recog 2.3.10 → 2.3.15

Sign up to get free protection for your applications and to get access to all the features.
Files changed (21) hide show
  1. checksums.yaml +4 -4
  2. data/.github/SECURITY.md +35 -0
  3. data/bin/recog_cleanup +0 -0
  4. data/cpe-remap.yaml +18 -2
  5. data/identifiers/service_product.txt +1 -0
  6. data/identifiers/vendor.txt +1 -0
  7. data/lib/recog/version.rb +1 -1
  8. data/update_cpes.py +3 -0
  9. data/xml/dns_versionbind.xml +116 -8
  10. data/xml/favicons.xml +3 -2
  11. data/xml/ftp_banners.xml +72 -10
  12. data/xml/html_title.xml +28 -0
  13. data/xml/http_servers.xml +395 -64
  14. data/xml/http_wwwauth.xml +7 -7
  15. data/xml/imap_banners.xml +43 -0
  16. data/xml/pop_banners.xml +57 -2
  17. data/xml/smtp_banners.xml +84 -2
  18. data/xml/snmp_sysdescr.xml +96 -57
  19. data/xml/ssh_banners.xml +7 -3
  20. data/xml/telnet_banners.xml +146 -7
  21. metadata +3 -2
data/xml/http_wwwauth.xml CHANGED
@@ -515,9 +515,9 @@
515
515
 
516
516
  <fingerprint pattern="^(?:Basic|Digest) realm=&quot;NETGEAR (Orbi(?:-(?:micro|mini))?)&quot;.*$">
517
517
  <description>Netgear Orbi</description>
518
- <example hw.product="Orbi">Basic realm=&quot;NETGEAR Orbi&quot;</example>
519
- <example hw.product="Orbi-micro">Basic realm=&quot;NETGEAR Orbi-micro&quot;</example>
520
- <example hw.product="Orbi-mini">Basic realm=&quot;NETGEAR Orbi-mini&quot;</example>
518
+ <example hw.product="Orbi">Basic realm="NETGEAR Orbi"</example>
519
+ <example hw.product="Orbi-micro">Basic realm="NETGEAR Orbi-micro"</example>
520
+ <example hw.product="Orbi-mini">Basic realm="NETGEAR Orbi-mini"</example>
521
521
  <param pos="0" name="hw.vendor" value="Netgear"/>
522
522
  <param pos="0" name="hw.device" value="WAP"/>
523
523
  <param pos="0" name="hw.family" value="Orbi"/>
@@ -526,9 +526,9 @@
526
526
 
527
527
  <fingerprint pattern="(?:Basic|Digest) realm=&quot;NETGEAR ([a-zA-Z0-9\-\+]+)\s*&quot;.*$">
528
528
  <description>Netgear Routers</description>
529
- <example hw.product="DG834">Basic realm=&quot;NETGEAR DG834 &quot;</example>
530
- <example hw.product="C7000v2">Basic realm=&quot;NETGEAR C7000v2&quot;</example>
531
- <example hw.product="R7000P">Basic realm=&quot;NETGEAR R7000P&quot;</example>
529
+ <example hw.product="DG834">Basic realm="NETGEAR DG834 "</example>
530
+ <example hw.product="C7000v2">Basic realm="NETGEAR C7000v2"</example>
531
+ <example hw.product="R7000P">Basic realm="NETGEAR R7000P"</example>
532
532
  <param pos="0" name="hw.vendor" value="Netgear"/>
533
533
  <param pos="0" name="hw.device" value="Router"/>
534
534
  <param pos="1" name="hw.product"/>
@@ -538,7 +538,7 @@
538
538
 
539
539
  <fingerprint pattern="(?:Basic|Digest) realm=&quot;Netgear&quot;.*$">
540
540
  <description>Netgear Unspecified Router</description>
541
- <example>Basic realm=&quot;Netgear&quot;</example>
541
+ <example>Basic realm="Netgear"</example>
542
542
  <param pos="0" name="hw.vendor" value="Netgear"/>
543
543
  <param pos="0" name="hw.device" value="Router"/>
544
544
  </fingerprint>
data/xml/imap_banners.xml CHANGED
@@ -113,8 +113,49 @@
113
113
  <description>Dovecot Secure IMAP Server</description>
114
114
  <example>Dovecot ready.</example>
115
115
  <example>Dovecot DA ready.</example>
116
+ <param pos="0" name="service.vendor" value="Dovecot"/>
116
117
  <param pos="0" name="service.family" value="Dovecot"/>
117
118
  <param pos="0" name="service.product" value="Dovecot"/>
119
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
120
+ </fingerprint>
121
+
122
+ <fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
123
+ <description>Dovecot Secure IMAP Server - Ubuntu variant</description>
124
+ <example>Dovecot (Ubuntu) ready.</example>
125
+ <param pos="0" name="service.vendor" value="Dovecot"/>
126
+ <param pos="0" name="service.family" value="Dovecot"/>
127
+ <param pos="0" name="service.product" value="Dovecot"/>
128
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
129
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
130
+ <param pos="0" name="os.family" value="Linux"/>
131
+ <param pos="0" name="os.product" value="Linux"/>
132
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
133
+ </fingerprint>
134
+
135
+ <fingerprint pattern="^Dovecot \(Debian\) ready\.$">
136
+ <description>Dovecot Secure IMAP Server - Debian variant</description>
137
+ <example>Dovecot (Debian) ready.</example>
138
+ <param pos="0" name="service.vendor" value="Dovecot"/>
139
+ <param pos="0" name="service.family" value="Dovecot"/>
140
+ <param pos="0" name="service.product" value="Dovecot"/>
141
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
142
+ <param pos="0" name="os.vendor" value="Debian"/>
143
+ <param pos="0" name="os.family" value="Linux"/>
144
+ <param pos="0" name="os.product" value="Linux"/>
145
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
146
+ </fingerprint>
147
+
148
+ <fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
149
+ <description>Dovecot Secure IMAP Server - Raspbian variant</description>
150
+ <example>Dovecot (Raspbian) ready.</example>
151
+ <param pos="0" name="service.vendor" value="Dovecot"/>
152
+ <param pos="0" name="service.family" value="Dovecot"/>
153
+ <param pos="0" name="service.product" value="Dovecot"/>
154
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
155
+ <param pos="0" name="os.vendor" value="Raspbian"/>
156
+ <param pos="0" name="os.family" value="Linux"/>
157
+ <param pos="0" name="os.product" value="Linux"/>
158
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
118
159
  </fingerprint>
119
160
 
120
161
  <fingerprint pattern="^Courier-IMAP ready. Copyright \d+-\d+">
@@ -163,6 +204,7 @@
163
204
  <param pos="0" name="service.family" value="Cyrus MTA"/>
164
205
  <param pos="0" name="service.product" value="Cyrus IMAP"/>
165
206
  <param pos="2" name="service.version"/>
207
+ <param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
166
208
  <param pos="0" name="os.vendor" value="Apple"/>
167
209
  <param pos="0" name="os.family" value="Mac OS X"/>
168
210
  <param pos="0" name="os.product" value="Mac OS X"/>
@@ -179,6 +221,7 @@
179
221
  <param pos="0" name="service.family" value="Cyrus MTA"/>
180
222
  <param pos="0" name="service.product" value="Cyrus IMAP"/>
181
223
  <param pos="2" name="service.version"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
182
225
  <param pos="1" name="host.name"/>
183
226
  </fingerprint>
184
227
 
data/xml/pop_banners.xml CHANGED
@@ -180,11 +180,55 @@
180
180
 
181
181
  <fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: &lt;.+@(.+)&gt;)?$">
182
182
  <description>Dovecot Secure POP Server</description>
183
+ <example>Dovecot ready.</example>
184
+ <example>Dovecot DA ready.</example>
185
+ <example host.name="foo.bar.baz">Dovecot ready. &lt;fea.13865d.5f06b0a4.DuIvzQI4DAGR9MurahIGJw==@foo.bar.baz&gt;</example>
186
+ <param pos="0" name="service.vendor" value="Dovecot"/>
183
187
  <param pos="0" name="service.family" value="Dovecot"/>
184
188
  <param pos="0" name="service.product" value="Dovecot"/>
189
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
185
190
  <param pos="1" name="host.name"/>
186
191
  </fingerprint>
187
192
 
193
+ <fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
194
+ <description>Dovecot Secure POP Server - Ubuntu variant</description>
195
+ <example>Dovecot (Ubuntu) ready.</example>
196
+ <param pos="0" name="service.vendor" value="Dovecot"/>
197
+ <param pos="0" name="service.family" value="Dovecot"/>
198
+ <param pos="0" name="service.product" value="Dovecot"/>
199
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
200
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
201
+ <param pos="0" name="os.family" value="Linux"/>
202
+ <param pos="0" name="os.product" value="Linux"/>
203
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
204
+ </fingerprint>
205
+
206
+ <fingerprint pattern="^Dovecot \(Debian\) ready\.$">
207
+ <description>Dovecot Secure POP Server - Debian variant</description>
208
+ <example>Dovecot (Debian) ready.</example>
209
+ <param pos="0" name="service.vendor" value="Dovecot"/>
210
+ <param pos="0" name="service.family" value="Dovecot"/>
211
+ <param pos="0" name="service.product" value="Dovecot"/>
212
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
213
+ <param pos="0" name="os.vendor" value="Debian"/>
214
+ <param pos="0" name="os.family" value="Linux"/>
215
+ <param pos="0" name="os.product" value="Linux"/>
216
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
217
+ </fingerprint>
218
+
219
+ <fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
220
+ <description>Dovecot Secure POP Server - Raspbian variant</description>
221
+ <example>Dovecot (Raspbian) ready.</example>
222
+ <param pos="0" name="service.vendor" value="Dovecot"/>
223
+ <param pos="0" name="service.family" value="Dovecot"/>
224
+ <param pos="0" name="service.product" value="Dovecot"/>
225
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
226
+ <param pos="0" name="os.vendor" value="Raspbian"/>
227
+ <param pos="0" name="os.family" value="Linux"/>
228
+ <param pos="0" name="os.product" value="Linux"/>
229
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
230
+ </fingerprint>
231
+
188
232
  <fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
189
233
  <description>VMware Zimbra POP</description>
190
234
  <example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
@@ -301,6 +345,19 @@
301
345
  <param pos="1" name="service.version"/>
302
346
  </fingerprint>
303
347
 
348
+ <fingerprint pattern="^Welcome to MailEnable POP3 Server$">
349
+ <description>MailEnable POP3</description>
350
+ <example>Welcome to MailEnable POP3 Server</example>
351
+ <param pos="0" name="os.vendor" value="Microsoft"/>
352
+ <param pos="0" name="os.family" value="Windows"/>
353
+ <param pos="0" name="os.product" value="Windows"/>
354
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
355
+ <param pos="0" name="service.vendor" value="MailEnable"/>
356
+ <param pos="0" name="service.family" value="Mail Server"/>
357
+ <param pos="0" name="service.product" value="MailEnable"/>
358
+ <param pos="0" name="service.cpe23" value="cpe:/a:mailenable:mailenable:-"/>
359
+ </fingerprint>
360
+
304
361
  <!--
305
362
  ; Mandrake 8.1 - uses UW IMAP
306
363
  ; +OK POP3 mandrake81-f540k v2000.70mdk server ready
@@ -330,7 +387,6 @@
330
387
  // +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
331
388
  // +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
332
389
  // +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
333
- // +OK Welcome to MailEnable POP3 Server
334
390
  // +OK GroupWise POP3 server ready
335
391
  // +OK POP3 AnalogX Proxy 4.14 (Release) ready.
336
392
  // +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
@@ -471,7 +527,6 @@
471
527
  +OK studiovisuals.com POP3 Server (Version 1.020h) ready.
472
528
  +OK themeekermall.com POP3 Server (Version 1.020h) ready.
473
529
  +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
474
- +OK Welcome to MailEnable POP3 Server
475
530
  +OK X1 NT-POP3 Server 2436681011.monstercommercesites.com (IMail 7.15 560907-1)
476
531
  +OK X1 NT-POP3 Server Calvin-Serv (IMail 8.22 1107-1)
477
532
  +OK X1 NT-POP3 Server chealsea.com.cn (IMail 8.15 16990-1)
data/xml/smtp_banners.xml CHANGED
@@ -861,6 +861,7 @@
861
861
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
862
862
  <param pos="1" name="host.name"/>
863
863
  <param pos="2" name="service.version"/>
864
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
864
865
  <param pos="3" name="system.time"/>
865
866
  </fingerprint>
866
867
 
@@ -940,11 +941,13 @@
940
941
 
941
942
  <fingerprint pattern="^([^ ]+) Postfix \(Postfix-([^ ]+)-([^ ]+)\) \(([^ ]+)\) *$">
942
943
  <description>Postfix - version + build, followed by os</description>
944
+ <param pos="0" name="service.vendor" value="Postfix"/>
943
945
  <param pos="0" name="service.family" value="Postfix"/>
944
946
  <param pos="0" name="service.product" value="Postfix"/>
945
947
  <param pos="1" name="host.name"/>
946
948
  <param pos="2" name="service.version"/>
947
949
  <param pos="3" name="service.version.version"/>
950
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
948
951
  <param pos="4" name="postfix.os.info"/>
949
952
  </fingerprint>
950
953
 
@@ -952,27 +955,33 @@
952
955
  <description>Postfix - Std semantic versioning, w/ optional parens</description>
953
956
  <example service.version="3.1.4">foo.bar ESMTP Postfix (3.1.4)</example>
954
957
  <example service.version="2.7.1">foo.bar ESMTP Postfix 2.7.1</example>
958
+ <param pos="0" name="service.vendor" value="Postfix"/>
955
959
  <param pos="0" name="service.family" value="Postfix"/>
956
960
  <param pos="0" name="service.product" value="Postfix"/>
957
961
  <param pos="1" name="host.name"/>
958
962
  <param pos="2" name="service.version"/>
963
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
959
964
  </fingerprint>
960
965
 
961
966
  <fingerprint pattern="^([^ ]+) ESMTP Postfix \((?:Postfix-)?([\d.]+)-([^ ]+)\)$">
962
967
  <description>Postfix - version + build</description>
963
968
  <example service.version="2.8" service.version.version="20100306">foo.bar ESMTP Postfix (2.8-20100306)</example>
969
+ <param pos="0" name="service.vendor" value="Postfix"/>
964
970
  <param pos="0" name="service.family" value="Postfix"/>
965
971
  <param pos="0" name="service.product" value="Postfix"/>
966
972
  <param pos="1" name="host.name"/>
967
973
  <param pos="2" name="service.version"/>
968
974
  <param pos="3" name="service.version.version"/>
975
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
969
976
  </fingerprint>
970
977
 
971
978
  <fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Ubuntu\)$">
972
979
  <description>Postfix - Ubuntu</description>
973
980
  <example>foo.bar ESMTP Postfix (Ubuntu)</example>
981
+ <param pos="0" name="service.vendor" value="Postfix"/>
974
982
  <param pos="0" name="service.family" value="Postfix"/>
975
983
  <param pos="0" name="service.product" value="Postfix"/>
984
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
976
985
  <param pos="1" name="host.name"/>
977
986
  <param pos="0" name="os.vendor" value="Ubuntu"/>
978
987
  <param pos="0" name="os.family" value="Linux"/>
@@ -984,8 +993,10 @@
984
993
  <description>Postfix - Ubuntu, Mail-in-a-Box package</description>
985
994
  <example>foo.bar ESMTP Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
986
995
  <example>foo.bar Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
996
+ <param pos="0" name="service.vendor" value="Postfix"/>
987
997
  <param pos="0" name="service.family" value="Postfix"/>
988
998
  <param pos="0" name="service.product" value="Postfix"/>
999
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
989
1000
  <param pos="1" name="host.name"/>
990
1001
  <param pos="0" name="os.vendor" value="Ubuntu"/>
991
1002
  <param pos="0" name="os.family" value="Linux"/>
@@ -996,8 +1007,10 @@
996
1007
  <fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Debian/GNU\)$">
997
1008
  <description>Postfix - Debian</description>
998
1009
  <example>foo.bar ESMTP Postfix (Debian/GNU)</example>
1010
+ <param pos="0" name="service.vendor" value="Postfix"/>
999
1011
  <param pos="0" name="service.family" value="Postfix"/>
1000
1012
  <param pos="0" name="service.product" value="Postfix"/>
1013
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1001
1014
  <param pos="1" name="host.name"/>
1002
1015
  <param pos="0" name="os.vendor" value="Debian"/>
1003
1016
  <param pos="0" name="os.family" value="Linux"/>
@@ -1008,8 +1021,10 @@
1008
1021
  <fingerprint pattern="^([^ ]+) ESMTP.* Postfix *\(.+\) *$">
1009
1022
  <description>Postfix - generic banner with amusing comments in parentheses</description>
1010
1023
  <example>foo.bar ESMTP Postfix (lol)</example>
1024
+ <param pos="0" name="service.vendor" value="Postfix"/>
1011
1025
  <param pos="0" name="service.family" value="Postfix"/>
1012
1026
  <param pos="0" name="service.product" value="Postfix"/>
1027
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1013
1028
  <param pos="1" name="host.name"/>
1014
1029
  </fingerprint>
1015
1030
 
@@ -1017,23 +1032,29 @@
1017
1032
  <description>Postfix - generic banner</description>
1018
1033
  <example>foo.bar ESMTP Postfix</example>
1019
1034
  <example>foo.bar SMTP Postfix</example>
1035
+ <param pos="0" name="service.vendor" value="Postfix"/>
1020
1036
  <param pos="0" name="service.family" value="Postfix"/>
1021
1037
  <param pos="0" name="service.product" value="Postfix"/>
1038
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1022
1039
  <param pos="1" name="host.name"/>
1023
1040
  </fingerprint>
1024
1041
 
1025
1042
  <fingerprint pattern="^ *ESMTP Postfix$">
1026
1043
  <description>Postfix - banner without hostname or version</description>
1027
1044
  <example>ESMTP Postfix</example>
1045
+ <param pos="0" name="service.vendor" value="Postfix"/>
1028
1046
  <param pos="0" name="service.family" value="Postfix"/>
1029
1047
  <param pos="0" name="service.product" value="Postfix"/>
1048
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1030
1049
  </fingerprint>
1031
1050
 
1032
1051
  <fingerprint pattern="^(?i)([^ ]+) POSTFIX$">
1033
1052
  <description>Postfix - generic w/o ESMTP</description>
1034
1053
  <example host.name="foo.bar">foo.bar Postfix</example>
1054
+ <param pos="0" name="service.vendor" value="Postfix"/>
1035
1055
  <param pos="0" name="service.family" value="Postfix"/>
1036
1056
  <param pos="0" name="service.product" value="Postfix"/>
1057
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1037
1058
  <param pos="1" name="host.name"/>
1038
1059
  </fingerprint>
1039
1060
 
@@ -1070,13 +1091,16 @@
1070
1091
  <fingerprint pattern="^Sendmail ESMTP ready$">
1071
1092
  <description>Sendmail - short banner w/o hostname, version, platform, or date.</description>
1072
1093
  <example>Sendmail ESMTP ready</example>
1094
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1073
1095
  <param pos="0" name="service.family" value="Sendmail"/>
1074
1096
  <param pos="0" name="service.product" value="Sendmail"/>
1097
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
1075
1098
  </fingerprint>
1076
1099
 
1077
1100
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+) \(PHNE_([^ ]+)\) */ *(.+); *(.+) \(.+\)$">
1078
1101
  <description>Sendmail - HP-UX with a PHNE (HP Networking patch) installed</description>
1079
1102
  <example host.name="foo.bar" service.version="8.8.6" sendmail.config.version="8.7.1">foo.bar ESMTP Sendmail 8.8.6 (PHNE_14041)/8.7.1; Tue, 6 Feb 2001 10:04:32 -0300 (SAT)</example>
1103
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1080
1104
  <param pos="0" name="service.family" value="Sendmail"/>
1081
1105
  <param pos="0" name="service.product" value="Sendmail"/>
1082
1106
  <param pos="0" name="os.vendor" value="HP"/>
@@ -1086,6 +1110,7 @@
1086
1110
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1087
1111
  <param pos="1" name="host.name"/>
1088
1112
  <param pos="2" name="service.version"/>
1113
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1089
1114
  <param pos="3" name="sendmail.hpux.phne.version"/>
1090
1115
  <param pos="4" name="sendmail.config.version"/>
1091
1116
  <param pos="5" name="system.time"/>
@@ -1094,6 +1119,7 @@
1094
1119
  <fingerprint pattern="^(\S+) ESMTP Sendmail \S+ version ([\d\.]+) - Revision \S+ HP-UX([\d\.]+).*(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w\w\w)$">
1095
1120
  <description>Sendmail - HP-UX</description>
1096
1121
  <example host.name="foo.bar" os.version="11.31" service.version="8.13.3">foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 1.004:: HP-UX11.31 - 03rd February,2010/8.11.1; Wed, 20 May 2015 23:35:38 GMT</example>
1122
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1097
1123
  <param pos="0" name="service.family" value="Sendmail"/>
1098
1124
  <param pos="0" name="service.product" value="Sendmail"/>
1099
1125
  <param pos="0" name="os.vendor" value="HP"/>
@@ -1104,12 +1130,14 @@
1104
1130
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
1105
1131
  <param pos="1" name="host.name"/>
1106
1132
  <param pos="2" name="service.version"/>
1133
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1107
1134
  <param pos="4" name="system.time"/>
1108
1135
  </fingerprint>
1109
1136
 
1110
1137
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+)/UW([^ ]+) ready at *(.+) \(.+\) *$">
1111
1138
  <description>Sendmail - Unixware</description>
1112
1139
  <example service.version="8.8.7">foo.bar ESMTP Sendmail 8.8.7/UW7.1.0 ready at Tue, 6 Feb 2001 16:39:30 -0300 (GMT-0300)</example>
1140
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1113
1141
  <param pos="0" name="service.family" value="Sendmail"/>
1114
1142
  <param pos="0" name="service.product" value="Sendmail"/>
1115
1143
  <param pos="0" name="os.vendor" value="SCO"/>
@@ -1118,6 +1146,7 @@
1118
1146
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1119
1147
  <param pos="1" name="host.name"/>
1120
1148
  <param pos="2" name="service.version"/>
1149
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1121
1150
  <param pos="3" name="os.version"/>
1122
1151
  <param pos="4" name="system.time"/>
1123
1152
  </fingerprint>
@@ -1125,6 +1154,7 @@
1125
1154
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail AIX([^/]+)/UCB ([^;]+); (.+) \(.+\)$">
1126
1155
  <description>Sendmail - AIX (UCB variant)</description>
1127
1156
  <example os.version="4.2" service.version="8.7">foo.bar ESMTP Sendmail AIX4.2/UCB 8.7; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
1157
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1128
1158
  <param pos="0" name="service.family" value="Sendmail"/>
1129
1159
  <param pos="0" name="service.product" value="Sendmail"/>
1130
1160
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1135,12 +1165,14 @@
1135
1165
  <param pos="2" name="os.version"/>
1136
1166
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1137
1167
  <param pos="3" name="service.version"/>
1168
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1138
1169
  <param pos="4" name="system.time"/>
1139
1170
  </fingerprint>
1140
1171
 
1141
1172
  <fingerprint pattern="^([^ ]+) Sendmail AIX([^/]+)/UCB ([^/]+)/([^ ]+) ready at (.+)$">
1142
1173
  <description>Sendmail - AIX (UCB/ready at variant)</description>
1143
1174
  <example>foo.bar Sendmail AIX 4.1/UCB 5.64/4.03 ready at Mon, 30 Jul 2001 00:42:21 -0500</example>
1175
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1144
1176
  <param pos="0" name="service.family" value="Sendmail"/>
1145
1177
  <param pos="0" name="service.product" value="Sendmail"/>
1146
1178
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1151,6 +1183,7 @@
1151
1183
  <param pos="2" name="os.version"/>
1152
1184
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1153
1185
  <param pos="3" name="service.version"/>
1186
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1154
1187
  <param pos="4" name="sendmail.config.version"/>
1155
1188
  <param pos="5" name="system.time"/>
1156
1189
  </fingerprint>
@@ -1159,6 +1192,7 @@
1159
1192
  <description>Sendmail - AIX</description>
1160
1193
  <example host.name="foo.bar" os.version="4.2" service.version="8.7" sendmail.config.version="8.8">foo.bar ESMTP Sendmail AIX4.2/8.7/8.8; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
1161
1194
  <example host.name="foo.bar" os.version="5.1" service.version="8.11.6p2" sendmail.config.version="8.11.0">foo.bar ESMTP Sendmail AIX5.1/8.11.6p2/8.11.0; Fri, 28 Aug 1970 19:42:05 -0800</example>
1195
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1162
1196
  <param pos="0" name="service.family" value="Sendmail"/>
1163
1197
  <param pos="0" name="service.product" value="Sendmail"/>
1164
1198
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1169,6 +1203,7 @@
1169
1203
  <param pos="2" name="os.version"/>
1170
1204
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1171
1205
  <param pos="3" name="service.version"/>
1206
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1172
1207
  <param pos="4" name="sendmail.config.version"/>
1173
1208
  <param pos="5" name="system.time"/>
1174
1209
  </fingerprint>
@@ -1176,6 +1211,7 @@
1176
1211
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/SuSE Linux ([^;]+); (.+)$">
1177
1212
  <description>Sendmail - SuSE Linux</description>
1178
1213
  <example>foo.bar ESMTP Sendmail 8.9.3/8.9.3/SuSE Linux 8.9.3-0.1; Mon, 30 Jul 2001 04:48:54 +0200</example>
1214
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1179
1215
  <param pos="0" name="service.family" value="Sendmail"/>
1180
1216
  <param pos="0" name="service.product" value="Sendmail"/>
1181
1217
  <param pos="0" name="os.vendor" value="SuSE"/>
@@ -1185,6 +1221,7 @@
1185
1221
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1186
1222
  <param pos="1" name="host.name"/>
1187
1223
  <param pos="2" name="service.version"/>
1224
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1188
1225
  <param pos="3" name="sendmail.config.version"/>
1189
1226
  <param pos="4" name="sendmail.vendor.version"/>
1190
1227
  <param pos="5" name="system.time"/>
@@ -1193,6 +1230,7 @@
1193
1230
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+); (.+)$">
1194
1231
  <description>Sendmail - Solaris with date (no time offeset variant)</description>
1195
1232
  <example>foo.bar ESMTP Sendmail 8.9.3+Sun/8.9.1; Mon, 30 Jul 2001 02:50:22 GMT</example>
1233
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1196
1234
  <param pos="0" name="service.family" value="Sendmail"/>
1197
1235
  <param pos="0" name="service.product" value="Sendmail"/>
1198
1236
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1202,6 +1240,7 @@
1202
1240
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
1203
1241
  <param pos="1" name="host.name"/>
1204
1242
  <param pos="2" name="service.version"/>
1243
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1205
1244
  <param pos="3" name="sendmail.config.version"/>
1206
1245
  <param pos="4" name="system.time"/>
1207
1246
  </fingerprint>
@@ -1209,6 +1248,7 @@
1209
1248
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+) ready at (.+) \(.+\)$">
1210
1249
  <description>Sendmail - Solaris with date (ready variant)</description>
1211
1250
  <example>foo.bar ESMTP Sendmail 8.8.8+Sun/8.6.4 ready at Thu, 15 Nov 2000 11:40:32 -0800 (PST)</example>
1251
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1212
1252
  <param pos="0" name="service.family" value="Sendmail"/>
1213
1253
  <param pos="0" name="service.product" value="Sendmail"/>
1214
1254
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1218,6 +1258,7 @@
1218
1258
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1219
1259
  <param pos="1" name="host.name"/>
1220
1260
  <param pos="2" name="service.version"/>
1261
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1221
1262
  <param pos="3" name="sendmail.config.version"/>
1222
1263
  <param pos="4" name="system.time"/>
1223
1264
  </fingerprint>
@@ -1226,6 +1267,7 @@
1226
1267
  <description>Sendmail - Debian</description>
1227
1268
  <example service.version="8.12.0.Beta7" sendmail.config.version="8.12.0.Beta7" sendmail.vendor.version="8.12.0.Beta7-1">foo.bar ESMTP Debian Sendmail 8.12.0.Beta7/8.12.0.Beta7/Debian 8.12.0.Beta7-1; Sun, 29 Jul 2001 18:52:20 -0800</example>
1228
1269
  <example service.version="8.11.0" sendmail.config.version="8.9.3" sendmail.vendor.version="8.9.3-21">foo.bar ESMTP Sendmail 8.11.0/8.9.3/Debian 8.9.3-21; Sun, 29 Jul 2001 19:51:00 -0700</example>
1270
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1229
1271
  <param pos="0" name="service.family" value="Sendmail"/>
1230
1272
  <param pos="0" name="service.product" value="Sendmail"/>
1231
1273
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1235,6 +1277,7 @@
1235
1277
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1236
1278
  <param pos="1" name="host.name"/>
1237
1279
  <param pos="2" name="service.version"/>
1280
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1238
1281
  <param pos="3" name="sendmail.config.version"/>
1239
1282
  <param pos="4" name="sendmail.vendor.version"/>
1240
1283
  <param pos="5" name="system.time"/>
@@ -1244,6 +1287,7 @@
1244
1287
  <description>Sendmail - Debian 7.x (wheezy)</description>
1245
1288
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+wheezy1; Thu, 30 Nov 2017 10:33:05 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1246
1289
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+deb7u1; Thu, 30 Nov 2017 11:00:33 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1290
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1247
1291
  <param pos="0" name="service.family" value="Sendmail"/>
1248
1292
  <param pos="0" name="service.product" value="Sendmail"/>
1249
1293
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1254,6 +1298,7 @@
1254
1298
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1255
1299
  <param pos="1" name="host.name"/>
1256
1300
  <param pos="2" name="service.version"/>
1301
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1257
1302
  <param pos="3" name="sendmail.config.version"/>
1258
1303
  <param pos="4" name="system.time"/>
1259
1304
  </fingerprint>
@@ -1261,6 +1306,7 @@
1261
1306
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+deb8u\d; (.+); .*$">
1262
1307
  <description>Sendmail - Debian 8.x (jessie)</description>
1263
1308
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-8+deb8u2; Thu, 30 Nov 2017 10:25:48 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1309
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1264
1310
  <param pos="0" name="service.family" value="Sendmail"/>
1265
1311
  <param pos="0" name="service.product" value="Sendmail"/>
1266
1312
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1271,6 +1317,7 @@
1271
1317
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1272
1318
  <param pos="1" name="host.name"/>
1273
1319
  <param pos="2" name="service.version"/>
1320
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1274
1321
  <param pos="3" name="sendmail.config.version"/>
1275
1322
  <param pos="4" name="system.time"/>
1276
1323
  </fingerprint>
@@ -1278,6 +1325,7 @@
1278
1325
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+lenny\d; (.+); .*$">
1279
1326
  <description>Sendmail - Debian 5.x (lenny)</description>
1280
1327
  <example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-5+lenny1; Thu, 30 Nov 2017 12:29:40 +0300; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1328
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1281
1329
  <param pos="0" name="service.family" value="Sendmail"/>
1282
1330
  <param pos="0" name="service.product" value="Sendmail"/>
1283
1331
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1288,6 +1336,7 @@
1288
1336
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1289
1337
  <param pos="1" name="host.name"/>
1290
1338
  <param pos="2" name="service.version"/>
1339
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1291
1340
  <param pos="3" name="sendmail.config.version"/>
1292
1341
  <param pos="4" name="system.time"/>
1293
1342
  </fingerprint>
@@ -1295,6 +1344,7 @@
1295
1344
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+etch\d; (.+); .*$">
1296
1345
  <description>Sendmail - Debian 4.x (etch)</description>
1297
1346
  <example service.version="8.13.8" sendmail.config.version="8.13.8">foo.bar ESMTP Sendmail 8.13.8/8.13.8/Debian-3+etch1; Thu, 30 Nov 2017 10:28:23 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1347
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1298
1348
  <param pos="0" name="service.family" value="Sendmail"/>
1299
1349
  <param pos="0" name="service.product" value="Sendmail"/>
1300
1350
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1305,6 +1355,7 @@
1305
1355
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1306
1356
  <param pos="1" name="host.name"/>
1307
1357
  <param pos="2" name="service.version"/>
1358
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1308
1359
  <param pos="3" name="sendmail.config.version"/>
1309
1360
  <param pos="4" name="system.time"/>
1310
1361
  </fingerprint>
@@ -1312,6 +1363,7 @@
1312
1363
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\dsarge\d; (.+); .*$">
1313
1364
  <description>Sendmail - Debian 3.1 (sarge)</description>
1314
1365
  <example service.version="8.13.4">foo.bar ESMTP Sendmail 8.13.4/8.13.4/Debian-3sarge1; Thu, 30 Nov 2017 10:55:47 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1366
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1315
1367
  <param pos="0" name="service.family" value="Sendmail"/>
1316
1368
  <param pos="0" name="service.product" value="Sendmail"/>
1317
1369
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1322,6 +1374,7 @@
1322
1374
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1323
1375
  <param pos="1" name="host.name"/>
1324
1376
  <param pos="2" name="service.version"/>
1377
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1325
1378
  <param pos="3" name="sendmail.config.version"/>
1326
1379
  <param pos="4" name="system.time"/>
1327
1380
  </fingerprint>
@@ -1331,6 +1384,7 @@
1331
1384
  <example service.version="8.15.2">foo.bar ESMTP Sendmail 8.15.2/8.15.2/Debian-3; Thu, 30 Nov 2017 10:55:50 +0200; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1332
1385
  <example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-9.4; Thu, 30 Nov 2017 10:11:54 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1333
1386
  <example service.version="8.14.2">foo.bar ESMTP Sendmail 8.14.2/8.14.2/Debian-2build1; Thu, 30 Nov 2017 04:09:50 -0600; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1387
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1334
1388
  <param pos="0" name="service.family" value="Sendmail"/>
1335
1389
  <param pos="0" name="service.product" value="Sendmail"/>
1336
1390
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1340,6 +1394,7 @@
1340
1394
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1341
1395
  <param pos="1" name="host.name"/>
1342
1396
  <param pos="2" name="service.version"/>
1397
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1343
1398
  <param pos="3" name="sendmail.config.version"/>
1344
1399
  <param pos="4" name="system.time"/>
1345
1400
  </fingerprint>
@@ -1348,6 +1403,7 @@
1348
1403
  <description>Sendmail - Ubuntu</description>
1349
1404
  <example service.version="8.13.5.20060308">foo.bar ESMTP Sendmail 8.13.5.20060308/8.13.5/Debian-3ubuntu1.1; Fri, 24 Jul 2009 01:41:21 -0700; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1350
1405
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4.1ubuntu1; Thu, 30 Nov 2017 11:00:30 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1406
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1351
1407
  <param pos="0" name="service.family" value="Sendmail"/>
1352
1408
  <param pos="0" name="service.product" value="Sendmail"/>
1353
1409
  <param pos="0" name="os.vendor" value="Ubuntu"/>
@@ -1357,12 +1413,14 @@
1357
1413
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1358
1414
  <param pos="1" name="host.name"/>
1359
1415
  <param pos="2" name="service.version"/>
1416
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1360
1417
  <param pos="3" name="system.time"/>
1361
1418
  </fingerprint>
1362
1419
 
1363
1420
  <fingerprint pattern="^([^ ]+) (?:E?SMTP )?Sendmail SMI-([^/]+)/(SMI-SVR4) ready at (.+)$">
1364
1421
  <description>Sendmail - Solaris (SMI variant)</description>
1365
1422
  <example>foo.bar Sendmail SMI-8.6/SMI-SVR4 ready at Sun, 29 Jul 2001 22:58:46 -0400</example>
1423
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1366
1424
  <param pos="0" name="service.family" value="Sendmail"/>
1367
1425
  <param pos="0" name="service.product" value="Sendmail"/>
1368
1426
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1372,6 +1430,7 @@
1372
1430
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1373
1431
  <param pos="1" name="host.name"/>
1374
1432
  <param pos="2" name="service.version"/>
1433
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1375
1434
  <param pos="3" name="sendmail.config.version"/>
1376
1435
  <param pos="4" name="system.time"/>
1377
1436
  </fingerprint>
@@ -1379,6 +1438,7 @@
1379
1438
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)/(linuxconf); (.+)$">
1380
1439
  <description>Sendmail - unknown platform (linuxconf variant)</description>
1381
1440
  <example>foo.bar ESMTP Sendmail 8.9.3/linuxconf; Sun, 29 Jul 2001 22:48:28 -0400</example>
1441
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1382
1442
  <param pos="0" name="service.family" value="Sendmail"/>
1383
1443
  <param pos="0" name="service.product" value="Sendmail"/>
1384
1444
  <param pos="0" name="os.family" value="Linux"/>
@@ -1386,6 +1446,7 @@
1386
1446
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1387
1447
  <param pos="1" name="host.name"/>
1388
1448
  <param pos="2" name="service.version"/>
1449
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1389
1450
  <param pos="3" name="sendmail.config.version"/>
1390
1451
  <param pos="4" name="system.time"/>
1391
1452
  </fingerprint>
@@ -1417,10 +1478,12 @@
1417
1478
  <example host.name="foo.bar" service.version="8.8.8" sendmail.config.version="8.8.9">foo.bar ESMTP blah Sendmail 8.8.8/8.8.9; Wed, 21 Nov 2001 23:39:07 +0100 (CET)</example>
1418
1479
  <example host.name="foo.bar" service.version="8.10.2" sendmail.config.version="8.10.3">foo.bar ESMTP Sendmail 8.10.2/8.10.3; Mon, 10 Sep 2001 08:37:14 -0400</example>
1419
1480
  <example host.name="foo.bar" service.version="8.13.8" sendmail.config.version="8.13.9">foo.bar ESMTP foo-MTA Sendmail 8.13.8/8.13.9; Mon, 18 Apr 2011 08:52:38 -0700</example>
1481
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1420
1482
  <param pos="0" name="service.product" value="Sendmail"/>
1421
1483
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1422
1484
  <param pos="1" name="host.name"/>
1423
1485
  <param pos="2" name="service.version"/>
1486
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1424
1487
  <param pos="3" name="sendmail.config.version"/>
1425
1488
  <param pos="4" name="system.time"/>
1426
1489
  </fingerprint>
@@ -1428,10 +1491,12 @@
1428
1491
  <fingerprint pattern="^([^ ]+) +ESMTP .*Sendmail +([^/ ]+) */ *([^/ ]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w+)\.?$">
1429
1492
  <description>Sendmail - with timezone and timestamp, w/o timezone offset or OS</description>
1430
1493
  <example host.name="foo.bar" service.version="8.14.4" sendmail.config.version="8.14.4" system.time="Thu, 5 Apr 2018 19:30:58 GMT">foo.bar ESMTP Sendmail 8.14.4/8.14.4; Thu, 5 Apr 2018 19:30:58 GMT</example>
1494
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1431
1495
  <param pos="0" name="service.product" value="Sendmail"/>
1432
1496
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
1433
1497
  <param pos="1" name="host.name"/>
1434
1498
  <param pos="2" name="service.version"/>
1499
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1435
1500
  <param pos="3" name="sendmail.config.version"/>
1436
1501
  <param pos="4" name="system.time"/>
1437
1502
  </fingerprint>
@@ -1439,33 +1504,39 @@
1439
1504
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ ]+) ready at *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\))$">
1440
1505
  <description>Sendmail - with version and date (optional timezone), w/o config version</description>
1441
1506
  <example host.name="foo.bar" service.version="8.8.8" system.time="Tue, 6 Feb 2001 14:37:14 +0100">foo.bar ESMTP Sendmail 8.8.8 ready at Tue, 6 Feb 2001 14:37:14 +0100 (CET)</example>
1507
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1442
1508
  <param pos="0" name="service.family" value="Sendmail"/>
1443
1509
  <param pos="0" name="service.product" value="Sendmail"/>
1444
1510
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1445
1511
  <param pos="1" name="host.name"/>
1446
1512
  <param pos="2" name="service.version"/>
1513
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1447
1514
  <param pos="3" name="system.time"/>
1448
1515
  </fingerprint>
1449
1516
 
1450
1517
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) - \([^\)]+\)/[^ ]+;? *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
1451
1518
  <description>Sendmail - revision variant 1</description>
1452
1519
  <example>foo.foo.bar ESMTP Sendmail 8.11.1 - (Revision 1.010)/8.9.3; Sat, 22 Jan 2011 10:08:35 -0500 (EST)</example>
1520
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1453
1521
  <param pos="0" name="service.family" value="Sendmail"/>
1454
1522
  <param pos="0" name="service.product" value="Sendmail"/>
1455
1523
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1456
1524
  <param pos="1" name="host.name"/>
1457
1525
  <param pos="2" name="service.version"/>
1526
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1458
1527
  <param pos="3" name="system.time"/>
1459
1528
  </fingerprint>
1460
1529
 
1461
1530
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +(?:[^ ]+) +version +([^ ]+) +- +(?:[^;]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
1462
1531
  <description>Sendmail - revision variant 2</description>
1463
1532
  <example>foo.foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 2.007 - 8 December 2008/8.8.6; Wed, 21 Jul 2010 11:17:01 -0400 (EDT)</example>
1533
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1464
1534
  <param pos="0" name="service.family" value="Sendmail"/>
1465
1535
  <param pos="0" name="service.product" value="Sendmail"/>
1466
1536
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1467
1537
  <param pos="1" name="host.name"/>
1468
1538
  <param pos="2" name="service.version"/>
1539
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1469
1540
  <param pos="3" name="system.time"/>
1470
1541
  </fingerprint>
1471
1542
 
@@ -1480,8 +1551,10 @@
1480
1551
  <example host.name="foo.bar">foo.bar ESMTP Sendmail ready. </example>
1481
1552
  <example host.name="foo.bar">foo.bar ESMTP Sendmail</example>
1482
1553
  <example host.name="foo.bar">foo.bar Sendmail ready. </example>
1554
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1483
1555
  <param pos="0" name="service.family" value="Sendmail"/>
1484
1556
  <param pos="0" name="service.product" value="Sendmail"/>
1557
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
1485
1558
  <param pos="1" name="host.name"/>
1486
1559
  <param pos="2" name="system.time"/>
1487
1560
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
@@ -1490,10 +1563,12 @@
1490
1563
  <fingerprint pattern="^ESMTP Sendmail +([^/ ]+) */ *([^/ ]+); (\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)$">
1491
1564
  <description>Sendmail - with version and date, w/o hostname or platform (semicolon variant)</description>
1492
1565
  <example service.version="8.13.1" sendmail.config.version="8.13.1" system.time="Thu, 30 Nov 2017 01:58:22 -0700">ESMTP Sendmail 8.13.1/8.13.1; Thu, 30 Nov 2017 01:58:22 -0700</example>
1566
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1493
1567
  <param pos="0" name="service.family" value="Sendmail"/>
1494
1568
  <param pos="0" name="service.product" value="Sendmail"/>
1495
1569
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1496
1570
  <param pos="1" name="service.version"/>
1571
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1497
1572
  <param pos="2" name="sendmail.config.version"/>
1498
1573
  <param pos="3" name="system.time"/>
1499
1574
  </fingerprint>
@@ -1501,11 +1576,13 @@
1501
1576
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) \([^\)]+\) *(.+) \(.+\)$">
1502
1577
  <description>Sendmail - unknown (date in version string variant)</description>
1503
1578
  <example>mail.foo.bar ESMTP Sendmail 8.11.1 (1.1.2.11/12Jul01-1016AM) Wed, 8 Jan 2003 11:21:22 +0100 (MET)</example>
1579
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1504
1580
  <param pos="0" name="service.family" value="Sendmail"/>
1505
1581
  <param pos="0" name="service.product" value="Sendmail"/>
1506
1582
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1507
1583
  <param pos="1" name="host.name"/>
1508
1584
  <param pos="2" name="service.version"/>
1585
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1509
1586
  <param pos="3" name="system.time"/>
1510
1587
  </fingerprint>
1511
1588
 
@@ -1513,19 +1590,23 @@
1513
1590
 
1514
1591
  <fingerprint pattern="^([^ ]+) Sendmail ([^;]+); ([^;\.]+)$">
1515
1592
  <description>Sendmail - unknown platform, variant 1</description>
1593
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1516
1594
  <param pos="0" name="service.family" value="Sendmail"/>
1517
1595
  <param pos="0" name="service.product" value="Sendmail"/>
1518
1596
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
1519
1597
  <param pos="1" name="host.name"/>
1520
1598
  <param pos="2" name="service.version"/>
1599
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1521
1600
  <param pos="3" name="system.time"/>
1522
1601
  </fingerprint>
1523
1602
 
1524
1603
  <fingerprint pattern="^Sendmail ([^/]+)/([^/]+) ready on ([^ ]+)$">
1525
1604
  <description>Sendmail - basic with version and date</description>
1605
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1526
1606
  <param pos="0" name="service.family" value="Sendmail"/>
1527
1607
  <param pos="0" name="service.product" value="Sendmail"/>
1528
1608
  <param pos="1" name="service.version"/>
1609
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1529
1610
  <param pos="2" name="sendmail.config.version"/>
1530
1611
  <param pos="3" name="host.name"/>
1531
1612
  </fingerprint>
@@ -1751,11 +1832,12 @@
1751
1832
  <example host.name="foo.bar" service.version="5.3.1">foo.bar ESMTP CommuniGate Pro 5.3.1</example>
1752
1833
  <example host.name="foo.bar" service.version="6.2c3">foo.bar ESMTP CommuniGate Pro 6.2c3</example>
1753
1834
  <example host.name="foo.bar" service.version="4.3.12">foo.bar ESMTP CommuniGate Pro 4.3.12. It is you again :-(</example>
1754
- <param pos="0" name="service.vendor" value="Communigater"/>
1835
+ <param pos="0" name="service.vendor" value="Communigate"/>
1755
1836
  <param pos="0" name="service.family" value="Pro"/>
1756
- <param pos="0" name="service.product" value="ESMTP"/>
1837
+ <param pos="0" name="service.product" value="Communigate Pro"/>
1757
1838
  <param pos="1" name="host.name"/>
1758
1839
  <param pos="2" name="service.version"/>
1840
+ <param pos="0" name="service.cpe23" value="cpe:/a:communigate:communigate_pro:{service.version}"/>
1759
1841
  </fingerprint>
1760
1842
 
1761
1843
  <fingerprint pattern="^(\S+) NO UCE NO UBE NO RELAY PROBES ESMTP">