On Fri, 2003-09-26 at 11:30, Pekka Savola wrote:
Hi,
Would it make sense to add the rpm version-release strings in the OpenSSH,
Apache, etc. banners, e.g. like..:
SSH-1.99-OpenSSH_3.5p1 3.5p1-11
instead of just:
SSH-1.99-OpenSSH_3.5p1
.. this should be rather straightforward for the build process.
The gain would be that if you e.g. perform security scans in your network
you could identify whether a patched version has been installed in the
systems in question..
And so could an attacker.
Making sure your network is up2date is probably best resolved at some higher
management level.