Re: Detecting the sendmail version w/o using the connection banner

From: Vincent Renardias (vincentat_private)
Date: Thu Mar 06 2003 - 02:38:10 PST

  • Next message: Nicolas Gregoire: "Re: Detecting the sendmail version w/o using the connection banner"

    On Thu, 2003-03-06 at 11:21, Javier Fernandez-Sanguino wrote:
    > The sendmail plugin (sendmail_header.nasl) only uses the sendmail header
    > when you do a direct connection to the SMTP server. However, there might
    > be an alternative way to determine which version of Sendmail you are
    > running. Sample:
    > 
    > 220 XXXXXX ESMTP Sendmail; Thu, 6 Mar 2003 10:30:40 +0100 ver
    > 500 5.5.1 Command unrecognized: "ver"
    > help
    > 214-2.0.0 This is sendmail version YYYYYY
    > 214-2.0.0 Topics:
    > (...)
    > 
    > Even if the header (220) does _not_ include the header at all the 'help'
    > command does. I've seen this in some Sendmail versions. For those that
    > do not have "hidden" the sendmail server version:
    
    I've just commited a fix that uses the output of 'HELP' to identify
    Sendmail & Qmail if their name don't appear in the banner.
    Only software identification (not version) for now.
    



    This archive was generated by hypermail 2b30 : Thu Mar 06 2003 - 02:39:15 PST