Recently I need to care a lot of false positive vulnerabilities in scanner results on Apache version.
Example of false positive vulnerability:

Apache 2.2 &lt; 2.2.16 Multiple Vulnerabilities


Our customers run scanners and they check Apache version related to the official Apache version numbering.

We use Centos, and the Apache version numbering is different from the official Apache version numbering.

For example now we install httpd-2.2.15-26.el6.centos.x86_64 and it includes all security patches released by Apache in recent versions.

The Centos Apache version numbering relies on the RedHat Apache version numbering and they do not change the base number (httpd-2.2.15) each update.
But scanners do not “understand” this and check that 2.2.15 &lt; 2.2.16.

Can you point me to the good document that explains the RedHat Apache version numbering?

Do you know if exist scanner that “understand” the RedHat Apache version numbering?


Question: Can you use Python to search a csv for a value?
Answer: I'd do something like this:

# value we're looking for
desired_value = 1000

# read csv file
csv_reader = csv.reader(open('test.csv', 'rU'))

# loop through csv file
for line_number, line in enumerate(csv_reader):
    # catch errors in converting to float
    try:
        # if desired matches first value on line
        if desired_value == float(line[0]): 
            # print line number and value
            print line_number, line[0]
    except ValueError as e:
        continue


This looks through the CSV once, converts the first value on each line to a float, and then if the converted float matches the desired_value, print the line number and value matched. 

Test.csv:


  10
  20
  1000
  1500


Output:


  2 1000