Re: ssh ident

From: Anne Carasik (gatorat_private)
Date: Thu Mar 20 2003 - 12:42:59 PST

Next message: Nicolas Gregoire: "Description in mssqlserver_detect.nasl"

Previous message: Renaud Deraison: "Re: ssh ident"
In reply to: sulloat_private: "ssh ident"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Sullo,

Please tell me you are not running SSH-2.0-2.0.12 and this is really
a wrong read on the NASL script.

If you are, run don't walk to the nearest OpenSSH mirror and install
OpenSSH 3.5p1.

-Anne

sulloat_private grabbed a keyboard and typed...
> We're seeing some odd messages with regard to SSH running on many servers. On
> one host, for example, I see:
> 
> - An unknown service is running on this port.
>   It is usually reserved for SSH
>   Nessus ID : 10330
> 
> - Remote SSH version : SSH-2.0-2.0.12 (non-commercial)
>   Nessus ID : 10267
> 
> It seems that find_service.nes is not identifying the SSH server. But the
> ssh_version.nasl is correctly figuring out that it is SSH...
> 
> Any idea why find_services.nes is not properly identifying it? The match in
> find_services.nes is:
>    else if(strstr(line, "ssh-"))
> which should work.
> 
> Any ideas?
> 
> -Sullo
> 
> 
> 
> -- 
> http://www.cirt.net/

-- 
              .-"".__."``".   Anne Carasik, System Administrator
 .-.--. _...' (/)   (/)   ``'   gator at cacr dot caltech dot edu 
(O/ O) \-'      ` -="""=.    ',  Center for Advanced Computing Research    
~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

application/pgp-signature attachment: stored

Next message: Nicolas Gregoire: "Description in mssqlserver_detect.nasl"
Previous message: Renaud Deraison: "Re: ssh ident"
In reply to: sulloat_private: "ssh ident"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Mar 20 2003 - 12:43:27 PST