Re: [IMail Forum] Pen Test Report

[Mark A. Smithey]

Yes, it showed brand and version.  The reasoning for "fixing" this is that 
if a potential intruder knows the version of the mail server, they can 
tailor their exploit attempt accordingly, using known hack attempts (if 
any) against the mail server.

At 12:15 PM 3/17/2003 -0600, you wrote:

During a penetration test, the type
type?  you mean brand?

 and version of our email server was detected.
I've never heard anybody being bothered about this (PIX "smtp fixup" hides 
it  but "smtp fixup" is broken).

Who considers this a security vulnerability worth "fixing" ?

Len

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/