SAP Internet Graphics Server (IGS) Detection

What is the "SAP Internet Graphics Server (IGS) Detection?"

The "SAP Internet Graphics Server (IGS) Detection" module is designed to detect the presence of SAP Internet Graphics Server (IGS) and report any vulnerabilities or misconfigurations. This module focuses on identifying potential security issues related to the SAP IGS software.

The severity of this module is classified as informative, meaning it provides valuable information about the target system but does not directly exploit any vulnerabilities.

Impact

This module aims to identify potential vulnerabilities or misconfigurations in the SAP Internet Graphics Server (IGS) software. By detecting these issues, system administrators can take appropriate measures to secure their systems and prevent potential attacks or unauthorized access.

How the module works?

The "SAP Internet Graphics Server (IGS) Detection" module utilizes HTTP request templates and matching conditions to identify the presence of SAP IGS. It performs the following checks:

- Checks the response body for the presence of the phrases "SAP IGS" and "is running". - Verifies that the HTTP response status is 200. - Examines the response headers for the presence of the phrase "SAP Internet Graphics Server".

If all of these conditions are met, the module considers the target system to have SAP IGS installed and running.

Here is an example of an HTTP request that the module may send:

GET / HTTP/1.1
Host: example.com
User-Agent: Vidoc

The module then evaluates the response based on the defined matching conditions to determine if SAP IGS is present.

By using this module, system administrators can proactively identify the presence of SAP IGS and address any potential vulnerabilities or misconfigurations to enhance the security of their systems.