Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Incorrect NTP fingerprint for F5 BIG-IP #37

Closed
jhart-r7 opened this issue Mar 6, 2015 · 0 comments
Closed

Incorrect NTP fingerprint for F5 BIG-IP #37

jhart-r7 opened this issue Mar 6, 2015 · 0 comments
Assignees
@jhart-r7

Comments

@jhart-r7
Copy link
Contributor

jhart-r7 commented Mar 6, 2015

The existing fingerprint is far too loose:

 <fingerprint pattern=".*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,\s*processor=&quot;([^ ]+)&quot;,\s*system=&quot;[^ ]+.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">

When I put this example in, it passes recog_verify but shouldn't:

version="ntpd version = 4.1.0", processor="unknown", system="OpenVMS AXP", leap=0, stratum=4, precision=-11, rootdelay=214.836, rootdispersion=162.916, peer=24756, refid=a.b.c.d, reftime=ffff poll=10, clock=fffff, state=4, offset=39.552, frequency=6.214, jitter=14.150, stability=5.564
@jhart-r7 jhart-r7 self-assigned this Mar 6, 2015
jhart-r7 added a commit to jhart-r7/recog that referenced this issue Mar 6, 2015
@jhart-r7
Partial fix for rapid7#37 -- add an OpenVMS AXP NTP fingerprint
13e37bf 
Serving time since 1992
@hdm hdm closed this as completed in b73a180 Mar 6, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jhart-r7 jhart-r7

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jhart-r7