[Openvas-discuss] Unknown Service Banner Update

Matthew Coene mcoene at Bacardi.com
Fri Aug 26 18:16:21 CEST 2011


Came across this in a recent scan...

                                                        acc-raid (2800/tcp)
Low
NVT: Unknown services banners (OID: 1.3.6.1.4.1.25623.1.0.11154)


An unknown server is running on this port.
If you know what it is, please send this banner to the OpenVAS team:
0x00:  94 00 00 00 F4 FF FF FF 01 00 00 00 FF FF FF FF    ................
0x10:  00 00 00 00 A5 00 00 00 00 00 00 00 04 00 00 00    ................
0x20:  3E F9 E6 B9 9B FE 6B 7C 2D 69 87 74 0B F3 10 66    >.....k|-i.t...f
0x30:  87 C2 A8 59 A6 18 B4 BD AE BF 7A 5A 3A F4 23 AC    ...Y......zZ:.#.
0x40:  F6 E4 FC DE 59 80 0C 9F 05 DD BC E5 7E DE 7D 19    ....Y.......~.}.
0x50:  DC 7D 34 2F EC 2D 63 5D 2F 4E 35 26 DD 7C C3 AB    .}4/.-c]/N5&.|..
0x60:  AC 13 28 D3 B3 A5 BA F0 FD D6 FA 22 BF 4D F2 4D    ..(........".M.M
0x70:  A6 70 08 98 0E 7D 82 59 D7 F3 87 3B 9E C7 C5 95    .p...}.Y...;....
0x80:  06 54 61 43 ED F9 57 BB 50 25 1A B6 A6 61 CE BD    .TaC..W.P%...a..
0x90:  C1 29 69 76 D5 30 10 CC 60 40 48 EF 8D E0 AC 76    .)iv.0..`@H....v
0xA0:  FF FE FF FE FF FF FB FF CE BE AC AD FF FF 5B FF    ..............[.
0xB0:  FF FF FD F9                                        ....

Checked our services file...

NNSRV            2800/tcp                    # CCURE800: IStar Driver

CCure is a Physical card / door access security system...

The same system (CCure800) uses the following other ports also...

CFSRV            2500/tcp                    # CCURE800: Progress CF
database server
JNSRV            2501/tcp                    # CCURE800: Progress JOURN
database server
JNSRV1            2502/tcp                    # CCURE800: Progress JOURN
database server 1
JNSRV2            2503/tcp                    # CCURE800: Progress JOURN
database server 2
JNSRV3            2506/tcp                    # CCURE800: Progress JOURN
database server 3
JNSRV4            2505/tcp                    # CCURE800: Progress JOURN
database server 4
CCDRVR            2600/tcp                    # CCURE800: ApC Driver
NNSRV            2800/tcp                    # CCURE800: IStar Driver
NNFTSRV            2801/tcp                    # CCURE800: IStar Fast
Database Download Port
ERDBSRV            2900/tcp                    # CCURE800: Enhanced
Reporting database (CC8X_Journ)

Cheers,

Matt




More information about the Openvas-discuss mailing list