Re: Incomplete OpenPKG reference in apache_log_injection.nasl
Jan Fredrik Leversund <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
Renaud Deraison wrote: >On Mon, Jul 05, 2004 at 03:59:36PM +0200, Jan Fredrik Leversund wrote: > > >>script_xref(name:"OpenPKG-SA", value:"OpenPKG-SA-2004.021-apache"); >> >> > >Fixed, thanks ! > > > Maybe it shouldn't have been fixed afterall... All SUSE references seem to suffer from a similar problem. The Announcement IDs are formatted like this: SUSE-SA:YYYY:NNN where YYYY is the yeah and NNN is the announcement number for that year. Trouble comes when you want to reference it, and all their advisory pages are named YYYY_NNN_package.html and sometimes the NNN is just NN, depending on which year YYYY is. On top of that, anything pre-2002 is not to be found anywhere on their site... It's all very unstructured. So what it comes down to is this: Should the nessus references try to compensate for this kind of odd behaviour, or should the references be as simple as possible? Afterall, it IS possible to find the information based on the simple form, it just takes a bit of manual searching. I'm fresh out of silver bullets... -- Jan Fredrik Leversund <[email protected]> Phalanx Security Services <URL:http://www.phalanx.no/> _______________________________________________ Nessus-devel mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus-devel