comparison maltfilter @ 107:3894755d78df

Added two more matches to Apache errorlog check.
author Matti Hamalainen <ccr@tnsp.org>
date Thu, 10 Sep 2009 21:50:17 +0300
parents 5786194984c5
children 4c394e57387d
comparison
equal deleted inserted replaced
106:bf78782d99df 107:3894755d78df
114 my $mdate = $1; 114 my $mdate = $1;
115 my $mip = $2; 115 my $mip = $2;
116 my $merr = $3; 116 my $merr = $3;
117 if ($merr =~ /^File does not exist: (.+)$/) { 117 if ($merr =~ /^File does not exist: (.+)$/) {
118 my $tmp = $1; 118 my $tmp = $1;
119 if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager/i) { 119 if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen.*cart|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager|commerce|SID_box_notns_path/i) {
120 check_add_hit($mip, $mdate, "CGI vuln scan", $tmp, 6, $settings{"CHK_KNOWN_CGI"}); 120 check_add_hit($mip, $mdate, "CGI vuln scan", $tmp, 6, $settings{"CHK_KNOWN_CGI"});
121 } 121 }
122 } 122 }
123 } 123 }
124 124