Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an affiliate thereof.APACHE_LOG4SHELL_SMTP.NBIN
HistoryDec 17, 2021 - 12:00 a.m.

Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)

2021-12-1700:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an affiliate thereof.
www.tenable.com
375

The remote host appears to be running an SMTP server. SMTP itself is not vulnerable to Log4Shell; however, the SMTP server could potentially be affected if it attempts to log data via a vulnerable log4j library.

This plugin requires that both the scanner and target machine have internet access.

Binary data apache_log4shell_smtp.nbin
VendorProductVersionCPE
apachelog4jcpe:/a:apache:log4j