Add script for CVE-2017-5638. #740

wants to merge 1 commit into


None yet

2 participants


Add a NSE script for CVE-2017-5638.

The script adds a header on the server side via the RCE and checks that the header value is what we set it to.

More info here.


Awesome! Very clean script. I had to add a missing require "string", which you could have caught with our code check tool and git hook, but otherwise this worked great. Thanks!


Ah whoops! Sorry about that. I didn't see an errors when running locally so I missed that.

@sethjackson sethjackson deleted the sethjackson:cve-2017-5638 branch Mar 13, 2017

oops, forgot to link this to the commit: 3140dbe


No worries. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment