0

我的 NESSUS 扫描报告说我的主机存在漏洞,例如:

>     Vulnerabilities by PluginExpand All | Collapse All
>     **11801 (1) - HTTP Method Remote Format String-**
>     **Synopsis**
>     It is possible to execute code on the remote host through the web server.
>     DescriptionThe remote web server seems to be vulnerable to a format string attack on the method name. An attacker might use this
> flaw to make it crash or even execute arbitrary code on this host.
>     **Solution**
>     Upgrade your software or contact your vendor and inform him of this vulnerability.

我希望该工具应该提供可能使我的 http 服务器崩溃的详细 http 请求,但它不包含在报告中。所以我很难调查/修复这个漏洞。

请帮助建议我如何找出可能使我的服务器崩溃的http请求?NESSUS 工具能否提供此信息?

4

1 回答 1

0

您是否检查过相关 NASL (http_method_format_string.nasl) 中的代码以及包含文件?检查此页面以找到插件目录

于 2018-12-01T16:19:20.020 回答