From 2a5b259416e580b4dd115147b7cffc62ff129122 Mon Sep 17 00:00:00 2001 From: Lukas Tribus Date: Sun, 14 Mar 2021 20:06:48 +0100 Subject: [PATCH] Stop using the word "potentially" The word "potentially" implies a certain likelihood - even more so for non-native english speakers, which is not a determination that the script can make just be looking at the version output. That fact of the matter is the updated systems hit this code path, and people continue to get confused (see at least 3 github issues). We don't want to spread FUD, so lets make this output clearer. --- http-vuln-exchange.nse | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/http-vuln-exchange.nse b/http-vuln-exchange.nse index 49b4599..3bd4944 100644 --- a/http-vuln-exchange.nse +++ b/http-vuln-exchange.nse @@ -16,7 +16,7 @@ Originally based on source by onSec-fr and k4nfr3, thanks! --@output --PORT STATE SERVICE --443/tcp open https ---|_http-vuln-proxylogon: (15.1.2176) Exchange 2016 potentially vulnerable, check latest security update is applied (Exchange 2016 CU18 or CU19 installed) +--|_http-vuln-proxylogon: (15.1.2176) Exchange 2016 can't determine vulnerability status, check latest security update is applied (Exchange 2016 CU18 or CU19 installed) author = "Kevin Beaumont" license = "GPLv3" @@ -56,7 +56,7 @@ local function checkversion(w) if tonumber(mytable[3]) < 496 then output = "Exchange 2010 VULNERABLE to Unified Messaging issues! (< 14.*.496)" elseif tonumber(mytable[3]) == 496 then - output = "Exchange 2010 potentially vulnerable, check latest security update is applied (= 14.*.496)" + output = "Exchange 2010 can't determine vulnerability status, check latest security update is applied (= 14.*.496)" else output = "Exchange 2010 not vulnerable (>14.*.496)" end @@ -65,14 +65,14 @@ local function checkversion(w) if tonumber(mytable[3]) < 1497 then output = "Exchange 2013 VULNERABLE! (< 15.0.1496)" elseif tonumber(mytable[3]) == 1497 then - output = "Exchange 2013 potentially vulnerable, check latest security update is applied (15.0.1497 Exchange 2013 CU23 installed)" + output = "Exchange 2013 can't determine vulnerability status, check latest security update is applied (15.0.1497 Exchange 2013 CU23 installed)" else output = "Exchange 2013 not vulnerable (>15.0.1497)" end elseif w:find("^15.1.*") ~= nil then if tonumber(mytable[3]) == 2176 or tonumber(mytable[3]) == 2106 then - output = "Exchange 2016 potentially vulnerable, check latest security update is applied (Exchange 2016 CU18 or CU19 installed)" + output = "Exchange 2016 can't determine vulnerability status, check latest security update is applied (Exchange 2016 CU18 or CU19 installed)" elseif tonumber(mytable[3]) < 2106 then output = "Exchange 2016 VULNERABLE! (< 15.1.2106)" else @@ -81,7 +81,7 @@ local function checkversion(w) elseif w:find("^15.2.*") ~= nil then if tonumber(mytable[3]) == 792 or tonumber(mytable[3]) == 721 then - output = "Exchange 2019 potentially vulnerable, check latest security update is applied (Exchange 2019 CU7 or CU8 installed)" + output = "Exchange 2019 can't determine vulnerability status, check latest security update is applied (Exchange 2019 CU7 or CU8 installed)" elseif tonumber(mytable[3]) < 720 then output = "Exchange 2019 VULNERABLE !!! (< 15.2.720)" else