kura / amisecure

Am I Secure? Python script to do system and config security checks.
https://kura.io/amisecure/
19 stars 6 forks source link

Vulnerability database + check #2

Open kura opened 12 years ago

kura commented 12 years ago

Do version looks against a database of known vulns. Easy for Apache (http://httpd.apache.org/security/vulnerabilities_20.html) and nginx (http://nginx.org/en/security_advisories.html), more difficult for PHP which doesn't seem to have a list anywhere...

kura commented 12 years ago

ssh - http://www.cvedetails.com/product/12081/Openssh-Openssh.html?vendor_id=7161

kura commented 12 years ago

php - http://www.cvedetails.com/product/128/PHP-PHP.html?vendor_id=74