recog 2.3.10 → 2.3.15
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/SECURITY.md +35 -0
- data/bin/recog_cleanup +0 -0
- data/cpe-remap.yaml +18 -2
- data/identifiers/service_product.txt +1 -0
- data/identifiers/vendor.txt +1 -0
- data/lib/recog/version.rb +1 -1
- data/update_cpes.py +3 -0
- data/xml/dns_versionbind.xml +116 -8
- data/xml/favicons.xml +3 -2
- data/xml/ftp_banners.xml +72 -10
- data/xml/html_title.xml +28 -0
- data/xml/http_servers.xml +395 -64
- data/xml/http_wwwauth.xml +7 -7
- data/xml/imap_banners.xml +43 -0
- data/xml/pop_banners.xml +57 -2
- data/xml/smtp_banners.xml +84 -2
- data/xml/snmp_sysdescr.xml +96 -57
- data/xml/ssh_banners.xml +7 -3
- data/xml/telnet_banners.xml +146 -7
- metadata +3 -2
data/xml/http_wwwauth.xml
CHANGED
@@ -515,9 +515,9 @@
|
|
515
515
|
|
516
516
|
<fingerprint pattern="^(?:Basic|Digest) realm="NETGEAR (Orbi(?:-(?:micro|mini))?)".*$">
|
517
517
|
<description>Netgear Orbi</description>
|
518
|
-
<example hw.product="Orbi">Basic realm
|
519
|
-
<example hw.product="Orbi-micro">Basic realm
|
520
|
-
<example hw.product="Orbi-mini">Basic realm
|
518
|
+
<example hw.product="Orbi">Basic realm="NETGEAR Orbi"</example>
|
519
|
+
<example hw.product="Orbi-micro">Basic realm="NETGEAR Orbi-micro"</example>
|
520
|
+
<example hw.product="Orbi-mini">Basic realm="NETGEAR Orbi-mini"</example>
|
521
521
|
<param pos="0" name="hw.vendor" value="Netgear"/>
|
522
522
|
<param pos="0" name="hw.device" value="WAP"/>
|
523
523
|
<param pos="0" name="hw.family" value="Orbi"/>
|
@@ -526,9 +526,9 @@
|
|
526
526
|
|
527
527
|
<fingerprint pattern="(?:Basic|Digest) realm="NETGEAR ([a-zA-Z0-9\-\+]+)\s*".*$">
|
528
528
|
<description>Netgear Routers</description>
|
529
|
-
<example hw.product="DG834">Basic realm
|
530
|
-
<example hw.product="C7000v2">Basic realm
|
531
|
-
<example hw.product="R7000P">Basic realm
|
529
|
+
<example hw.product="DG834">Basic realm="NETGEAR DG834 "</example>
|
530
|
+
<example hw.product="C7000v2">Basic realm="NETGEAR C7000v2"</example>
|
531
|
+
<example hw.product="R7000P">Basic realm="NETGEAR R7000P"</example>
|
532
532
|
<param pos="0" name="hw.vendor" value="Netgear"/>
|
533
533
|
<param pos="0" name="hw.device" value="Router"/>
|
534
534
|
<param pos="1" name="hw.product"/>
|
@@ -538,7 +538,7 @@
|
|
538
538
|
|
539
539
|
<fingerprint pattern="(?:Basic|Digest) realm="Netgear".*$">
|
540
540
|
<description>Netgear Unspecified Router</description>
|
541
|
-
<example>Basic realm
|
541
|
+
<example>Basic realm="Netgear"</example>
|
542
542
|
<param pos="0" name="hw.vendor" value="Netgear"/>
|
543
543
|
<param pos="0" name="hw.device" value="Router"/>
|
544
544
|
</fingerprint>
|
data/xml/imap_banners.xml
CHANGED
@@ -113,8 +113,49 @@
|
|
113
113
|
<description>Dovecot Secure IMAP Server</description>
|
114
114
|
<example>Dovecot ready.</example>
|
115
115
|
<example>Dovecot DA ready.</example>
|
116
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
116
117
|
<param pos="0" name="service.family" value="Dovecot"/>
|
117
118
|
<param pos="0" name="service.product" value="Dovecot"/>
|
119
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
120
|
+
</fingerprint>
|
121
|
+
|
122
|
+
<fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
|
123
|
+
<description>Dovecot Secure IMAP Server - Ubuntu variant</description>
|
124
|
+
<example>Dovecot (Ubuntu) ready.</example>
|
125
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
126
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
127
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
128
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
129
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
130
|
+
<param pos="0" name="os.family" value="Linux"/>
|
131
|
+
<param pos="0" name="os.product" value="Linux"/>
|
132
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
133
|
+
</fingerprint>
|
134
|
+
|
135
|
+
<fingerprint pattern="^Dovecot \(Debian\) ready\.$">
|
136
|
+
<description>Dovecot Secure IMAP Server - Debian variant</description>
|
137
|
+
<example>Dovecot (Debian) ready.</example>
|
138
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
139
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
140
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
141
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
142
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
143
|
+
<param pos="0" name="os.family" value="Linux"/>
|
144
|
+
<param pos="0" name="os.product" value="Linux"/>
|
145
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
146
|
+
</fingerprint>
|
147
|
+
|
148
|
+
<fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
|
149
|
+
<description>Dovecot Secure IMAP Server - Raspbian variant</description>
|
150
|
+
<example>Dovecot (Raspbian) ready.</example>
|
151
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
152
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
153
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
154
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
155
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
156
|
+
<param pos="0" name="os.family" value="Linux"/>
|
157
|
+
<param pos="0" name="os.product" value="Linux"/>
|
158
|
+
<param pos="0" name="hw.product" value="Raspberry Pi"/>
|
118
159
|
</fingerprint>
|
119
160
|
|
120
161
|
<fingerprint pattern="^Courier-IMAP ready. Copyright \d+-\d+">
|
@@ -163,6 +204,7 @@
|
|
163
204
|
<param pos="0" name="service.family" value="Cyrus MTA"/>
|
164
205
|
<param pos="0" name="service.product" value="Cyrus IMAP"/>
|
165
206
|
<param pos="2" name="service.version"/>
|
207
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
|
166
208
|
<param pos="0" name="os.vendor" value="Apple"/>
|
167
209
|
<param pos="0" name="os.family" value="Mac OS X"/>
|
168
210
|
<param pos="0" name="os.product" value="Mac OS X"/>
|
@@ -179,6 +221,7 @@
|
|
179
221
|
<param pos="0" name="service.family" value="Cyrus MTA"/>
|
180
222
|
<param pos="0" name="service.product" value="Cyrus IMAP"/>
|
181
223
|
<param pos="2" name="service.version"/>
|
224
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
|
182
225
|
<param pos="1" name="host.name"/>
|
183
226
|
</fingerprint>
|
184
227
|
|
data/xml/pop_banners.xml
CHANGED
@@ -180,11 +180,55 @@
|
|
180
180
|
|
181
181
|
<fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: <.+@(.+)>)?$">
|
182
182
|
<description>Dovecot Secure POP Server</description>
|
183
|
+
<example>Dovecot ready.</example>
|
184
|
+
<example>Dovecot DA ready.</example>
|
185
|
+
<example host.name="foo.bar.baz">Dovecot ready. <fea.13865d.5f06b0a4.DuIvzQI4DAGR9MurahIGJw==@foo.bar.baz></example>
|
186
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
183
187
|
<param pos="0" name="service.family" value="Dovecot"/>
|
184
188
|
<param pos="0" name="service.product" value="Dovecot"/>
|
189
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
185
190
|
<param pos="1" name="host.name"/>
|
186
191
|
</fingerprint>
|
187
192
|
|
193
|
+
<fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
|
194
|
+
<description>Dovecot Secure POP Server - Ubuntu variant</description>
|
195
|
+
<example>Dovecot (Ubuntu) ready.</example>
|
196
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
197
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
198
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
199
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
200
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
201
|
+
<param pos="0" name="os.family" value="Linux"/>
|
202
|
+
<param pos="0" name="os.product" value="Linux"/>
|
203
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
204
|
+
</fingerprint>
|
205
|
+
|
206
|
+
<fingerprint pattern="^Dovecot \(Debian\) ready\.$">
|
207
|
+
<description>Dovecot Secure POP Server - Debian variant</description>
|
208
|
+
<example>Dovecot (Debian) ready.</example>
|
209
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
210
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
211
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
212
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
213
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
214
|
+
<param pos="0" name="os.family" value="Linux"/>
|
215
|
+
<param pos="0" name="os.product" value="Linux"/>
|
216
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
217
|
+
</fingerprint>
|
218
|
+
|
219
|
+
<fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
|
220
|
+
<description>Dovecot Secure POP Server - Raspbian variant</description>
|
221
|
+
<example>Dovecot (Raspbian) ready.</example>
|
222
|
+
<param pos="0" name="service.vendor" value="Dovecot"/>
|
223
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
224
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
225
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
|
226
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
227
|
+
<param pos="0" name="os.family" value="Linux"/>
|
228
|
+
<param pos="0" name="os.product" value="Linux"/>
|
229
|
+
<param pos="0" name="hw.product" value="Raspberry Pi"/>
|
230
|
+
</fingerprint>
|
231
|
+
|
188
232
|
<fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
|
189
233
|
<description>VMware Zimbra POP</description>
|
190
234
|
<example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
|
@@ -301,6 +345,19 @@
|
|
301
345
|
<param pos="1" name="service.version"/>
|
302
346
|
</fingerprint>
|
303
347
|
|
348
|
+
<fingerprint pattern="^Welcome to MailEnable POP3 Server$">
|
349
|
+
<description>MailEnable POP3</description>
|
350
|
+
<example>Welcome to MailEnable POP3 Server</example>
|
351
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
352
|
+
<param pos="0" name="os.family" value="Windows"/>
|
353
|
+
<param pos="0" name="os.product" value="Windows"/>
|
354
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
355
|
+
<param pos="0" name="service.vendor" value="MailEnable"/>
|
356
|
+
<param pos="0" name="service.family" value="Mail Server"/>
|
357
|
+
<param pos="0" name="service.product" value="MailEnable"/>
|
358
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:mailenable:mailenable:-"/>
|
359
|
+
</fingerprint>
|
360
|
+
|
304
361
|
<!--
|
305
362
|
; Mandrake 8.1 - uses UW IMAP
|
306
363
|
; +OK POP3 mandrake81-f540k v2000.70mdk server ready
|
@@ -330,7 +387,6 @@
|
|
330
387
|
// +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
|
331
388
|
// +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
|
332
389
|
// +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
|
333
|
-
// +OK Welcome to MailEnable POP3 Server
|
334
390
|
// +OK GroupWise POP3 server ready
|
335
391
|
// +OK POP3 AnalogX Proxy 4.14 (Release) ready.
|
336
392
|
// +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
|
@@ -471,7 +527,6 @@
|
|
471
527
|
+OK studiovisuals.com POP3 Server (Version 1.020h) ready.
|
472
528
|
+OK themeekermall.com POP3 Server (Version 1.020h) ready.
|
473
529
|
+OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
|
474
|
-
+OK Welcome to MailEnable POP3 Server
|
475
530
|
+OK X1 NT-POP3 Server 2436681011.monstercommercesites.com (IMail 7.15 560907-1)
|
476
531
|
+OK X1 NT-POP3 Server Calvin-Serv (IMail 8.22 1107-1)
|
477
532
|
+OK X1 NT-POP3 Server chealsea.com.cn (IMail 8.15 16990-1)
|
data/xml/smtp_banners.xml
CHANGED
@@ -861,6 +861,7 @@
|
|
861
861
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
862
862
|
<param pos="1" name="host.name"/>
|
863
863
|
<param pos="2" name="service.version"/>
|
864
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
|
864
865
|
<param pos="3" name="system.time"/>
|
865
866
|
</fingerprint>
|
866
867
|
|
@@ -940,11 +941,13 @@
|
|
940
941
|
|
941
942
|
<fingerprint pattern="^([^ ]+) Postfix \(Postfix-([^ ]+)-([^ ]+)\) \(([^ ]+)\) *$">
|
942
943
|
<description>Postfix - version + build, followed by os</description>
|
944
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
943
945
|
<param pos="0" name="service.family" value="Postfix"/>
|
944
946
|
<param pos="0" name="service.product" value="Postfix"/>
|
945
947
|
<param pos="1" name="host.name"/>
|
946
948
|
<param pos="2" name="service.version"/>
|
947
949
|
<param pos="3" name="service.version.version"/>
|
950
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
|
948
951
|
<param pos="4" name="postfix.os.info"/>
|
949
952
|
</fingerprint>
|
950
953
|
|
@@ -952,27 +955,33 @@
|
|
952
955
|
<description>Postfix - Std semantic versioning, w/ optional parens</description>
|
953
956
|
<example service.version="3.1.4">foo.bar ESMTP Postfix (3.1.4)</example>
|
954
957
|
<example service.version="2.7.1">foo.bar ESMTP Postfix 2.7.1</example>
|
958
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
955
959
|
<param pos="0" name="service.family" value="Postfix"/>
|
956
960
|
<param pos="0" name="service.product" value="Postfix"/>
|
957
961
|
<param pos="1" name="host.name"/>
|
958
962
|
<param pos="2" name="service.version"/>
|
963
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
|
959
964
|
</fingerprint>
|
960
965
|
|
961
966
|
<fingerprint pattern="^([^ ]+) ESMTP Postfix \((?:Postfix-)?([\d.]+)-([^ ]+)\)$">
|
962
967
|
<description>Postfix - version + build</description>
|
963
968
|
<example service.version="2.8" service.version.version="20100306">foo.bar ESMTP Postfix (2.8-20100306)</example>
|
969
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
964
970
|
<param pos="0" name="service.family" value="Postfix"/>
|
965
971
|
<param pos="0" name="service.product" value="Postfix"/>
|
966
972
|
<param pos="1" name="host.name"/>
|
967
973
|
<param pos="2" name="service.version"/>
|
968
974
|
<param pos="3" name="service.version.version"/>
|
975
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
|
969
976
|
</fingerprint>
|
970
977
|
|
971
978
|
<fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Ubuntu\)$">
|
972
979
|
<description>Postfix - Ubuntu</description>
|
973
980
|
<example>foo.bar ESMTP Postfix (Ubuntu)</example>
|
981
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
974
982
|
<param pos="0" name="service.family" value="Postfix"/>
|
975
983
|
<param pos="0" name="service.product" value="Postfix"/>
|
984
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
976
985
|
<param pos="1" name="host.name"/>
|
977
986
|
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
978
987
|
<param pos="0" name="os.family" value="Linux"/>
|
@@ -984,8 +993,10 @@
|
|
984
993
|
<description>Postfix - Ubuntu, Mail-in-a-Box package</description>
|
985
994
|
<example>foo.bar ESMTP Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
|
986
995
|
<example>foo.bar Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
|
996
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
987
997
|
<param pos="0" name="service.family" value="Postfix"/>
|
988
998
|
<param pos="0" name="service.product" value="Postfix"/>
|
999
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
989
1000
|
<param pos="1" name="host.name"/>
|
990
1001
|
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
991
1002
|
<param pos="0" name="os.family" value="Linux"/>
|
@@ -996,8 +1007,10 @@
|
|
996
1007
|
<fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Debian/GNU\)$">
|
997
1008
|
<description>Postfix - Debian</description>
|
998
1009
|
<example>foo.bar ESMTP Postfix (Debian/GNU)</example>
|
1010
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
999
1011
|
<param pos="0" name="service.family" value="Postfix"/>
|
1000
1012
|
<param pos="0" name="service.product" value="Postfix"/>
|
1013
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
1001
1014
|
<param pos="1" name="host.name"/>
|
1002
1015
|
<param pos="0" name="os.vendor" value="Debian"/>
|
1003
1016
|
<param pos="0" name="os.family" value="Linux"/>
|
@@ -1008,8 +1021,10 @@
|
|
1008
1021
|
<fingerprint pattern="^([^ ]+) ESMTP.* Postfix *\(.+\) *$">
|
1009
1022
|
<description>Postfix - generic banner with amusing comments in parentheses</description>
|
1010
1023
|
<example>foo.bar ESMTP Postfix (lol)</example>
|
1024
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
1011
1025
|
<param pos="0" name="service.family" value="Postfix"/>
|
1012
1026
|
<param pos="0" name="service.product" value="Postfix"/>
|
1027
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
1013
1028
|
<param pos="1" name="host.name"/>
|
1014
1029
|
</fingerprint>
|
1015
1030
|
|
@@ -1017,23 +1032,29 @@
|
|
1017
1032
|
<description>Postfix - generic banner</description>
|
1018
1033
|
<example>foo.bar ESMTP Postfix</example>
|
1019
1034
|
<example>foo.bar SMTP Postfix</example>
|
1035
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
1020
1036
|
<param pos="0" name="service.family" value="Postfix"/>
|
1021
1037
|
<param pos="0" name="service.product" value="Postfix"/>
|
1038
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
1022
1039
|
<param pos="1" name="host.name"/>
|
1023
1040
|
</fingerprint>
|
1024
1041
|
|
1025
1042
|
<fingerprint pattern="^ *ESMTP Postfix$">
|
1026
1043
|
<description>Postfix - banner without hostname or version</description>
|
1027
1044
|
<example>ESMTP Postfix</example>
|
1045
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
1028
1046
|
<param pos="0" name="service.family" value="Postfix"/>
|
1029
1047
|
<param pos="0" name="service.product" value="Postfix"/>
|
1048
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
1030
1049
|
</fingerprint>
|
1031
1050
|
|
1032
1051
|
<fingerprint pattern="^(?i)([^ ]+) POSTFIX$">
|
1033
1052
|
<description>Postfix - generic w/o ESMTP</description>
|
1034
1053
|
<example host.name="foo.bar">foo.bar Postfix</example>
|
1054
|
+
<param pos="0" name="service.vendor" value="Postfix"/>
|
1035
1055
|
<param pos="0" name="service.family" value="Postfix"/>
|
1036
1056
|
<param pos="0" name="service.product" value="Postfix"/>
|
1057
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
|
1037
1058
|
<param pos="1" name="host.name"/>
|
1038
1059
|
</fingerprint>
|
1039
1060
|
|
@@ -1070,13 +1091,16 @@
|
|
1070
1091
|
<fingerprint pattern="^Sendmail ESMTP ready$">
|
1071
1092
|
<description>Sendmail - short banner w/o hostname, version, platform, or date.</description>
|
1072
1093
|
<example>Sendmail ESMTP ready</example>
|
1094
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1073
1095
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1074
1096
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1097
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
|
1075
1098
|
</fingerprint>
|
1076
1099
|
|
1077
1100
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+) \(PHNE_([^ ]+)\) */ *(.+); *(.+) \(.+\)$">
|
1078
1101
|
<description>Sendmail - HP-UX with a PHNE (HP Networking patch) installed</description>
|
1079
1102
|
<example host.name="foo.bar" service.version="8.8.6" sendmail.config.version="8.7.1">foo.bar ESMTP Sendmail 8.8.6 (PHNE_14041)/8.7.1; Tue, 6 Feb 2001 10:04:32 -0300 (SAT)</example>
|
1103
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1080
1104
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1081
1105
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1082
1106
|
<param pos="0" name="os.vendor" value="HP"/>
|
@@ -1086,6 +1110,7 @@
|
|
1086
1110
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1087
1111
|
<param pos="1" name="host.name"/>
|
1088
1112
|
<param pos="2" name="service.version"/>
|
1113
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1089
1114
|
<param pos="3" name="sendmail.hpux.phne.version"/>
|
1090
1115
|
<param pos="4" name="sendmail.config.version"/>
|
1091
1116
|
<param pos="5" name="system.time"/>
|
@@ -1094,6 +1119,7 @@
|
|
1094
1119
|
<fingerprint pattern="^(\S+) ESMTP Sendmail \S+ version ([\d\.]+) - Revision \S+ HP-UX([\d\.]+).*(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w\w\w)$">
|
1095
1120
|
<description>Sendmail - HP-UX</description>
|
1096
1121
|
<example host.name="foo.bar" os.version="11.31" service.version="8.13.3">foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 1.004:: HP-UX11.31 - 03rd February,2010/8.11.1; Wed, 20 May 2015 23:35:38 GMT</example>
|
1122
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1097
1123
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1098
1124
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1099
1125
|
<param pos="0" name="os.vendor" value="HP"/>
|
@@ -1104,12 +1130,14 @@
|
|
1104
1130
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
|
1105
1131
|
<param pos="1" name="host.name"/>
|
1106
1132
|
<param pos="2" name="service.version"/>
|
1133
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1107
1134
|
<param pos="4" name="system.time"/>
|
1108
1135
|
</fingerprint>
|
1109
1136
|
|
1110
1137
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+)/UW([^ ]+) ready at *(.+) \(.+\) *$">
|
1111
1138
|
<description>Sendmail - Unixware</description>
|
1112
1139
|
<example service.version="8.8.7">foo.bar ESMTP Sendmail 8.8.7/UW7.1.0 ready at Tue, 6 Feb 2001 16:39:30 -0300 (GMT-0300)</example>
|
1140
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1113
1141
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1114
1142
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1115
1143
|
<param pos="0" name="os.vendor" value="SCO"/>
|
@@ -1118,6 +1146,7 @@
|
|
1118
1146
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1119
1147
|
<param pos="1" name="host.name"/>
|
1120
1148
|
<param pos="2" name="service.version"/>
|
1149
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1121
1150
|
<param pos="3" name="os.version"/>
|
1122
1151
|
<param pos="4" name="system.time"/>
|
1123
1152
|
</fingerprint>
|
@@ -1125,6 +1154,7 @@
|
|
1125
1154
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail AIX([^/]+)/UCB ([^;]+); (.+) \(.+\)$">
|
1126
1155
|
<description>Sendmail - AIX (UCB variant)</description>
|
1127
1156
|
<example os.version="4.2" service.version="8.7">foo.bar ESMTP Sendmail AIX4.2/UCB 8.7; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
|
1157
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1128
1158
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1129
1159
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1130
1160
|
<param pos="0" name="os.vendor" value="IBM"/>
|
@@ -1135,12 +1165,14 @@
|
|
1135
1165
|
<param pos="2" name="os.version"/>
|
1136
1166
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
|
1137
1167
|
<param pos="3" name="service.version"/>
|
1168
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1138
1169
|
<param pos="4" name="system.time"/>
|
1139
1170
|
</fingerprint>
|
1140
1171
|
|
1141
1172
|
<fingerprint pattern="^([^ ]+) Sendmail AIX([^/]+)/UCB ([^/]+)/([^ ]+) ready at (.+)$">
|
1142
1173
|
<description>Sendmail - AIX (UCB/ready at variant)</description>
|
1143
1174
|
<example>foo.bar Sendmail AIX 4.1/UCB 5.64/4.03 ready at Mon, 30 Jul 2001 00:42:21 -0500</example>
|
1175
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1144
1176
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1145
1177
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1146
1178
|
<param pos="0" name="os.vendor" value="IBM"/>
|
@@ -1151,6 +1183,7 @@
|
|
1151
1183
|
<param pos="2" name="os.version"/>
|
1152
1184
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
|
1153
1185
|
<param pos="3" name="service.version"/>
|
1186
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1154
1187
|
<param pos="4" name="sendmail.config.version"/>
|
1155
1188
|
<param pos="5" name="system.time"/>
|
1156
1189
|
</fingerprint>
|
@@ -1159,6 +1192,7 @@
|
|
1159
1192
|
<description>Sendmail - AIX</description>
|
1160
1193
|
<example host.name="foo.bar" os.version="4.2" service.version="8.7" sendmail.config.version="8.8">foo.bar ESMTP Sendmail AIX4.2/8.7/8.8; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
|
1161
1194
|
<example host.name="foo.bar" os.version="5.1" service.version="8.11.6p2" sendmail.config.version="8.11.0">foo.bar ESMTP Sendmail AIX5.1/8.11.6p2/8.11.0; Fri, 28 Aug 1970 19:42:05 -0800</example>
|
1195
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1162
1196
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1163
1197
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1164
1198
|
<param pos="0" name="os.vendor" value="IBM"/>
|
@@ -1169,6 +1203,7 @@
|
|
1169
1203
|
<param pos="2" name="os.version"/>
|
1170
1204
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
|
1171
1205
|
<param pos="3" name="service.version"/>
|
1206
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1172
1207
|
<param pos="4" name="sendmail.config.version"/>
|
1173
1208
|
<param pos="5" name="system.time"/>
|
1174
1209
|
</fingerprint>
|
@@ -1176,6 +1211,7 @@
|
|
1176
1211
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/SuSE Linux ([^;]+); (.+)$">
|
1177
1212
|
<description>Sendmail - SuSE Linux</description>
|
1178
1213
|
<example>foo.bar ESMTP Sendmail 8.9.3/8.9.3/SuSE Linux 8.9.3-0.1; Mon, 30 Jul 2001 04:48:54 +0200</example>
|
1214
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1179
1215
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1180
1216
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1181
1217
|
<param pos="0" name="os.vendor" value="SuSE"/>
|
@@ -1185,6 +1221,7 @@
|
|
1185
1221
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1186
1222
|
<param pos="1" name="host.name"/>
|
1187
1223
|
<param pos="2" name="service.version"/>
|
1224
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1188
1225
|
<param pos="3" name="sendmail.config.version"/>
|
1189
1226
|
<param pos="4" name="sendmail.vendor.version"/>
|
1190
1227
|
<param pos="5" name="system.time"/>
|
@@ -1193,6 +1230,7 @@
|
|
1193
1230
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+); (.+)$">
|
1194
1231
|
<description>Sendmail - Solaris with date (no time offeset variant)</description>
|
1195
1232
|
<example>foo.bar ESMTP Sendmail 8.9.3+Sun/8.9.1; Mon, 30 Jul 2001 02:50:22 GMT</example>
|
1233
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1196
1234
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1197
1235
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1198
1236
|
<param pos="0" name="os.vendor" value="Sun"/>
|
@@ -1202,6 +1240,7 @@
|
|
1202
1240
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
|
1203
1241
|
<param pos="1" name="host.name"/>
|
1204
1242
|
<param pos="2" name="service.version"/>
|
1243
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1205
1244
|
<param pos="3" name="sendmail.config.version"/>
|
1206
1245
|
<param pos="4" name="system.time"/>
|
1207
1246
|
</fingerprint>
|
@@ -1209,6 +1248,7 @@
|
|
1209
1248
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+) ready at (.+) \(.+\)$">
|
1210
1249
|
<description>Sendmail - Solaris with date (ready variant)</description>
|
1211
1250
|
<example>foo.bar ESMTP Sendmail 8.8.8+Sun/8.6.4 ready at Thu, 15 Nov 2000 11:40:32 -0800 (PST)</example>
|
1251
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1212
1252
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1213
1253
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1214
1254
|
<param pos="0" name="os.vendor" value="Sun"/>
|
@@ -1218,6 +1258,7 @@
|
|
1218
1258
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1219
1259
|
<param pos="1" name="host.name"/>
|
1220
1260
|
<param pos="2" name="service.version"/>
|
1261
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1221
1262
|
<param pos="3" name="sendmail.config.version"/>
|
1222
1263
|
<param pos="4" name="system.time"/>
|
1223
1264
|
</fingerprint>
|
@@ -1226,6 +1267,7 @@
|
|
1226
1267
|
<description>Sendmail - Debian</description>
|
1227
1268
|
<example service.version="8.12.0.Beta7" sendmail.config.version="8.12.0.Beta7" sendmail.vendor.version="8.12.0.Beta7-1">foo.bar ESMTP Debian Sendmail 8.12.0.Beta7/8.12.0.Beta7/Debian 8.12.0.Beta7-1; Sun, 29 Jul 2001 18:52:20 -0800</example>
|
1228
1269
|
<example service.version="8.11.0" sendmail.config.version="8.9.3" sendmail.vendor.version="8.9.3-21">foo.bar ESMTP Sendmail 8.11.0/8.9.3/Debian 8.9.3-21; Sun, 29 Jul 2001 19:51:00 -0700</example>
|
1270
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1229
1271
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1230
1272
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1231
1273
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1235,6 +1277,7 @@
|
|
1235
1277
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1236
1278
|
<param pos="1" name="host.name"/>
|
1237
1279
|
<param pos="2" name="service.version"/>
|
1280
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1238
1281
|
<param pos="3" name="sendmail.config.version"/>
|
1239
1282
|
<param pos="4" name="sendmail.vendor.version"/>
|
1240
1283
|
<param pos="5" name="system.time"/>
|
@@ -1244,6 +1287,7 @@
|
|
1244
1287
|
<description>Sendmail - Debian 7.x (wheezy)</description>
|
1245
1288
|
<example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+wheezy1; Thu, 30 Nov 2017 10:33:05 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1246
1289
|
<example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+deb7u1; Thu, 30 Nov 2017 11:00:33 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1290
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1247
1291
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1248
1292
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1249
1293
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1254,6 +1298,7 @@
|
|
1254
1298
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1255
1299
|
<param pos="1" name="host.name"/>
|
1256
1300
|
<param pos="2" name="service.version"/>
|
1301
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1257
1302
|
<param pos="3" name="sendmail.config.version"/>
|
1258
1303
|
<param pos="4" name="system.time"/>
|
1259
1304
|
</fingerprint>
|
@@ -1261,6 +1306,7 @@
|
|
1261
1306
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+deb8u\d; (.+); .*$">
|
1262
1307
|
<description>Sendmail - Debian 8.x (jessie)</description>
|
1263
1308
|
<example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-8+deb8u2; Thu, 30 Nov 2017 10:25:48 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1309
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1264
1310
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1265
1311
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1266
1312
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1271,6 +1317,7 @@
|
|
1271
1317
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1272
1318
|
<param pos="1" name="host.name"/>
|
1273
1319
|
<param pos="2" name="service.version"/>
|
1320
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1274
1321
|
<param pos="3" name="sendmail.config.version"/>
|
1275
1322
|
<param pos="4" name="system.time"/>
|
1276
1323
|
</fingerprint>
|
@@ -1278,6 +1325,7 @@
|
|
1278
1325
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+lenny\d; (.+); .*$">
|
1279
1326
|
<description>Sendmail - Debian 5.x (lenny)</description>
|
1280
1327
|
<example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-5+lenny1; Thu, 30 Nov 2017 12:29:40 +0300; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1328
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1281
1329
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1282
1330
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1283
1331
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1288,6 +1336,7 @@
|
|
1288
1336
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1289
1337
|
<param pos="1" name="host.name"/>
|
1290
1338
|
<param pos="2" name="service.version"/>
|
1339
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1291
1340
|
<param pos="3" name="sendmail.config.version"/>
|
1292
1341
|
<param pos="4" name="system.time"/>
|
1293
1342
|
</fingerprint>
|
@@ -1295,6 +1344,7 @@
|
|
1295
1344
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+etch\d; (.+); .*$">
|
1296
1345
|
<description>Sendmail - Debian 4.x (etch)</description>
|
1297
1346
|
<example service.version="8.13.8" sendmail.config.version="8.13.8">foo.bar ESMTP Sendmail 8.13.8/8.13.8/Debian-3+etch1; Thu, 30 Nov 2017 10:28:23 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1347
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1298
1348
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1299
1349
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1300
1350
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1305,6 +1355,7 @@
|
|
1305
1355
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1306
1356
|
<param pos="1" name="host.name"/>
|
1307
1357
|
<param pos="2" name="service.version"/>
|
1358
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1308
1359
|
<param pos="3" name="sendmail.config.version"/>
|
1309
1360
|
<param pos="4" name="system.time"/>
|
1310
1361
|
</fingerprint>
|
@@ -1312,6 +1363,7 @@
|
|
1312
1363
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\dsarge\d; (.+); .*$">
|
1313
1364
|
<description>Sendmail - Debian 3.1 (sarge)</description>
|
1314
1365
|
<example service.version="8.13.4">foo.bar ESMTP Sendmail 8.13.4/8.13.4/Debian-3sarge1; Thu, 30 Nov 2017 10:55:47 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1366
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1315
1367
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1316
1368
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1317
1369
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1322,6 +1374,7 @@
|
|
1322
1374
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1323
1375
|
<param pos="1" name="host.name"/>
|
1324
1376
|
<param pos="2" name="service.version"/>
|
1377
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1325
1378
|
<param pos="3" name="sendmail.config.version"/>
|
1326
1379
|
<param pos="4" name="system.time"/>
|
1327
1380
|
</fingerprint>
|
@@ -1331,6 +1384,7 @@
|
|
1331
1384
|
<example service.version="8.15.2">foo.bar ESMTP Sendmail 8.15.2/8.15.2/Debian-3; Thu, 30 Nov 2017 10:55:50 +0200; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1332
1385
|
<example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-9.4; Thu, 30 Nov 2017 10:11:54 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1333
1386
|
<example service.version="8.14.2">foo.bar ESMTP Sendmail 8.14.2/8.14.2/Debian-2build1; Thu, 30 Nov 2017 04:09:50 -0600; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1387
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1334
1388
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1335
1389
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1336
1390
|
<param pos="0" name="os.vendor" value="Debian"/>
|
@@ -1340,6 +1394,7 @@
|
|
1340
1394
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1341
1395
|
<param pos="1" name="host.name"/>
|
1342
1396
|
<param pos="2" name="service.version"/>
|
1397
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1343
1398
|
<param pos="3" name="sendmail.config.version"/>
|
1344
1399
|
<param pos="4" name="system.time"/>
|
1345
1400
|
</fingerprint>
|
@@ -1348,6 +1403,7 @@
|
|
1348
1403
|
<description>Sendmail - Ubuntu</description>
|
1349
1404
|
<example service.version="8.13.5.20060308">foo.bar ESMTP Sendmail 8.13.5.20060308/8.13.5/Debian-3ubuntu1.1; Fri, 24 Jul 2009 01:41:21 -0700; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1350
1405
|
<example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4.1ubuntu1; Thu, 30 Nov 2017 11:00:30 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
|
1406
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1351
1407
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1352
1408
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1353
1409
|
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
@@ -1357,12 +1413,14 @@
|
|
1357
1413
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1358
1414
|
<param pos="1" name="host.name"/>
|
1359
1415
|
<param pos="2" name="service.version"/>
|
1416
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1360
1417
|
<param pos="3" name="system.time"/>
|
1361
1418
|
</fingerprint>
|
1362
1419
|
|
1363
1420
|
<fingerprint pattern="^([^ ]+) (?:E?SMTP )?Sendmail SMI-([^/]+)/(SMI-SVR4) ready at (.+)$">
|
1364
1421
|
<description>Sendmail - Solaris (SMI variant)</description>
|
1365
1422
|
<example>foo.bar Sendmail SMI-8.6/SMI-SVR4 ready at Sun, 29 Jul 2001 22:58:46 -0400</example>
|
1423
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1366
1424
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1367
1425
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1368
1426
|
<param pos="0" name="os.vendor" value="Sun"/>
|
@@ -1372,6 +1430,7 @@
|
|
1372
1430
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1373
1431
|
<param pos="1" name="host.name"/>
|
1374
1432
|
<param pos="2" name="service.version"/>
|
1433
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1375
1434
|
<param pos="3" name="sendmail.config.version"/>
|
1376
1435
|
<param pos="4" name="system.time"/>
|
1377
1436
|
</fingerprint>
|
@@ -1379,6 +1438,7 @@
|
|
1379
1438
|
<fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)/(linuxconf); (.+)$">
|
1380
1439
|
<description>Sendmail - unknown platform (linuxconf variant)</description>
|
1381
1440
|
<example>foo.bar ESMTP Sendmail 8.9.3/linuxconf; Sun, 29 Jul 2001 22:48:28 -0400</example>
|
1441
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1382
1442
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1383
1443
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1384
1444
|
<param pos="0" name="os.family" value="Linux"/>
|
@@ -1386,6 +1446,7 @@
|
|
1386
1446
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1387
1447
|
<param pos="1" name="host.name"/>
|
1388
1448
|
<param pos="2" name="service.version"/>
|
1449
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1389
1450
|
<param pos="3" name="sendmail.config.version"/>
|
1390
1451
|
<param pos="4" name="system.time"/>
|
1391
1452
|
</fingerprint>
|
@@ -1417,10 +1478,12 @@
|
|
1417
1478
|
<example host.name="foo.bar" service.version="8.8.8" sendmail.config.version="8.8.9">foo.bar ESMTP blah Sendmail 8.8.8/8.8.9; Wed, 21 Nov 2001 23:39:07 +0100 (CET)</example>
|
1418
1479
|
<example host.name="foo.bar" service.version="8.10.2" sendmail.config.version="8.10.3">foo.bar ESMTP Sendmail 8.10.2/8.10.3; Mon, 10 Sep 2001 08:37:14 -0400</example>
|
1419
1480
|
<example host.name="foo.bar" service.version="8.13.8" sendmail.config.version="8.13.9">foo.bar ESMTP foo-MTA Sendmail 8.13.8/8.13.9; Mon, 18 Apr 2011 08:52:38 -0700</example>
|
1481
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1420
1482
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1421
1483
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1422
1484
|
<param pos="1" name="host.name"/>
|
1423
1485
|
<param pos="2" name="service.version"/>
|
1486
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1424
1487
|
<param pos="3" name="sendmail.config.version"/>
|
1425
1488
|
<param pos="4" name="system.time"/>
|
1426
1489
|
</fingerprint>
|
@@ -1428,10 +1491,12 @@
|
|
1428
1491
|
<fingerprint pattern="^([^ ]+) +ESMTP .*Sendmail +([^/ ]+) */ *([^/ ]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w+)\.?$">
|
1429
1492
|
<description>Sendmail - with timezone and timestamp, w/o timezone offset or OS</description>
|
1430
1493
|
<example host.name="foo.bar" service.version="8.14.4" sendmail.config.version="8.14.4" system.time="Thu, 5 Apr 2018 19:30:58 GMT">foo.bar ESMTP Sendmail 8.14.4/8.14.4; Thu, 5 Apr 2018 19:30:58 GMT</example>
|
1494
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1431
1495
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1432
1496
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
|
1433
1497
|
<param pos="1" name="host.name"/>
|
1434
1498
|
<param pos="2" name="service.version"/>
|
1499
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1435
1500
|
<param pos="3" name="sendmail.config.version"/>
|
1436
1501
|
<param pos="4" name="system.time"/>
|
1437
1502
|
</fingerprint>
|
@@ -1439,33 +1504,39 @@
|
|
1439
1504
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ ]+) ready at *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\))$">
|
1440
1505
|
<description>Sendmail - with version and date (optional timezone), w/o config version</description>
|
1441
1506
|
<example host.name="foo.bar" service.version="8.8.8" system.time="Tue, 6 Feb 2001 14:37:14 +0100">foo.bar ESMTP Sendmail 8.8.8 ready at Tue, 6 Feb 2001 14:37:14 +0100 (CET)</example>
|
1507
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1442
1508
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1443
1509
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1444
1510
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1445
1511
|
<param pos="1" name="host.name"/>
|
1446
1512
|
<param pos="2" name="service.version"/>
|
1513
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1447
1514
|
<param pos="3" name="system.time"/>
|
1448
1515
|
</fingerprint>
|
1449
1516
|
|
1450
1517
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) - \([^\)]+\)/[^ ]+;? *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
|
1451
1518
|
<description>Sendmail - revision variant 1</description>
|
1452
1519
|
<example>foo.foo.bar ESMTP Sendmail 8.11.1 - (Revision 1.010)/8.9.3; Sat, 22 Jan 2011 10:08:35 -0500 (EST)</example>
|
1520
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1453
1521
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1454
1522
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1455
1523
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1456
1524
|
<param pos="1" name="host.name"/>
|
1457
1525
|
<param pos="2" name="service.version"/>
|
1526
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1458
1527
|
<param pos="3" name="system.time"/>
|
1459
1528
|
</fingerprint>
|
1460
1529
|
|
1461
1530
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +(?:[^ ]+) +version +([^ ]+) +- +(?:[^;]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
|
1462
1531
|
<description>Sendmail - revision variant 2</description>
|
1463
1532
|
<example>foo.foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 2.007 - 8 December 2008/8.8.6; Wed, 21 Jul 2010 11:17:01 -0400 (EDT)</example>
|
1533
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1464
1534
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1465
1535
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1466
1536
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1467
1537
|
<param pos="1" name="host.name"/>
|
1468
1538
|
<param pos="2" name="service.version"/>
|
1539
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1469
1540
|
<param pos="3" name="system.time"/>
|
1470
1541
|
</fingerprint>
|
1471
1542
|
|
@@ -1480,8 +1551,10 @@
|
|
1480
1551
|
<example host.name="foo.bar">foo.bar ESMTP Sendmail ready. </example>
|
1481
1552
|
<example host.name="foo.bar">foo.bar ESMTP Sendmail</example>
|
1482
1553
|
<example host.name="foo.bar">foo.bar Sendmail ready. </example>
|
1554
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1483
1555
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1484
1556
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1557
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
|
1485
1558
|
<param pos="1" name="host.name"/>
|
1486
1559
|
<param pos="2" name="system.time"/>
|
1487
1560
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
@@ -1490,10 +1563,12 @@
|
|
1490
1563
|
<fingerprint pattern="^ESMTP Sendmail +([^/ ]+) */ *([^/ ]+); (\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)$">
|
1491
1564
|
<description>Sendmail - with version and date, w/o hostname or platform (semicolon variant)</description>
|
1492
1565
|
<example service.version="8.13.1" sendmail.config.version="8.13.1" system.time="Thu, 30 Nov 2017 01:58:22 -0700">ESMTP Sendmail 8.13.1/8.13.1; Thu, 30 Nov 2017 01:58:22 -0700</example>
|
1566
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1493
1567
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1494
1568
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1495
1569
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1496
1570
|
<param pos="1" name="service.version"/>
|
1571
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1497
1572
|
<param pos="2" name="sendmail.config.version"/>
|
1498
1573
|
<param pos="3" name="system.time"/>
|
1499
1574
|
</fingerprint>
|
@@ -1501,11 +1576,13 @@
|
|
1501
1576
|
<fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) \([^\)]+\) *(.+) \(.+\)$">
|
1502
1577
|
<description>Sendmail - unknown (date in version string variant)</description>
|
1503
1578
|
<example>mail.foo.bar ESMTP Sendmail 8.11.1 (1.1.2.11/12Jul01-1016AM) Wed, 8 Jan 2003 11:21:22 +0100 (MET)</example>
|
1579
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1504
1580
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1505
1581
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1506
1582
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
1507
1583
|
<param pos="1" name="host.name"/>
|
1508
1584
|
<param pos="2" name="service.version"/>
|
1585
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1509
1586
|
<param pos="3" name="system.time"/>
|
1510
1587
|
</fingerprint>
|
1511
1588
|
|
@@ -1513,19 +1590,23 @@
|
|
1513
1590
|
|
1514
1591
|
<fingerprint pattern="^([^ ]+) Sendmail ([^;]+); ([^;\.]+)$">
|
1515
1592
|
<description>Sendmail - unknown platform, variant 1</description>
|
1593
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1516
1594
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1517
1595
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1518
1596
|
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
|
1519
1597
|
<param pos="1" name="host.name"/>
|
1520
1598
|
<param pos="2" name="service.version"/>
|
1599
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1521
1600
|
<param pos="3" name="system.time"/>
|
1522
1601
|
</fingerprint>
|
1523
1602
|
|
1524
1603
|
<fingerprint pattern="^Sendmail ([^/]+)/([^/]+) ready on ([^ ]+)$">
|
1525
1604
|
<description>Sendmail - basic with version and date</description>
|
1605
|
+
<param pos="0" name="service.vendor" value="Sendmail"/>
|
1526
1606
|
<param pos="0" name="service.family" value="Sendmail"/>
|
1527
1607
|
<param pos="0" name="service.product" value="Sendmail"/>
|
1528
1608
|
<param pos="1" name="service.version"/>
|
1609
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
|
1529
1610
|
<param pos="2" name="sendmail.config.version"/>
|
1530
1611
|
<param pos="3" name="host.name"/>
|
1531
1612
|
</fingerprint>
|
@@ -1751,11 +1832,12 @@
|
|
1751
1832
|
<example host.name="foo.bar" service.version="5.3.1">foo.bar ESMTP CommuniGate Pro 5.3.1</example>
|
1752
1833
|
<example host.name="foo.bar" service.version="6.2c3">foo.bar ESMTP CommuniGate Pro 6.2c3</example>
|
1753
1834
|
<example host.name="foo.bar" service.version="4.3.12">foo.bar ESMTP CommuniGate Pro 4.3.12. It is you again :-(</example>
|
1754
|
-
<param pos="0" name="service.vendor" value="
|
1835
|
+
<param pos="0" name="service.vendor" value="Communigate"/>
|
1755
1836
|
<param pos="0" name="service.family" value="Pro"/>
|
1756
|
-
<param pos="0" name="service.product" value="
|
1837
|
+
<param pos="0" name="service.product" value="Communigate Pro"/>
|
1757
1838
|
<param pos="1" name="host.name"/>
|
1758
1839
|
<param pos="2" name="service.version"/>
|
1840
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:communigate:communigate_pro:{service.version}"/>
|
1759
1841
|
</fingerprint>
|
1760
1842
|
|
1761
1843
|
<fingerprint pattern="^(\S+) NO UCE NO UBE NO RELAY PROBES ESMTP">
|