Incomplete OpenPKG reference in apache_log_injection.nasl

Jan Fredrik Leversund <[email protected]> Mon, 05 Jul 2004 15:59:36 +0200

Newsgroups	gmane.comp.security.nessus.devel
Message-ID	<[email protected]>

script_xref(name:"OpenPKG-SA", value:"OpenPKG-SA-2004.021");

should probably be...

script_xref(name:"OpenPKG-SA", value:"OpenPKG-SA-2004.021-apache");

OpenPKG uses a weird format for their security advisory keys; they 
include the name of the package in question. In order to reference their 
advisories directly, the entire string needs to be included in 
script_xref().

This naming-scheme seems quite redundant to me, but that's their 
prerogative.

-- 
Jan Fredrik Leversund <[email protected]>
Phalanx Security Services <URL:http://www.phalanx.no/>

_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel