin gb_sitecore_http_detect.nasl should set dont_add_port:TRUE when call the function http_host_name(), as same as in http_keepalive_send_recv():

host = http_host_name( port:port, dont_add_port:TRUE );

1 Like
2

And the line 495 in http_keepalive.inc is missing the ", " characters:

if( _http_ka_debug ) display( "DEBUG: http_keepalive_send_recv( host: ", host, "port: ", port, ", data: ", data, ", bodyonly: ", bodyonly, " )\n" );

:arrow_down:

if( _http_ka_debug ) display( "DEBUG: http_keepalive_send_recv( host: ", host, ", port: ", port, ", data: ", data, ", bodyonly: ", bodyonly, " )\n" );

1 Like
3

Thanks a lot for your two postings.

AFAICT the http_host_name( port:port ); could be removed completely as it isn’t required (as already called internally). I have forwarded this for evaluation to the responsible developer.

The missing comma in the debug output was added today and should arrive in the feed and the changes should arrive in the feed tomorrow or the day after.

3 Likes