iis server strings vs. patch level

From: Skip Hans Stellhorn (skip.stellhorn@ncircle.com)
Date: 02/28/02


Date: Thu, 28 Feb 2002 10:49:09 -0800
From: Skip Hans Stellhorn <skip.stellhorn@ncircle.com>
To: pen-test@securityfocus.com

Does anyone know of a good resource for
mapping various patch levels of an IIS
server to hotfixes and service packs applied?

For example, exchange gives a ton of version
info on an SMTP connect (5.5.2653.13) which
probably corresponds to a very specific condition
of applied patches/hotfixes/service packs.

----
- Skip Hans Stellhorn
- Vulnerability Research
- nCircle Network Security
----
- BF96 B2EB 8466 ED60 6B03
- B59E B61C 69A9 84E2 054A
----

---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/



Relevant Pages

  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: Wardialing
    ... >>> achieving the connection with the modem. ... >>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • RE: How to Tackle the Legal Tangle?
    ... How to Tackle the Legal Tangle? ... >This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)