Reading Apache CustomLogfiles - Windows

# SPDX-FileCopyrightText: 2010 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.96022");
  script_version("2024-02-28T14:37:42+0000");
  script_tag(name:"last_modification", value:"2024-02-28 14:37:42 +0000 (Wed, 28 Feb 2024)");
  script_tag(name:"creation_date", value:"2010-04-27 10:02:59 +0200 (Tue, 27 Apr 2010)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"qod_type", value:"registry");
  script_name("Reading Apache CustomLogfiles - Windows");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2010 Greenbone AG");
  script_family("IT-Grundschutz");
  script_mandatory_keys("Compliance/Launch/GSHB");
  script_dependencies("smb_reg_service_pack.nasl", "GSHB/GSHB_WMI_Apache.nasl", "GSHB/GSHB_Read_Apache_Config.nasl");

  script_tag(name:"summary", value:"Reading Apache CustomLogfiles");

  exit(0);
}

include("GSHB_read_file.inc");
include("smb_nt.inc");

#if( !get_kb_item("GSHB/Apache/CustomLog") ) {
#    security_message(data:"GSHB/Apache/CustomLog: No Entry");#
#    exit(0);
#}

kbpath = get_kb_item("WMI/Apache/RootPath");

if("None" >< kbpath){
  set_kb_item(name:"GSHB/Apache/404erError", value:"None");
  set_kb_item(name:"GSHB/Apache/403erError", value:"None");
  set_kb_item(name:"GSHB/Apache/404erError/log", value:"IT-Grundschutz: No Apache Installed");
  log_message(port:0, proto: "IT-Grundschutz", data:string("No Apache Installed") + string("\n"));
  exit(0);
}

customlogfile = get_kb_item("GSHB/Apache/CustomLog");
customlogfile = ereg_replace(pattern:'/',replace:'\\', string:customlogfile);
customlogfile = split(customlogfile, sep:"|", keep:0);

for (c=0; c<max_index(customlogfile); c++) {

  if (customlogfile[c] >!< '') {

    checkpath = eregmatch(pattern:'.*:.*', string:customlogfile[c]);
    if(isnull(checkpath)){
      path = split(kbpath, sep:":", keep:FALSE);
      file = path[1] + customlogfile[c];
      share = path[0] + "$";
    }else{
      path = split(customlogfile[c], sep:":", keep:FALSE);
      file = path[1];
      share = path[0] + "$";
    }

    customlog = GSHB_read_file(share: share, file: file, offset: 0);
    if (!customlog){
      #AspEnableParentPaths = "error";
      log_message(port:0, proto:"IT-Grundschutz", data:"Cannot access/open the Apache CustomLogfile: " + share + file);
    } else {
      Error404 = egrep(pattern:'.*GET .* 404 .*', string:customlog);
      Error403 = egrep(pattern:'.*GET .* 403 .*', string:customlog);

      if(Error404){
        httpError404 += string(share + file +": has 404 Errors!" ) + '\n';
      }else{
        httpError404 += string(share + file +": has no 404 Errors!" ) + '\n';
      }

      if(Error403){
        httpError403 = httpError403 + string(share + file +": has 403 Errors!" ) + '\n';
      }else{
        httpError403 = httpError403 + string(share + file +": has no 403 Errors!" ) + '\n';
      }
    }
  }
}

if(!httpError404) httpError404 = "None";
if(!httpError403) httpError403 = "None";

set_kb_item(name:"GSHB/Apache/404Error", value:httpError404);
set_kb_item(name:"GSHB/Apache/403Error", value:httpError403);

exit(0);