[Nikto-discuss] Bug in db_outdated

David Lodge dave at cirt.net
Tue Aug 12 14:24:00 UTC 2008


On Tue, 12 Aug 2008 14:33:03 +0100, Sullo <sullo at cirt.net> wrote:
>> Not sure if this is a bug and if it should be sent to this list but  
>> here it
>> goes:
>>
>> -- plugins/db_outdated:"600930","Jetty/(","6.1.0","@RUNNING_VER appears  
>> to
>> be outdated (current is at least @CURRENT_VER)"
>> ++ plugins/db_outdated:"600930","Jetty/","6.1.0","@RUNNING_VER appears  
>> to be
>> outdated (current is at least @CURRENT_VER)"
>>
>> This '(' causes an error:
>> Unmatched ( in regex; marked by <-- HERE in m/^Jetty/( <-- HERE / at
>> /home/mathijs/nikto-2.02/plugins/nikto_outdated.plugin line 81.
>>
>> This char should either be escaped correctly to \( or removed.
>
> Whoops! These were user-submitted updates but you are correct... it
> should have been escaped.

'tis fixed in trunk - there was a bit of a delay as I'd actually had to  
install Jetty to see how it produced the server banner; and it's horrible  
and very very slow (now I remember why I don't use java ;-)

dave


More information about the Nikto-discuss mailing list