Re: GOBBLES and errata 005

[francisco <frisco@blackant.net>]

On Mon, 24 Jun 2002, Alex de Joode wrote:

> http://www.eeye.com/html/Research/Tools/apachechunked.html
>
> Has a nice utility to check if a host runs an exploitable
> version of Apache.
>
> (now we only need a scanner for exploitable openssh versions :()


there is an ssh protocol scanner at:
http://www.monkey.org/~provos/scanssh/


and there is an ssh plugin for nessus which will identify various
vulnerabilities:
http://www.nessus.org/

nessus also has a plugin for this Apache chunked encoding vulernability,
as well as plugins for a variety of other vulnerabilities.

-f
http://www.blackant.net/