Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: ms-sql-info script bug
From: David Fifield <david () bamsoftware com>
Date: Fri, 24 Jun 2011 14:31:36 -0700

On Fri, Jun 24, 2011 at 08:06:45PM +0100, Rob Nicholls wrote:
It's afraid it's not really a bug with the script. Even if SQL Server 2000
has been patched using the latest service packs and hot fixes, the version
returned by the SQL Server Resolution Service remains at the base version
8.00.194 and therefore cannot be trusted. I think that's why it says
"UNVERIFIED" in the output.


-----Original Message-----
From: nmap-dev-bounces () insecure org [mailto:nmap-dev-bounces () insecure org]
On Behalf Of Ryan Giobbi
Sent: 24 June 2011 19:45
To: nmap-dev () insecure org
Subject: ms-sql-info script bug

Bug in ms-sql-info script. TCP and UDP ports show different SQL server
information. The 8.00.2039 version is probably correct.

1433/tcp open  ms-sql-s Microsoft SQL Server 2000 8.00.2039; SP4
1434/udp open  ms-sql-m Microsoft SQL Server 8.00.194 (ServerName:
<host> ; TCPPort: 1433)

Also it's possible that there is a bug in our nmap-service-probes file.
If you are able to verify the version number exactly, please submit a
correction at http://insecure.org/cgi-bin/submit.cgi?corr-service.

David Fifield
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]