Backported patches - vulnrability scanning

["Eric Appelboom" <eric () mweb com>]

Hi,

I am looking for a scanner that does not false positive on deamons that
have
Been back ported (patched) and still keep the same banner versions.

How do security teams keep track of what is current or backported as I
am finding it a problem.

One soloution of course is to have a policy to always use current
released builds in 
Production. (cough)

Any other ideas?
Cheers
Eric




---------------------------------------------------------------------------
----------------------------------------------------------------------------