Nmap Development mailing list archives

Re: Service Detection: CA Message Queuing Server - Update


From: Brandon Enright <bmenrigh () ucsd edu>
Date: Thu, 12 Jun 2008 00:37:48 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 11 Jun 2008 18:52:44 -0500 or thereabouts Tom Sellers
<nmap () fadedcode net> wrote:

Tom Sellers wrote:
I have attached a match line that detects the CA Message Queuing
Server service on TCP port 4105.  This software is generally
installed in support of other CA software.  A fairly lengthy list
can be found in this ISS writeup about a vulnerability in the
service:

http://xforce.iss.net/xforce/xfdb/21948

This match line should be placed in the Null probe section.

I have set service portion of the match as "ca-mq".  You may want to
change this to something else.

Tom


Updated the match line to add an anchor (Thanks Brandon!).

Tom

Hey Tom, all your match lines look good now so I've gone ahead and
committed them to SVN.

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkhQb90ACgkQqaGPzAsl94ICBACeNq9pRqYU9SGa4Ys5rd6hRT/v
vgwAnRB1DBuwZq35l2qbwMjd3GCpHeU1
=5utN
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: