Re: Detecting the sendmail version w/o using the connection banner

From: Nicolas Gregoire (ngregoireat_private)
Date: Thu Mar 06 2003 - 02:36:36 PST

Next message: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"

Previous message: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
In reply to: Javier Fernandez-Sanguino: "Detecting the sendmail version w/o using the connection banner"
Next in thread: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
Reply: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 2003-03-06 at 11:21, Javier Fernandez-Sanguino wrote:
> 
> The sendmail plugin (sendmail_header.nasl) only uses the sendmail header
> when you do a direct connection to the SMTP server. However, there might
> be an alternative way to determine which version of Sendmail you are
> running.
>[snip]
> This might an alternative check for the sendmail-header check. It
> doesn't look very difficult to code ¿Opinions?

It may be useful to take some functionnality to smtpscan, which is a
tool dedicated to identify SMTP servers at an application level.

http://www.greyhats.org/outils/smtpscan/smtpscan-0.4.tar.gz

-- 
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoireat_private ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F  FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F

application/pgp-signature attachment: This is a digitally signed message part

Next message: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
Previous message: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
In reply to: Javier Fernandez-Sanguino: "Detecting the sendmail version w/o using the connection banner"
Next in thread: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
Reply: Vincent Renardias: "Re: Detecting the sendmail version w/o using the connection banner"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Mar 06 2003 - 02:40:24 PST