Penetration Testing mailing list archives

iis server strings vs. patch level

From: Skip Hans Stellhorn <skip.stellhorn () ncircle com>
Date: Thu, 28 Feb 2002 10:49:09 -0800

Does anyone know of a good resource for
mapping various patch levels of an IIS
server to hotfixes and service packs applied?

For example, exchange gives a ton of version
info on an SMTP connect (5.5.2653.13) which
probably corresponds to a very specific condition
of applied patches/hotfixes/service packs.

----
- Skip Hans Stellhorn
- Vulnerability Research
- nCircle Network Security
----
- BF96 B2EB 8466 ED60 6B03
- B59E B61C 69A9 84E2 054A
----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Current thread:

Firewall ACL determinations Kelley John C. J9C548 (Feb 25)
- R: Firewall ACL determinations Carmelo Floridia (Feb 25)
  - iis server strings vs. patch level Skip Hans Stellhorn (Feb 28)
- <Possible follow-ups>
- Re: Firewall ACL determinations Alon Swartz (Feb 26)