22 Feb
2001
22 Feb
'01
18:22
On Thu, 22 Feb 2001 16:54:00 +0100, you wrote:
hi all, thought i'd get into a bit of SAINT and all. 1. situation: host report of my newly installed 7.1 (!) shows vulnerable qpop. 2. situation: so i go and update. after update version still shows 2.53 and SAINT reports.
I guest: 1.- SuSE 7.1 ships PATCHED version for qpop 2.53. 2.- SAINT uses the banner which is prompted by popper daemon upon connection to port 110. This banner has not been touched by SuSE people so SAINT gets confused thinking it has found a vulnerable version. So... 3.- It's a false positive :-) =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~