Re: Service fingerprint integration highlights

[Daniel Miller <bonsaiviking () gmail com>]

David,

Yes, it is! At least we had the actual database listener, even if we didn't
have the web management portions. I added a CPE for this match line in
r36451.

Dan

On Sat, Nov 26, 2016 at 2:34 PM, David Fifield <david () bamsoftware com>
wrote:

> On Sat, Nov 26, 2016 at 10:58:54AM -0600, Daniel Miller wrote:
> > This database server, 4th Dimension, is 32 years old and only just now
> starting
> > to show up in our service database!
> > +match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: 4D_v(\d+)/(\1\.\d+)\r\n|
> p/4D RDBMS web server/ v/$2/ cpe:/a:4d_sas:4d:$2/
> > +match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: 4D/([\d.]+)\r\n|s p/4D
> RDBMS web server/ v/$1/ cpe:/a:4d_sas:4d:$1/
>
> Might be the same system as this existing NULL probe match? It was added
> in 2009.
>
> match 4d-server m|^\0\0\0H\0\0\0\x02.[^\0]*\0\
> 0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$|s
> p/4th Dimension database server/
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/