1
votes

I found a perl script on GitHub for CVE-2017-3169 and when I run it ill get this error

 $ perl CVE_2017_3169.pl --host 192.168.1.26 --port 80 --https-port 443 -httpd-dir /etc/apache2/

    =================================[ CVE-2017-3169 ]=================================

    Reporter :
    Date : 2017-06-19
    CVE : CVE-2017-3169

    Description :


    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl
    may dereference a NULL pointer when third-party modules call
    ap_hook_process_connection() during an HTTP request to an HTTPS port.


    ===================================================================================

[*] Restarting Apache ...
Can't exec "/etc/apache2//bin/apachectl": No such file or directory at CVE_2017_3169.pl line 168.
[-] Error : APXS And/Or Module File Not Found .

GitHub: https://github.com/gottburgm/Exploits/blob/master/CVE-2017-3169/CVE_2017_3169.pl

It cannot find the file /etc/apache2//bin/apachectl. I'm not sure if a double path delimiter // is a critical error, but you can try calling with -httpd-dir /etc/apache2 (without the / at the end) and see if that helps. - TLP
@TLP, Duplicate dir seps is ok in unix. - ikegami
@bobthebuilder, What's your question? Do you claim that /etc/apache2/bin/apachectl exists? - ikegami