Wrong XML output in some cases

[Remi Mollon <Remi.Mollon () cern ch>]

Dear Nmap developers,

First of all, I'm gonna introduce myself.

I'm Remi Mollon, working at CERN, as part of the Security Team.

Thanks to nmap, we do regular scans of (most of) all our devices, using
the XML output in order to integrate the results in our security
management system.

In some cases, it seems that the produced XML is wrong, with "status"
and "hostnames" tags outside a "host" tag, which isn't possible
according to the DTD.

The bug has been introduced as of nmap-5.30.

The fix is rather simple: put the line "write_host_header(currenths);"
between "xml_start_tag("host");" and "xml_end_tag();" at the following
lines:

- nmap-5.51: line 1872
- nmap-5.52.IPv6.Beta2: line 1911
- nmap-5.59BETA1: line 1923


In the case the findings are correct and you need such an agreement, I
obviously agree with the NMAP license for my ((very) few) lines.

Best regards,
Remi.

-- 
Rémi Mollon

Computer Security Team - CERN
http://security.web.cern.ch

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/