[New Script] imap4_banner.nasl

From: Vincent Renardias (vincentat_private)
Date: Tue Mar 18 2003 - 06:06:10 PST

  • Next message: Rick Hoekman: "Plugin language"

    No vulnerability tested, this script displays the IMAP4 banners if there
    are IMAP servers detected (like http_version.nasl &
    popserver_detect.nasl do for HTTP & POP-3).
    
    
    
    #
    # This script was written by Vincent Renardias <vincentat_private>
    #
    # License : GPLv2
    #
    
    if(description)
    {
     script_id(FIXME);
     script_version ("$Revision$");
     
     name["english"] = "IMAP Banner";
     name["francais"] = "Baniere IMAP";
     
     script_name(english:name["english"]);
     
     desc["english"] = "
    Displays the imap4 service banner.
    
    Risk factor: None";
    
     script_copyright(english:"This script is Copyright (C) 2003 StrongHoldNet",
     		  francais:"Ce script est Copyright (C) 2003 StrongHoldNet");
    
     script_description(english:desc["english"]);
     summary["english"] = "displays the imap4 banner";
     script_summary(english:summary["english"]);
     script_category(ACT_GATHER_INFO);
     family["english"] = "General";
     script_family(english:family["english"]); 
    
     script_dependencie("find_service.nes");
     script_require_ports("Services/imap", 143);
     exit(0);
    }
    
    
    port = get_kb_item("Services/imap");
    
    if(!port) port = 143;
    
    banner = get_kb_item(string("imap/banner/", port));
    
    if(banner)
    {
     banner = ereg_replace(pattern:"(Mon|Tue|Wed|Thu|Fri|Sat|Sun|Lun|Mar|Mer|Jeu|Ven|Sam|Dim), [0-3]?[0-9] (Jan|Feb|Mar|Apr|May|Jun|Jul|Sep|Oct|Nov|D[eé]c|F[eé]v|Avr|Mai|Ao[uû]) [0-9][0-9][0-9][0-9] [0-2]?[0-9]:[0-9][0-9]:[0-9][0-9] [+|-][0-9][0-9][0-9][0-9]", replace:"<CURRENT_DATE>", string:banner);
     report = string("The remote imap server banner is :\n",banner,
     "\nVersions and types should be omitted where possible.\nChange the imap banner to something generic.");
     security_note(port:port, data:report);
    }
    



    This archive was generated by hypermail 2b30 : Tue Mar 18 2003 - 06:07:19 PST