Adds attack signature for CVE-2018-10824. Closes #1378

2026-01-02 04:49:02 +00:00 · 2019-01-31 21:02:37 +00:00
parent ffe8dd418f
commit b5b2a5dc78
1 changed files with 16 additions and 0 deletions
--- a/nselib/data/http-fingerprints.lua
+++ b/nselib/data/http-fingerprints.lua
@@ -7170,6 +7170,22 @@ table.insert(fingerprints, {
     }
  });

+table.insert(fingerprints, {
+    category = 'attacks',
+    probes = {
+      {
+        path = '/uir//tmp/csman/0',
+        method = 'GET'
+      }
+    },
+    matches = {
+      {
+        match = '200',
+        output = 'Possible D-Link router plaintext password file exposure (CVE-2018-10824)'
+      }
+    }
+  });
+
 ------------------------------------------------
 ----        Open Source CMS checks          ----
 ------------------------------------------------