Follow Techotopia on Twitter

On-line Guides
All Guides
eBook Store
iOS / Android
Linux for Beginners
Office Productivity
Linux Installation
Linux Security
Linux Utilities
Linux Virtualization
Linux Kernel
System/Network Admin
Scripting Languages
Development Tools
Web Development
GUI Toolkits/Desktop
Mail Systems
Eclipse Documentation

How To Guides
General System Admin
Linux Security
Linux Filesystems
Web Servers
Graphics & Desktop
PC Hardware
Problem Solutions
Privacy Policy




Identifying Your System?

Note that, for example, a HTTP server on port 80 identifying itself as:

  $ httptype
  Apache/1.3.29 (Debian GNU/Linux) PHP/4.3.3

or a SSH server on port 22 identifying itself as:

  $ telnet 22
  Connected to 
  Escape character is '^]'. 
  SSH-1.99-OpenSSH_3.6.1p2 Debian 1:3.6.1p2-10

is not really a security risk. Serious attacks will attempt all know vulnerabilities of the port, irrespective of what is running behind the port. Thus this is not regarded as sensitive information. On the other-hand, hiding the banner loses a lot for inter-operation.

Indeed, software should advertise its version number to aid debugging in all kinds of circumstances. If there's a security flaw then the flaw should be fixed instead of trying to hide it.

Copyright © 1995-2006 [email protected]

  Published under the terms fo the GNU General Public License Design by Interspire