Make fewer assumptions about Apache
Returning CheckCode::Safe is too aggressive for a supplemental check. Admins can change the directive in top-level configuration, anyway.GSoC/Meterpreter_Web_Console
parent
326597e842
commit
67f2933b58
|
@ -92,12 +92,10 @@ class MetasploitModule < Msf::Exploit::Remote
|
|||
res.headers['Server'] =~ /Apache\/([\d.]+)/ &&
|
||||
$1 && (a = Gem::Version.new($1))
|
||||
|
||||
# We have to make some assumptions about configuration here
|
||||
if a && a >= Gem::Version.new('2.3.9')
|
||||
vprint_good("Found Apache #{a} (AllowOverride None)")
|
||||
vprint_good("Found Apache #{a} (AllowOverride None may be set)")
|
||||
elsif a
|
||||
vprint_error("Found Apache #{a} (AllowOverride All)")
|
||||
return CheckCode::Safe
|
||||
vprint_warning("Found Apache #{a} (AllowOverride All may be set)")
|
||||
end
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in New Issue