recog 2.3.9 → 2.3.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. checksums.yaml +4 -4
  2. data/bin/recog_cleanup +0 -0
  3. data/cpe-remap.yaml +18 -2
  4. data/identifiers/service_product.txt +1 -0
  5. data/identifiers/vendor.txt +1 -0
  6. data/lib/recog/version.rb +1 -1
  7. data/update_cpes.py +3 -0
  8. data/xml/dns_versionbind.xml +116 -8
  9. data/xml/favicons.xml +3 -2
  10. data/xml/ftp_banners.xml +72 -10
  11. data/xml/html_title.xml +28 -0
  12. data/xml/http_servers.xml +418 -72
  13. data/xml/http_wwwauth.xml +7 -7
  14. data/xml/imap_banners.xml +43 -0
  15. data/xml/pop_banners.xml +57 -2
  16. data/xml/smtp_banners.xml +84 -2
  17. data/xml/snmp_sysdescr.xml +2 -1
  18. data/xml/ssh_banners.xml +7 -3
  19. data/xml/telnet_banners.xml +227 -7
  20. metadata +2 -2
data/xml/http_wwwauth.xml CHANGED
@@ -515,9 +515,9 @@
515
515
 
516
516
  <fingerprint pattern="^(?:Basic|Digest) realm=&quot;NETGEAR (Orbi(?:-(?:micro|mini))?)&quot;.*$">
517
517
  <description>Netgear Orbi</description>
518
- <example hw.product="Orbi">Basic realm=&quot;NETGEAR Orbi&quot;</example>
519
- <example hw.product="Orbi-micro">Basic realm=&quot;NETGEAR Orbi-micro&quot;</example>
520
- <example hw.product="Orbi-mini">Basic realm=&quot;NETGEAR Orbi-mini&quot;</example>
518
+ <example hw.product="Orbi">Basic realm="NETGEAR Orbi"</example>
519
+ <example hw.product="Orbi-micro">Basic realm="NETGEAR Orbi-micro"</example>
520
+ <example hw.product="Orbi-mini">Basic realm="NETGEAR Orbi-mini"</example>
521
521
  <param pos="0" name="hw.vendor" value="Netgear"/>
522
522
  <param pos="0" name="hw.device" value="WAP"/>
523
523
  <param pos="0" name="hw.family" value="Orbi"/>
@@ -526,9 +526,9 @@
526
526
 
527
527
  <fingerprint pattern="(?:Basic|Digest) realm=&quot;NETGEAR ([a-zA-Z0-9\-\+]+)\s*&quot;.*$">
528
528
  <description>Netgear Routers</description>
529
- <example hw.product="DG834">Basic realm=&quot;NETGEAR DG834 &quot;</example>
530
- <example hw.product="C7000v2">Basic realm=&quot;NETGEAR C7000v2&quot;</example>
531
- <example hw.product="R7000P">Basic realm=&quot;NETGEAR R7000P&quot;</example>
529
+ <example hw.product="DG834">Basic realm="NETGEAR DG834 "</example>
530
+ <example hw.product="C7000v2">Basic realm="NETGEAR C7000v2"</example>
531
+ <example hw.product="R7000P">Basic realm="NETGEAR R7000P"</example>
532
532
  <param pos="0" name="hw.vendor" value="Netgear"/>
533
533
  <param pos="0" name="hw.device" value="Router"/>
534
534
  <param pos="1" name="hw.product"/>
@@ -538,7 +538,7 @@
538
538
 
539
539
  <fingerprint pattern="(?:Basic|Digest) realm=&quot;Netgear&quot;.*$">
540
540
  <description>Netgear Unspecified Router</description>
541
- <example>Basic realm=&quot;Netgear&quot;</example>
541
+ <example>Basic realm="Netgear"</example>
542
542
  <param pos="0" name="hw.vendor" value="Netgear"/>
543
543
  <param pos="0" name="hw.device" value="Router"/>
544
544
  </fingerprint>
data/xml/imap_banners.xml CHANGED
@@ -113,8 +113,49 @@
113
113
  <description>Dovecot Secure IMAP Server</description>
114
114
  <example>Dovecot ready.</example>
115
115
  <example>Dovecot DA ready.</example>
116
+ <param pos="0" name="service.vendor" value="Dovecot"/>
116
117
  <param pos="0" name="service.family" value="Dovecot"/>
117
118
  <param pos="0" name="service.product" value="Dovecot"/>
119
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
120
+ </fingerprint>
121
+
122
+ <fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
123
+ <description>Dovecot Secure IMAP Server - Ubuntu variant</description>
124
+ <example>Dovecot (Ubuntu) ready.</example>
125
+ <param pos="0" name="service.vendor" value="Dovecot"/>
126
+ <param pos="0" name="service.family" value="Dovecot"/>
127
+ <param pos="0" name="service.product" value="Dovecot"/>
128
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
129
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
130
+ <param pos="0" name="os.family" value="Linux"/>
131
+ <param pos="0" name="os.product" value="Linux"/>
132
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
133
+ </fingerprint>
134
+
135
+ <fingerprint pattern="^Dovecot \(Debian\) ready\.$">
136
+ <description>Dovecot Secure IMAP Server - Debian variant</description>
137
+ <example>Dovecot (Debian) ready.</example>
138
+ <param pos="0" name="service.vendor" value="Dovecot"/>
139
+ <param pos="0" name="service.family" value="Dovecot"/>
140
+ <param pos="0" name="service.product" value="Dovecot"/>
141
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
142
+ <param pos="0" name="os.vendor" value="Debian"/>
143
+ <param pos="0" name="os.family" value="Linux"/>
144
+ <param pos="0" name="os.product" value="Linux"/>
145
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
146
+ </fingerprint>
147
+
148
+ <fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
149
+ <description>Dovecot Secure IMAP Server - Raspbian variant</description>
150
+ <example>Dovecot (Raspbian) ready.</example>
151
+ <param pos="0" name="service.vendor" value="Dovecot"/>
152
+ <param pos="0" name="service.family" value="Dovecot"/>
153
+ <param pos="0" name="service.product" value="Dovecot"/>
154
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
155
+ <param pos="0" name="os.vendor" value="Raspbian"/>
156
+ <param pos="0" name="os.family" value="Linux"/>
157
+ <param pos="0" name="os.product" value="Linux"/>
158
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
118
159
  </fingerprint>
119
160
 
120
161
  <fingerprint pattern="^Courier-IMAP ready. Copyright \d+-\d+">
@@ -163,6 +204,7 @@
163
204
  <param pos="0" name="service.family" value="Cyrus MTA"/>
164
205
  <param pos="0" name="service.product" value="Cyrus IMAP"/>
165
206
  <param pos="2" name="service.version"/>
207
+ <param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
166
208
  <param pos="0" name="os.vendor" value="Apple"/>
167
209
  <param pos="0" name="os.family" value="Mac OS X"/>
168
210
  <param pos="0" name="os.product" value="Mac OS X"/>
@@ -179,6 +221,7 @@
179
221
  <param pos="0" name="service.family" value="Cyrus MTA"/>
180
222
  <param pos="0" name="service.product" value="Cyrus IMAP"/>
181
223
  <param pos="2" name="service.version"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:cmu:cyrus_imap_server:{service.version}"/>
182
225
  <param pos="1" name="host.name"/>
183
226
  </fingerprint>
184
227
 
data/xml/pop_banners.xml CHANGED
@@ -180,11 +180,55 @@
180
180
 
181
181
  <fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: &lt;.+@(.+)&gt;)?$">
182
182
  <description>Dovecot Secure POP Server</description>
183
+ <example>Dovecot ready.</example>
184
+ <example>Dovecot DA ready.</example>
185
+ <example host.name="foo.bar.baz">Dovecot ready. &lt;fea.13865d.5f06b0a4.DuIvzQI4DAGR9MurahIGJw==@foo.bar.baz&gt;</example>
186
+ <param pos="0" name="service.vendor" value="Dovecot"/>
183
187
  <param pos="0" name="service.family" value="Dovecot"/>
184
188
  <param pos="0" name="service.product" value="Dovecot"/>
189
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
185
190
  <param pos="1" name="host.name"/>
186
191
  </fingerprint>
187
192
 
193
+ <fingerprint pattern="^Dovecot \(Ubuntu\) ready\.$">
194
+ <description>Dovecot Secure POP Server - Ubuntu variant</description>
195
+ <example>Dovecot (Ubuntu) ready.</example>
196
+ <param pos="0" name="service.vendor" value="Dovecot"/>
197
+ <param pos="0" name="service.family" value="Dovecot"/>
198
+ <param pos="0" name="service.product" value="Dovecot"/>
199
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
200
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
201
+ <param pos="0" name="os.family" value="Linux"/>
202
+ <param pos="0" name="os.product" value="Linux"/>
203
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
204
+ </fingerprint>
205
+
206
+ <fingerprint pattern="^Dovecot \(Debian\) ready\.$">
207
+ <description>Dovecot Secure POP Server - Debian variant</description>
208
+ <example>Dovecot (Debian) ready.</example>
209
+ <param pos="0" name="service.vendor" value="Dovecot"/>
210
+ <param pos="0" name="service.family" value="Dovecot"/>
211
+ <param pos="0" name="service.product" value="Dovecot"/>
212
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
213
+ <param pos="0" name="os.vendor" value="Debian"/>
214
+ <param pos="0" name="os.family" value="Linux"/>
215
+ <param pos="0" name="os.product" value="Linux"/>
216
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
217
+ </fingerprint>
218
+
219
+ <fingerprint pattern="^Dovecot \(Raspbian\) ready\.$">
220
+ <description>Dovecot Secure POP Server - Raspbian variant</description>
221
+ <example>Dovecot (Raspbian) ready.</example>
222
+ <param pos="0" name="service.vendor" value="Dovecot"/>
223
+ <param pos="0" name="service.family" value="Dovecot"/>
224
+ <param pos="0" name="service.product" value="Dovecot"/>
225
+ <param pos="0" name="service.cpe23" value="cpe:/a:dovecot:dovecot:-"/>
226
+ <param pos="0" name="os.vendor" value="Raspbian"/>
227
+ <param pos="0" name="os.family" value="Linux"/>
228
+ <param pos="0" name="os.product" value="Linux"/>
229
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
230
+ </fingerprint>
231
+
188
232
  <fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
189
233
  <description>VMware Zimbra POP</description>
190
234
  <example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
@@ -301,6 +345,19 @@
301
345
  <param pos="1" name="service.version"/>
302
346
  </fingerprint>
303
347
 
348
+ <fingerprint pattern="^Welcome to MailEnable POP3 Server$">
349
+ <description>MailEnable POP3</description>
350
+ <example>Welcome to MailEnable POP3 Server</example>
351
+ <param pos="0" name="os.vendor" value="Microsoft"/>
352
+ <param pos="0" name="os.family" value="Windows"/>
353
+ <param pos="0" name="os.product" value="Windows"/>
354
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
355
+ <param pos="0" name="service.vendor" value="MailEnable"/>
356
+ <param pos="0" name="service.family" value="Mail Server"/>
357
+ <param pos="0" name="service.product" value="MailEnable"/>
358
+ <param pos="0" name="service.cpe23" value="cpe:/a:mailenable:mailenable:-"/>
359
+ </fingerprint>
360
+
304
361
  <!--
305
362
  ; Mandrake 8.1 - uses UW IMAP
306
363
  ; +OK POP3 mandrake81-f540k v2000.70mdk server ready
@@ -330,7 +387,6 @@
330
387
  // +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
331
388
  // +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
332
389
  // +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
333
- // +OK Welcome to MailEnable POP3 Server
334
390
  // +OK GroupWise POP3 server ready
335
391
  // +OK POP3 AnalogX Proxy 4.14 (Release) ready.
336
392
  // +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
@@ -471,7 +527,6 @@
471
527
  +OK studiovisuals.com POP3 Server (Version 1.020h) ready.
472
528
  +OK themeekermall.com POP3 Server (Version 1.020h) ready.
473
529
  +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
474
- +OK Welcome to MailEnable POP3 Server
475
530
  +OK X1 NT-POP3 Server 2436681011.monstercommercesites.com (IMail 7.15 560907-1)
476
531
  +OK X1 NT-POP3 Server Calvin-Serv (IMail 8.22 1107-1)
477
532
  +OK X1 NT-POP3 Server chealsea.com.cn (IMail 8.15 16990-1)
data/xml/smtp_banners.xml CHANGED
@@ -861,6 +861,7 @@
861
861
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
862
862
  <param pos="1" name="host.name"/>
863
863
  <param pos="2" name="service.version"/>
864
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
864
865
  <param pos="3" name="system.time"/>
865
866
  </fingerprint>
866
867
 
@@ -940,11 +941,13 @@
940
941
 
941
942
  <fingerprint pattern="^([^ ]+) Postfix \(Postfix-([^ ]+)-([^ ]+)\) \(([^ ]+)\) *$">
942
943
  <description>Postfix - version + build, followed by os</description>
944
+ <param pos="0" name="service.vendor" value="Postfix"/>
943
945
  <param pos="0" name="service.family" value="Postfix"/>
944
946
  <param pos="0" name="service.product" value="Postfix"/>
945
947
  <param pos="1" name="host.name"/>
946
948
  <param pos="2" name="service.version"/>
947
949
  <param pos="3" name="service.version.version"/>
950
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
948
951
  <param pos="4" name="postfix.os.info"/>
949
952
  </fingerprint>
950
953
 
@@ -952,27 +955,33 @@
952
955
  <description>Postfix - Std semantic versioning, w/ optional parens</description>
953
956
  <example service.version="3.1.4">foo.bar ESMTP Postfix (3.1.4)</example>
954
957
  <example service.version="2.7.1">foo.bar ESMTP Postfix 2.7.1</example>
958
+ <param pos="0" name="service.vendor" value="Postfix"/>
955
959
  <param pos="0" name="service.family" value="Postfix"/>
956
960
  <param pos="0" name="service.product" value="Postfix"/>
957
961
  <param pos="1" name="host.name"/>
958
962
  <param pos="2" name="service.version"/>
963
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
959
964
  </fingerprint>
960
965
 
961
966
  <fingerprint pattern="^([^ ]+) ESMTP Postfix \((?:Postfix-)?([\d.]+)-([^ ]+)\)$">
962
967
  <description>Postfix - version + build</description>
963
968
  <example service.version="2.8" service.version.version="20100306">foo.bar ESMTP Postfix (2.8-20100306)</example>
969
+ <param pos="0" name="service.vendor" value="Postfix"/>
964
970
  <param pos="0" name="service.family" value="Postfix"/>
965
971
  <param pos="0" name="service.product" value="Postfix"/>
966
972
  <param pos="1" name="host.name"/>
967
973
  <param pos="2" name="service.version"/>
968
974
  <param pos="3" name="service.version.version"/>
975
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:{service.version}"/>
969
976
  </fingerprint>
970
977
 
971
978
  <fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Ubuntu\)$">
972
979
  <description>Postfix - Ubuntu</description>
973
980
  <example>foo.bar ESMTP Postfix (Ubuntu)</example>
981
+ <param pos="0" name="service.vendor" value="Postfix"/>
974
982
  <param pos="0" name="service.family" value="Postfix"/>
975
983
  <param pos="0" name="service.product" value="Postfix"/>
984
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
976
985
  <param pos="1" name="host.name"/>
977
986
  <param pos="0" name="os.vendor" value="Ubuntu"/>
978
987
  <param pos="0" name="os.family" value="Linux"/>
@@ -984,8 +993,10 @@
984
993
  <description>Postfix - Ubuntu, Mail-in-a-Box package</description>
985
994
  <example>foo.bar ESMTP Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
986
995
  <example>foo.bar Hi, I'm a Mail-in-a-Box (Ubuntu/Postfix; see https://mailinabox.email/)</example>
996
+ <param pos="0" name="service.vendor" value="Postfix"/>
987
997
  <param pos="0" name="service.family" value="Postfix"/>
988
998
  <param pos="0" name="service.product" value="Postfix"/>
999
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
989
1000
  <param pos="1" name="host.name"/>
990
1001
  <param pos="0" name="os.vendor" value="Ubuntu"/>
991
1002
  <param pos="0" name="os.family" value="Linux"/>
@@ -996,8 +1007,10 @@
996
1007
  <fingerprint pattern="^([^ ]+) +E?SMTP Postfix \(Debian/GNU\)$">
997
1008
  <description>Postfix - Debian</description>
998
1009
  <example>foo.bar ESMTP Postfix (Debian/GNU)</example>
1010
+ <param pos="0" name="service.vendor" value="Postfix"/>
999
1011
  <param pos="0" name="service.family" value="Postfix"/>
1000
1012
  <param pos="0" name="service.product" value="Postfix"/>
1013
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1001
1014
  <param pos="1" name="host.name"/>
1002
1015
  <param pos="0" name="os.vendor" value="Debian"/>
1003
1016
  <param pos="0" name="os.family" value="Linux"/>
@@ -1008,8 +1021,10 @@
1008
1021
  <fingerprint pattern="^([^ ]+) ESMTP.* Postfix *\(.+\) *$">
1009
1022
  <description>Postfix - generic banner with amusing comments in parentheses</description>
1010
1023
  <example>foo.bar ESMTP Postfix (lol)</example>
1024
+ <param pos="0" name="service.vendor" value="Postfix"/>
1011
1025
  <param pos="0" name="service.family" value="Postfix"/>
1012
1026
  <param pos="0" name="service.product" value="Postfix"/>
1027
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1013
1028
  <param pos="1" name="host.name"/>
1014
1029
  </fingerprint>
1015
1030
 
@@ -1017,23 +1032,29 @@
1017
1032
  <description>Postfix - generic banner</description>
1018
1033
  <example>foo.bar ESMTP Postfix</example>
1019
1034
  <example>foo.bar SMTP Postfix</example>
1035
+ <param pos="0" name="service.vendor" value="Postfix"/>
1020
1036
  <param pos="0" name="service.family" value="Postfix"/>
1021
1037
  <param pos="0" name="service.product" value="Postfix"/>
1038
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1022
1039
  <param pos="1" name="host.name"/>
1023
1040
  </fingerprint>
1024
1041
 
1025
1042
  <fingerprint pattern="^ *ESMTP Postfix$">
1026
1043
  <description>Postfix - banner without hostname or version</description>
1027
1044
  <example>ESMTP Postfix</example>
1045
+ <param pos="0" name="service.vendor" value="Postfix"/>
1028
1046
  <param pos="0" name="service.family" value="Postfix"/>
1029
1047
  <param pos="0" name="service.product" value="Postfix"/>
1048
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1030
1049
  </fingerprint>
1031
1050
 
1032
1051
  <fingerprint pattern="^(?i)([^ ]+) POSTFIX$">
1033
1052
  <description>Postfix - generic w/o ESMTP</description>
1034
1053
  <example host.name="foo.bar">foo.bar Postfix</example>
1054
+ <param pos="0" name="service.vendor" value="Postfix"/>
1035
1055
  <param pos="0" name="service.family" value="Postfix"/>
1036
1056
  <param pos="0" name="service.product" value="Postfix"/>
1057
+ <param pos="0" name="service.cpe23" value="cpe:/a:postfix:postfix:-"/>
1037
1058
  <param pos="1" name="host.name"/>
1038
1059
  </fingerprint>
1039
1060
 
@@ -1070,13 +1091,16 @@
1070
1091
  <fingerprint pattern="^Sendmail ESMTP ready$">
1071
1092
  <description>Sendmail - short banner w/o hostname, version, platform, or date.</description>
1072
1093
  <example>Sendmail ESMTP ready</example>
1094
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1073
1095
  <param pos="0" name="service.family" value="Sendmail"/>
1074
1096
  <param pos="0" name="service.product" value="Sendmail"/>
1097
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
1075
1098
  </fingerprint>
1076
1099
 
1077
1100
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+) \(PHNE_([^ ]+)\) */ *(.+); *(.+) \(.+\)$">
1078
1101
  <description>Sendmail - HP-UX with a PHNE (HP Networking patch) installed</description>
1079
1102
  <example host.name="foo.bar" service.version="8.8.6" sendmail.config.version="8.7.1">foo.bar ESMTP Sendmail 8.8.6 (PHNE_14041)/8.7.1; Tue, 6 Feb 2001 10:04:32 -0300 (SAT)</example>
1103
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1080
1104
  <param pos="0" name="service.family" value="Sendmail"/>
1081
1105
  <param pos="0" name="service.product" value="Sendmail"/>
1082
1106
  <param pos="0" name="os.vendor" value="HP"/>
@@ -1086,6 +1110,7 @@
1086
1110
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1087
1111
  <param pos="1" name="host.name"/>
1088
1112
  <param pos="2" name="service.version"/>
1113
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1089
1114
  <param pos="3" name="sendmail.hpux.phne.version"/>
1090
1115
  <param pos="4" name="sendmail.config.version"/>
1091
1116
  <param pos="5" name="system.time"/>
@@ -1094,6 +1119,7 @@
1094
1119
  <fingerprint pattern="^(\S+) ESMTP Sendmail \S+ version ([\d\.]+) - Revision \S+ HP-UX([\d\.]+).*(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w\w\w)$">
1095
1120
  <description>Sendmail - HP-UX</description>
1096
1121
  <example host.name="foo.bar" os.version="11.31" service.version="8.13.3">foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 1.004:: HP-UX11.31 - 03rd February,2010/8.11.1; Wed, 20 May 2015 23:35:38 GMT</example>
1122
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1097
1123
  <param pos="0" name="service.family" value="Sendmail"/>
1098
1124
  <param pos="0" name="service.product" value="Sendmail"/>
1099
1125
  <param pos="0" name="os.vendor" value="HP"/>
@@ -1104,12 +1130,14 @@
1104
1130
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
1105
1131
  <param pos="1" name="host.name"/>
1106
1132
  <param pos="2" name="service.version"/>
1133
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1107
1134
  <param pos="4" name="system.time"/>
1108
1135
  </fingerprint>
1109
1136
 
1110
1137
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +([^ ]+)/UW([^ ]+) ready at *(.+) \(.+\) *$">
1111
1138
  <description>Sendmail - Unixware</description>
1112
1139
  <example service.version="8.8.7">foo.bar ESMTP Sendmail 8.8.7/UW7.1.0 ready at Tue, 6 Feb 2001 16:39:30 -0300 (GMT-0300)</example>
1140
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1113
1141
  <param pos="0" name="service.family" value="Sendmail"/>
1114
1142
  <param pos="0" name="service.product" value="Sendmail"/>
1115
1143
  <param pos="0" name="os.vendor" value="SCO"/>
@@ -1118,6 +1146,7 @@
1118
1146
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1119
1147
  <param pos="1" name="host.name"/>
1120
1148
  <param pos="2" name="service.version"/>
1149
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1121
1150
  <param pos="3" name="os.version"/>
1122
1151
  <param pos="4" name="system.time"/>
1123
1152
  </fingerprint>
@@ -1125,6 +1154,7 @@
1125
1154
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail AIX([^/]+)/UCB ([^;]+); (.+) \(.+\)$">
1126
1155
  <description>Sendmail - AIX (UCB variant)</description>
1127
1156
  <example os.version="4.2" service.version="8.7">foo.bar ESMTP Sendmail AIX4.2/UCB 8.7; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
1157
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1128
1158
  <param pos="0" name="service.family" value="Sendmail"/>
1129
1159
  <param pos="0" name="service.product" value="Sendmail"/>
1130
1160
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1135,12 +1165,14 @@
1135
1165
  <param pos="2" name="os.version"/>
1136
1166
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1137
1167
  <param pos="3" name="service.version"/>
1168
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1138
1169
  <param pos="4" name="system.time"/>
1139
1170
  </fingerprint>
1140
1171
 
1141
1172
  <fingerprint pattern="^([^ ]+) Sendmail AIX([^/]+)/UCB ([^/]+)/([^ ]+) ready at (.+)$">
1142
1173
  <description>Sendmail - AIX (UCB/ready at variant)</description>
1143
1174
  <example>foo.bar Sendmail AIX 4.1/UCB 5.64/4.03 ready at Mon, 30 Jul 2001 00:42:21 -0500</example>
1175
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1144
1176
  <param pos="0" name="service.family" value="Sendmail"/>
1145
1177
  <param pos="0" name="service.product" value="Sendmail"/>
1146
1178
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1151,6 +1183,7 @@
1151
1183
  <param pos="2" name="os.version"/>
1152
1184
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1153
1185
  <param pos="3" name="service.version"/>
1186
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1154
1187
  <param pos="4" name="sendmail.config.version"/>
1155
1188
  <param pos="5" name="system.time"/>
1156
1189
  </fingerprint>
@@ -1159,6 +1192,7 @@
1159
1192
  <description>Sendmail - AIX</description>
1160
1193
  <example host.name="foo.bar" os.version="4.2" service.version="8.7" sendmail.config.version="8.8">foo.bar ESMTP Sendmail AIX4.2/8.7/8.8; Sun, 29 Jul 2001 22:34:37 -0400 (EDT)</example>
1161
1194
  <example host.name="foo.bar" os.version="5.1" service.version="8.11.6p2" sendmail.config.version="8.11.0">foo.bar ESMTP Sendmail AIX5.1/8.11.6p2/8.11.0; Fri, 28 Aug 1970 19:42:05 -0800</example>
1195
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1162
1196
  <param pos="0" name="service.family" value="Sendmail"/>
1163
1197
  <param pos="0" name="service.product" value="Sendmail"/>
1164
1198
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -1169,6 +1203,7 @@
1169
1203
  <param pos="2" name="os.version"/>
1170
1204
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:{os.version}"/>
1171
1205
  <param pos="3" name="service.version"/>
1206
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1172
1207
  <param pos="4" name="sendmail.config.version"/>
1173
1208
  <param pos="5" name="system.time"/>
1174
1209
  </fingerprint>
@@ -1176,6 +1211,7 @@
1176
1211
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/SuSE Linux ([^;]+); (.+)$">
1177
1212
  <description>Sendmail - SuSE Linux</description>
1178
1213
  <example>foo.bar ESMTP Sendmail 8.9.3/8.9.3/SuSE Linux 8.9.3-0.1; Mon, 30 Jul 2001 04:48:54 +0200</example>
1214
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1179
1215
  <param pos="0" name="service.family" value="Sendmail"/>
1180
1216
  <param pos="0" name="service.product" value="Sendmail"/>
1181
1217
  <param pos="0" name="os.vendor" value="SuSE"/>
@@ -1185,6 +1221,7 @@
1185
1221
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1186
1222
  <param pos="1" name="host.name"/>
1187
1223
  <param pos="2" name="service.version"/>
1224
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1188
1225
  <param pos="3" name="sendmail.config.version"/>
1189
1226
  <param pos="4" name="sendmail.vendor.version"/>
1190
1227
  <param pos="5" name="system.time"/>
@@ -1193,6 +1230,7 @@
1193
1230
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+); (.+)$">
1194
1231
  <description>Sendmail - Solaris with date (no time offeset variant)</description>
1195
1232
  <example>foo.bar ESMTP Sendmail 8.9.3+Sun/8.9.1; Mon, 30 Jul 2001 02:50:22 GMT</example>
1233
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1196
1234
  <param pos="0" name="service.family" value="Sendmail"/>
1197
1235
  <param pos="0" name="service.product" value="Sendmail"/>
1198
1236
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1202,6 +1240,7 @@
1202
1240
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
1203
1241
  <param pos="1" name="host.name"/>
1204
1242
  <param pos="2" name="service.version"/>
1243
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1205
1244
  <param pos="3" name="sendmail.config.version"/>
1206
1245
  <param pos="4" name="system.time"/>
1207
1246
  </fingerprint>
@@ -1209,6 +1248,7 @@
1209
1248
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)\+Sun/([^ ]+) ready at (.+) \(.+\)$">
1210
1249
  <description>Sendmail - Solaris with date (ready variant)</description>
1211
1250
  <example>foo.bar ESMTP Sendmail 8.8.8+Sun/8.6.4 ready at Thu, 15 Nov 2000 11:40:32 -0800 (PST)</example>
1251
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1212
1252
  <param pos="0" name="service.family" value="Sendmail"/>
1213
1253
  <param pos="0" name="service.product" value="Sendmail"/>
1214
1254
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1218,6 +1258,7 @@
1218
1258
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1219
1259
  <param pos="1" name="host.name"/>
1220
1260
  <param pos="2" name="service.version"/>
1261
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1221
1262
  <param pos="3" name="sendmail.config.version"/>
1222
1263
  <param pos="4" name="system.time"/>
1223
1264
  </fingerprint>
@@ -1226,6 +1267,7 @@
1226
1267
  <description>Sendmail - Debian</description>
1227
1268
  <example service.version="8.12.0.Beta7" sendmail.config.version="8.12.0.Beta7" sendmail.vendor.version="8.12.0.Beta7-1">foo.bar ESMTP Debian Sendmail 8.12.0.Beta7/8.12.0.Beta7/Debian 8.12.0.Beta7-1; Sun, 29 Jul 2001 18:52:20 -0800</example>
1228
1269
  <example service.version="8.11.0" sendmail.config.version="8.9.3" sendmail.vendor.version="8.9.3-21">foo.bar ESMTP Sendmail 8.11.0/8.9.3/Debian 8.9.3-21; Sun, 29 Jul 2001 19:51:00 -0700</example>
1270
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1229
1271
  <param pos="0" name="service.family" value="Sendmail"/>
1230
1272
  <param pos="0" name="service.product" value="Sendmail"/>
1231
1273
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1235,6 +1277,7 @@
1235
1277
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1236
1278
  <param pos="1" name="host.name"/>
1237
1279
  <param pos="2" name="service.version"/>
1280
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1238
1281
  <param pos="3" name="sendmail.config.version"/>
1239
1282
  <param pos="4" name="sendmail.vendor.version"/>
1240
1283
  <param pos="5" name="system.time"/>
@@ -1244,6 +1287,7 @@
1244
1287
  <description>Sendmail - Debian 7.x (wheezy)</description>
1245
1288
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+wheezy1; Thu, 30 Nov 2017 10:33:05 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1246
1289
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4+deb7u1; Thu, 30 Nov 2017 11:00:33 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1290
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1247
1291
  <param pos="0" name="service.family" value="Sendmail"/>
1248
1292
  <param pos="0" name="service.product" value="Sendmail"/>
1249
1293
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1254,6 +1298,7 @@
1254
1298
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1255
1299
  <param pos="1" name="host.name"/>
1256
1300
  <param pos="2" name="service.version"/>
1301
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1257
1302
  <param pos="3" name="sendmail.config.version"/>
1258
1303
  <param pos="4" name="system.time"/>
1259
1304
  </fingerprint>
@@ -1261,6 +1306,7 @@
1261
1306
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+deb8u\d; (.+); .*$">
1262
1307
  <description>Sendmail - Debian 8.x (jessie)</description>
1263
1308
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-8+deb8u2; Thu, 30 Nov 2017 10:25:48 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1309
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1264
1310
  <param pos="0" name="service.family" value="Sendmail"/>
1265
1311
  <param pos="0" name="service.product" value="Sendmail"/>
1266
1312
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1271,6 +1317,7 @@
1271
1317
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1272
1318
  <param pos="1" name="host.name"/>
1273
1319
  <param pos="2" name="service.version"/>
1320
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1274
1321
  <param pos="3" name="sendmail.config.version"/>
1275
1322
  <param pos="4" name="system.time"/>
1276
1323
  </fingerprint>
@@ -1278,6 +1325,7 @@
1278
1325
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+lenny\d; (.+); .*$">
1279
1326
  <description>Sendmail - Debian 5.x (lenny)</description>
1280
1327
  <example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-5+lenny1; Thu, 30 Nov 2017 12:29:40 +0300; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1328
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1281
1329
  <param pos="0" name="service.family" value="Sendmail"/>
1282
1330
  <param pos="0" name="service.product" value="Sendmail"/>
1283
1331
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1288,6 +1336,7 @@
1288
1336
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1289
1337
  <param pos="1" name="host.name"/>
1290
1338
  <param pos="2" name="service.version"/>
1339
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1291
1340
  <param pos="3" name="sendmail.config.version"/>
1292
1341
  <param pos="4" name="system.time"/>
1293
1342
  </fingerprint>
@@ -1295,6 +1344,7 @@
1295
1344
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+etch\d; (.+); .*$">
1296
1345
  <description>Sendmail - Debian 4.x (etch)</description>
1297
1346
  <example service.version="8.13.8" sendmail.config.version="8.13.8">foo.bar ESMTP Sendmail 8.13.8/8.13.8/Debian-3+etch1; Thu, 30 Nov 2017 10:28:23 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1347
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1298
1348
  <param pos="0" name="service.family" value="Sendmail"/>
1299
1349
  <param pos="0" name="service.product" value="Sendmail"/>
1300
1350
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1305,6 +1355,7 @@
1305
1355
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1306
1356
  <param pos="1" name="host.name"/>
1307
1357
  <param pos="2" name="service.version"/>
1358
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1308
1359
  <param pos="3" name="sendmail.config.version"/>
1309
1360
  <param pos="4" name="system.time"/>
1310
1361
  </fingerprint>
@@ -1312,6 +1363,7 @@
1312
1363
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\dsarge\d; (.+); .*$">
1313
1364
  <description>Sendmail - Debian 3.1 (sarge)</description>
1314
1365
  <example service.version="8.13.4">foo.bar ESMTP Sendmail 8.13.4/8.13.4/Debian-3sarge1; Thu, 30 Nov 2017 10:55:47 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1366
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1315
1367
  <param pos="0" name="service.family" value="Sendmail"/>
1316
1368
  <param pos="0" name="service.product" value="Sendmail"/>
1317
1369
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1322,6 +1374,7 @@
1322
1374
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1323
1375
  <param pos="1" name="host.name"/>
1324
1376
  <param pos="2" name="service.version"/>
1377
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1325
1378
  <param pos="3" name="sendmail.config.version"/>
1326
1379
  <param pos="4" name="system.time"/>
1327
1380
  </fingerprint>
@@ -1331,6 +1384,7 @@
1331
1384
  <example service.version="8.15.2">foo.bar ESMTP Sendmail 8.15.2/8.15.2/Debian-3; Thu, 30 Nov 2017 10:55:50 +0200; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1332
1385
  <example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-9.4; Thu, 30 Nov 2017 10:11:54 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1333
1386
  <example service.version="8.14.2">foo.bar ESMTP Sendmail 8.14.2/8.14.2/Debian-2build1; Thu, 30 Nov 2017 04:09:50 -0600; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1387
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1334
1388
  <param pos="0" name="service.family" value="Sendmail"/>
1335
1389
  <param pos="0" name="service.product" value="Sendmail"/>
1336
1390
  <param pos="0" name="os.vendor" value="Debian"/>
@@ -1340,6 +1394,7 @@
1340
1394
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1341
1395
  <param pos="1" name="host.name"/>
1342
1396
  <param pos="2" name="service.version"/>
1397
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1343
1398
  <param pos="3" name="sendmail.config.version"/>
1344
1399
  <param pos="4" name="system.time"/>
1345
1400
  </fingerprint>
@@ -1348,6 +1403,7 @@
1348
1403
  <description>Sendmail - Ubuntu</description>
1349
1404
  <example service.version="8.13.5.20060308">foo.bar ESMTP Sendmail 8.13.5.20060308/8.13.5/Debian-3ubuntu1.1; Fri, 24 Jul 2009 01:41:21 -0700; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1350
1405
  <example service.version="8.14.4">foo.bar ESMTP Sendmail 8.14.4/8.14.4/Debian-4.1ubuntu1; Thu, 30 Nov 2017 11:00:30 +0100; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1406
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1351
1407
  <param pos="0" name="service.family" value="Sendmail"/>
1352
1408
  <param pos="0" name="service.product" value="Sendmail"/>
1353
1409
  <param pos="0" name="os.vendor" value="Ubuntu"/>
@@ -1357,12 +1413,14 @@
1357
1413
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1358
1414
  <param pos="1" name="host.name"/>
1359
1415
  <param pos="2" name="service.version"/>
1416
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1360
1417
  <param pos="3" name="system.time"/>
1361
1418
  </fingerprint>
1362
1419
 
1363
1420
  <fingerprint pattern="^([^ ]+) (?:E?SMTP )?Sendmail SMI-([^/]+)/(SMI-SVR4) ready at (.+)$">
1364
1421
  <description>Sendmail - Solaris (SMI variant)</description>
1365
1422
  <example>foo.bar Sendmail SMI-8.6/SMI-SVR4 ready at Sun, 29 Jul 2001 22:58:46 -0400</example>
1423
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1366
1424
  <param pos="0" name="service.family" value="Sendmail"/>
1367
1425
  <param pos="0" name="service.product" value="Sendmail"/>
1368
1426
  <param pos="0" name="os.vendor" value="Sun"/>
@@ -1372,6 +1430,7 @@
1372
1430
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1373
1431
  <param pos="1" name="host.name"/>
1374
1432
  <param pos="2" name="service.version"/>
1433
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1375
1434
  <param pos="3" name="sendmail.config.version"/>
1376
1435
  <param pos="4" name="system.time"/>
1377
1436
  </fingerprint>
@@ -1379,6 +1438,7 @@
1379
1438
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^ ]+)/(linuxconf); (.+)$">
1380
1439
  <description>Sendmail - unknown platform (linuxconf variant)</description>
1381
1440
  <example>foo.bar ESMTP Sendmail 8.9.3/linuxconf; Sun, 29 Jul 2001 22:48:28 -0400</example>
1441
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1382
1442
  <param pos="0" name="service.family" value="Sendmail"/>
1383
1443
  <param pos="0" name="service.product" value="Sendmail"/>
1384
1444
  <param pos="0" name="os.family" value="Linux"/>
@@ -1386,6 +1446,7 @@
1386
1446
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1387
1447
  <param pos="1" name="host.name"/>
1388
1448
  <param pos="2" name="service.version"/>
1449
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1389
1450
  <param pos="3" name="sendmail.config.version"/>
1390
1451
  <param pos="4" name="system.time"/>
1391
1452
  </fingerprint>
@@ -1417,10 +1478,12 @@
1417
1478
  <example host.name="foo.bar" service.version="8.8.8" sendmail.config.version="8.8.9">foo.bar ESMTP blah Sendmail 8.8.8/8.8.9; Wed, 21 Nov 2001 23:39:07 +0100 (CET)</example>
1418
1479
  <example host.name="foo.bar" service.version="8.10.2" sendmail.config.version="8.10.3">foo.bar ESMTP Sendmail 8.10.2/8.10.3; Mon, 10 Sep 2001 08:37:14 -0400</example>
1419
1480
  <example host.name="foo.bar" service.version="8.13.8" sendmail.config.version="8.13.9">foo.bar ESMTP foo-MTA Sendmail 8.13.8/8.13.9; Mon, 18 Apr 2011 08:52:38 -0700</example>
1481
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1420
1482
  <param pos="0" name="service.product" value="Sendmail"/>
1421
1483
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1422
1484
  <param pos="1" name="host.name"/>
1423
1485
  <param pos="2" name="service.version"/>
1486
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1424
1487
  <param pos="3" name="sendmail.config.version"/>
1425
1488
  <param pos="4" name="system.time"/>
1426
1489
  </fingerprint>
@@ -1428,10 +1491,12 @@
1428
1491
  <fingerprint pattern="^([^ ]+) +ESMTP .*Sendmail +([^/ ]+) */ *([^/ ]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ \w+)\.?$">
1429
1492
  <description>Sendmail - with timezone and timestamp, w/o timezone offset or OS</description>
1430
1493
  <example host.name="foo.bar" service.version="8.14.4" sendmail.config.version="8.14.4" system.time="Thu, 5 Apr 2018 19:30:58 GMT">foo.bar ESMTP Sendmail 8.14.4/8.14.4; Thu, 5 Apr 2018 19:30:58 GMT</example>
1494
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1431
1495
  <param pos="0" name="service.product" value="Sendmail"/>
1432
1496
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss z"/>
1433
1497
  <param pos="1" name="host.name"/>
1434
1498
  <param pos="2" name="service.version"/>
1499
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1435
1500
  <param pos="3" name="sendmail.config.version"/>
1436
1501
  <param pos="4" name="system.time"/>
1437
1502
  </fingerprint>
@@ -1439,33 +1504,39 @@
1439
1504
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ ]+) ready at *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\))$">
1440
1505
  <description>Sendmail - with version and date (optional timezone), w/o config version</description>
1441
1506
  <example host.name="foo.bar" service.version="8.8.8" system.time="Tue, 6 Feb 2001 14:37:14 +0100">foo.bar ESMTP Sendmail 8.8.8 ready at Tue, 6 Feb 2001 14:37:14 +0100 (CET)</example>
1507
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1442
1508
  <param pos="0" name="service.family" value="Sendmail"/>
1443
1509
  <param pos="0" name="service.product" value="Sendmail"/>
1444
1510
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1445
1511
  <param pos="1" name="host.name"/>
1446
1512
  <param pos="2" name="service.version"/>
1513
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1447
1514
  <param pos="3" name="system.time"/>
1448
1515
  </fingerprint>
1449
1516
 
1450
1517
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) - \([^\)]+\)/[^ ]+;? *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
1451
1518
  <description>Sendmail - revision variant 1</description>
1452
1519
  <example>foo.foo.bar ESMTP Sendmail 8.11.1 - (Revision 1.010)/8.9.3; Sat, 22 Jan 2011 10:08:35 -0500 (EST)</example>
1520
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1453
1521
  <param pos="0" name="service.family" value="Sendmail"/>
1454
1522
  <param pos="0" name="service.product" value="Sendmail"/>
1455
1523
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1456
1524
  <param pos="1" name="host.name"/>
1457
1525
  <param pos="2" name="service.version"/>
1526
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1458
1527
  <param pos="3" name="system.time"/>
1459
1528
  </fingerprint>
1460
1529
 
1461
1530
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail +(?:[^ ]+) +version +([^ ]+) +- +(?:[^;]+); *(\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)(?: \(.+\)) *$">
1462
1531
  <description>Sendmail - revision variant 2</description>
1463
1532
  <example>foo.foo.bar ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 2.007 - 8 December 2008/8.8.6; Wed, 21 Jul 2010 11:17:01 -0400 (EDT)</example>
1533
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1464
1534
  <param pos="0" name="service.family" value="Sendmail"/>
1465
1535
  <param pos="0" name="service.product" value="Sendmail"/>
1466
1536
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1467
1537
  <param pos="1" name="host.name"/>
1468
1538
  <param pos="2" name="service.version"/>
1539
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1469
1540
  <param pos="3" name="system.time"/>
1470
1541
  </fingerprint>
1471
1542
 
@@ -1480,8 +1551,10 @@
1480
1551
  <example host.name="foo.bar">foo.bar ESMTP Sendmail ready. </example>
1481
1552
  <example host.name="foo.bar">foo.bar ESMTP Sendmail</example>
1482
1553
  <example host.name="foo.bar">foo.bar Sendmail ready. </example>
1554
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1483
1555
  <param pos="0" name="service.family" value="Sendmail"/>
1484
1556
  <param pos="0" name="service.product" value="Sendmail"/>
1557
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:-"/>
1485
1558
  <param pos="1" name="host.name"/>
1486
1559
  <param pos="2" name="system.time"/>
1487
1560
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
@@ -1490,10 +1563,12 @@
1490
1563
  <fingerprint pattern="^ESMTP Sendmail +([^/ ]+) */ *([^/ ]+); (\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)$">
1491
1564
  <description>Sendmail - with version and date, w/o hostname or platform (semicolon variant)</description>
1492
1565
  <example service.version="8.13.1" sendmail.config.version="8.13.1" system.time="Thu, 30 Nov 2017 01:58:22 -0700">ESMTP Sendmail 8.13.1/8.13.1; Thu, 30 Nov 2017 01:58:22 -0700</example>
1566
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1493
1567
  <param pos="0" name="service.family" value="Sendmail"/>
1494
1568
  <param pos="0" name="service.product" value="Sendmail"/>
1495
1569
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1496
1570
  <param pos="1" name="service.version"/>
1571
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1497
1572
  <param pos="2" name="sendmail.config.version"/>
1498
1573
  <param pos="3" name="system.time"/>
1499
1574
  </fingerprint>
@@ -1501,11 +1576,13 @@
1501
1576
  <fingerprint pattern="^([^ ]+) +ESMTP +Sendmail ([^ /]+) \([^\)]+\) *(.+) \(.+\)$">
1502
1577
  <description>Sendmail - unknown (date in version string variant)</description>
1503
1578
  <example>mail.foo.bar ESMTP Sendmail 8.11.1 (1.1.2.11/12Jul01-1016AM) Wed, 8 Jan 2003 11:21:22 +0100 (MET)</example>
1579
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1504
1580
  <param pos="0" name="service.family" value="Sendmail"/>
1505
1581
  <param pos="0" name="service.product" value="Sendmail"/>
1506
1582
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1507
1583
  <param pos="1" name="host.name"/>
1508
1584
  <param pos="2" name="service.version"/>
1585
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1509
1586
  <param pos="3" name="system.time"/>
1510
1587
  </fingerprint>
1511
1588
 
@@ -1513,19 +1590,23 @@
1513
1590
 
1514
1591
  <fingerprint pattern="^([^ ]+) Sendmail ([^;]+); ([^;\.]+)$">
1515
1592
  <description>Sendmail - unknown platform, variant 1</description>
1593
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1516
1594
  <param pos="0" name="service.family" value="Sendmail"/>
1517
1595
  <param pos="0" name="service.product" value="Sendmail"/>
1518
1596
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss zzz"/>
1519
1597
  <param pos="1" name="host.name"/>
1520
1598
  <param pos="2" name="service.version"/>
1599
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1521
1600
  <param pos="3" name="system.time"/>
1522
1601
  </fingerprint>
1523
1602
 
1524
1603
  <fingerprint pattern="^Sendmail ([^/]+)/([^/]+) ready on ([^ ]+)$">
1525
1604
  <description>Sendmail - basic with version and date</description>
1605
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1526
1606
  <param pos="0" name="service.family" value="Sendmail"/>
1527
1607
  <param pos="0" name="service.product" value="Sendmail"/>
1528
1608
  <param pos="1" name="service.version"/>
1609
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1529
1610
  <param pos="2" name="sendmail.config.version"/>
1530
1611
  <param pos="3" name="host.name"/>
1531
1612
  </fingerprint>
@@ -1751,11 +1832,12 @@
1751
1832
  <example host.name="foo.bar" service.version="5.3.1">foo.bar ESMTP CommuniGate Pro 5.3.1</example>
1752
1833
  <example host.name="foo.bar" service.version="6.2c3">foo.bar ESMTP CommuniGate Pro 6.2c3</example>
1753
1834
  <example host.name="foo.bar" service.version="4.3.12">foo.bar ESMTP CommuniGate Pro 4.3.12. It is you again :-(</example>
1754
- <param pos="0" name="service.vendor" value="Communigater"/>
1835
+ <param pos="0" name="service.vendor" value="Communigate"/>
1755
1836
  <param pos="0" name="service.family" value="Pro"/>
1756
- <param pos="0" name="service.product" value="ESMTP"/>
1837
+ <param pos="0" name="service.product" value="Communigate Pro"/>
1757
1838
  <param pos="1" name="host.name"/>
1758
1839
  <param pos="2" name="service.version"/>
1840
+ <param pos="0" name="service.cpe23" value="cpe:/a:communigate:communigate_pro:{service.version}"/>
1759
1841
  </fingerprint>
1760
1842
 
1761
1843
  <fingerprint pattern="^(\S+) NO UCE NO UBE NO RELAY PROBES ESMTP">