RE: Microsoft SQL Server fingerprints for SQL 2000 and 2005

["Thomas Buchanan" <TBuchanan () thecompassgrp net>]

> -----Original Message-----
> From: Fyodor [mailto:fyodor () insecure org] 
> Sent: Thursday, February 07, 2008 6:26 PM
> To: Thomas Buchanan
> Cc: doug () hcsw org; nmap-dev () insecure org
> Subject: Re: Microsoft SQL Server fingerprints for SQL 2000 and 2005
>
> On Thu, Feb 07, 2008 at 06:21:49PM -0600, Thomas Buchanan wrote:
> > Thanks again to Tom, et al. for getting these probes and matches
built.
> > They've been very helpful, as this seems to be the most accurate way
to
> > determine actual patch levels for SQL Server.  Here's a few updates
and
> > additions.
>
> Thanks, applied.
>
> Cheers,
> -F

Here's a couple more additions.  Adds detection of SQL Server 2008, and
specific version information for the SQL Server 2008 November 2007 CTP.
It also adds a match to the UDP probe for SQL Servers that don't have a
TCP port configured, which I've seen a couple of times recently, and
wasn't picked up by the existing match lines.

Thomas

Attachment: ms-sql-services-round2.patch
Description: ms-sql-services-round2.patch

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org