OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Command Line RPC vulnerability scanner?

From: Michael Wright (mcwrightdbls.com)
Date: Wed Jul 30 2003 - 13:25:14 CDT

Yes. ISS provides one for windows:

"ISS X-Force has developed a tool to scan any specified IP range for
systems vulnerable to the MS03-26 RPC vulnerability. The scanner
is non-invasive. It does not need domain credentials to check for the
patch, nor does it actually fire the exploit. The scanner uses two
techniques to fingerprint the vulnerability based on behaviors that the
MS03-026 patch has altered. The scanner also includes a primitive
OS-ident feature.

"We feel that this tool may prove to be more accurate that other free
scanners that have been made available. For more information, please
visit:"

http://www.iss.net/support/product_utilities/ms03-026rpc.php

Be sure to read the page. It isn't 100% accurate.

On 7/29/03 5:16 PM, "JAMIE CRAWFORD" <crawfordcmsu1.cmsu.edu> wrote:

> Does anyone know of a command line rpc vulnerability scanner for win32
> or linux?
> Tia,
> jamie
>
>
> Jamie Crawford, MCSE Network Analyst I
> Information Services
> Central Missouri State University
> Warrensburg, MO 64093
> Phone:6605434357
> Email:CRAWFORDCMSU1.CMSU.EDU
>
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------