Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Fix ipmi-cipher-zero detection #1022

Closed
wants to merge 1 commit into
from

Conversation

Projects
None yet
1 participant

shiona commented Sep 30, 2017

The script says it's a rewrite of metasploits implementation:
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero.rb

However there is a bug: The servers response code, whether the connection was accepted or not is not checked.
Therefore current version of nmap ipmi-cipher-zero reports false positives for all ipmi services that respond to a request to open connection with cipher zero, even if the response was to deny the connection.

This pull request fixes that.

@nmap-bot nmap-bot closed this in f4b7c6f Oct 4, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment