Greetings,

I've been poking around the CGI abuse plugins, focusing on how things
are handled when dealing with a web server that doesn't return proper
"404 not found" pages.  As I understand it, no404.nasl will store a
pattern in the kb that is_cgi_installed should search for when
requesting a CGI abuse that returns an HTTP 200 status code.

Why would a plugin depend on no404.nasl but not make a call to
is_cgi_installed?  Of the ~600 CGI abuse plugins, only 120 make a call
to is_cgi_installed.

Thanks,
Erik

Reply via email to