87
Trend Micro InterScan VirusWall SMTP detection
SMTP
2004/03/23
Marc Ruef
marc dot ruef at computec dot ch
http://www.computec.ch
computec.ch
Marc Ruef
marc dot ruef at computec dot ch
http://www.computec.ch
computec.ch
2004/11/13
1.2
Corrected the plugin structure and added the accuracy values in 1.2
tcp
25
open|sleep|close|pattern_exists 220 *InterScan VirusWall NT*
80
This plugin was written with the ATK Attack Editor.
Trend Micro InterScan VirusWall
Other Mail servers and antivirus solutions
Configuration
A Trend Micro InterScan VirusWall could be detected with a banner grabbing for the SMTP banner. VirusWall is a commercial Mail Transfer Agent (MTA) with anti virus functionality.
Try to verify the existence of the known flaws. If they are present, do an upgrade to the latest version or use an alternative product.
1 hour
Yes
Yes
Yes
Low
4
8
4
4
Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427
http://www.computec.ch