Re: ms-sql-info script bug

[David Fifield <david () bamsoftware com>]

On Fri, Jun 24, 2011 at 08:06:45PM +0100, Rob Nicholls wrote:
> It's afraid it's not really a bug with the script. Even if SQL Server 2000
> has been patched using the latest service packs and hot fixes, the version
> returned by the SQL Server Resolution Service remains at the base version
> 8.00.194 and therefore cannot be trusted. I think that's why it says
> "UNVERIFIED" in the output.
>
> Rob
>
> -----Original Message-----
> From: nmap-dev-bounces () insecure org [mailto:nmap-dev-bounces () insecure org]
> On Behalf Of Ryan Giobbi
> Sent: 24 June 2011 19:45
> To: nmap-dev () insecure org
> Subject: ms-sql-info script bug
>
> Bug in ms-sql-info script. TCP and UDP ports show different SQL server
> information. The 8.00.2039 version is probably correct.
>
>
> 1433/tcp open  ms-sql-s Microsoft SQL Server 2000 8.00.2039; SP4
> 1434/udp open  ms-sql-m Microsoft SQL Server 8.00.194 (ServerName:
> <host> ; TCPPort: 1433)

Also it's possible that there is a bug in our nmap-service-probes file.
If you are able to verify the version number exactly, please submit a
correction at http://insecure.org/cgi-bin/submit.cgi?corr-service.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/