1. include("compat.inc");
  3. if(description)
  4. {
  5. script_id(990678);
  6. script_version ("$Revision: 1.25 $");
  7. #script_osvdb_id(562);
  8. #script_cvs_date("$Date: 2013/01/25 01:19:07 $");
  10. script_name(english:"Apache /awstats Information Disclosure");
  12. script_set_attribute(attribute:"synopsis", value:
  13. "The remote web server discloses information about visitors to the host.." );
  14. script_set_attribute(attribute:"description", value:
  15. "It is possible to obtain details of the visitors to the Apache web server
  16. by requesting the URL '/awstats/'. This overview
  17. includes information such as visitor counts, and requested URLs." );
  18. script_set_attribute(attribute:"see_also", value:"http://awstats.sourceforge.net/docs/awstats_setup.html" );
  19. script_set_attribute(attribute:"solution", value:
  20. "Limit access to /awstats by enforcing IP restrictions or authentication." );
  21. script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
  22. #script_set_attribute(attribute:"plugin_publication_date", value: "2001/05/28");
  23. #script_set_attribute(attribute:"vuln_publication_date", value: "1999/01/01");
  24. script_set_attribute(attribute:"plugin_type", value:"remote");
  25. script_set_attribute(attribute:"cpe",value:"cpe:/a:apache:http_server");
  26. script_end_attributes();
  29. summary["english"] = "Requests /awstats/";
  30. script_summary(english:summary["english"]);
  32. script_category(ACT_GATHER_INFO);
  34. #script_copyright(english:"This script is Copyright (C) 2001-2013 StrongHoldNet");
  35. family["english"] = "Web Servers";
  36. script_family(english:family["english"]);
  37. script_dependencie("find_service1.nasl", "http_version.nasl");
  38. script_require_ports("Services/www", 80);
  39. script_require_keys("www/apache");
  40. exit(0);
  41. }
  43. #
  44. # The script code starts here
  45. #
  47. include("global_settings.inc");
  48. include("http_func.inc");
  49. include("http_keepalive.inc");
  51. port = get_http_port(default:80);
  52. str = "AWStats";
  54. if(get_port_state(port) )
  55. {
  56. buffer = http_get(item:"/awstats/", port:port);
  57. data = http_keepalive_send_recv(port:port, data:buffer);
  58. if( str >< data )
  59. {
  60. security_warning(port);
  61. }
  62. }