Nmap Gets Version Detection

Anonymous Coward writes "Up until now, everyone's favorite port scanner, nmap has had decent OS detection (through TCP fingerprinting) and service identification based on the open port, but the latest version, 3.45 released today, has version detection for each service! This means not only can nmap tell you that httpd is running on port 80, but that it is `apache httpd version 2.0.39`! While this is a little bit worrisome because of what malicious purposes people might use nmap's version detection for, this should make the jobs of admins everywhere easier and keep us all more on our toes when it comes to security. Fyodor has also published a paper on how the version detection works."

Comments

nmap malicious?

[Improv]

Gosh, who could possibly imagine that, with the
addition of version detection, the most 'white hat'
tool out there that could never possibly be used for
anything bad suddenly becomes a 'black hat' tool..
It's a complete 180!

Great

[essdodson]

This, on top of it being in the matrix will have every pimply 13 year old trying to haxor the gibson.

Just out of curiousity...

[Gandhian_Rage]

Does this make it easier for fyodor to listen for an open X11 server?

leet

[grub]

Cool! That version detection works!

Starting nmap V. 3.45 ( www.insecure.org/nmap/ )
Interesting ports on test.grub.net (10.0.1.24):

Port State Service Version
22/tcp open ssh (c) SCO
80/tcp open http (c) SCO
443/tcp open https (c) SCO

hats off to fyodor....

[ziggy_zero]

....did you know he drives a bimmer? I saw him on the road in Sunnyvale a few weeks ago - his license plate is ROOOOT. hahahaha

(seriously, i'm not making this up. i e-mailed him because he also had an insecure.org license plate holder so that kind of tipped me off. lo and behold, it was him.)