Re:Flan Scan: Lightweight Network Vulnerability Scanner
by zerocrates on Friday November 22, 2019 @11:08AM
(#21606834)
It's pretty typical for these "backported" packages to have version numbers that only differ from the original by a suffix, and that suffix often only appears in the package manager.
For example, the Debian stable Apache package is currently version 2.4.38-3+deb10u3, but Apache will typically report something less than all that information, like just 2.4.38.
If it's really just looking at exposed version numbers, there's plenty of other problems, like servers that are configured to not expose their version numbers.
For example, the Debian stable Apache package is currently version 2.4.38-3+deb10u3, but Apache will typically report something less than all that information, like just 2.4.38.
If it's really just looking at exposed version numbers, there's plenty of other problems, like servers that are configured to not expose their version numbers.