# Nmap 7.93 scan initiated Sat Mar 23 08:46:59 2024 as: nmap -A -p 993,995,4190 --script vuln -oN /opt/i_nmap_nove_mailbox_vuln.txt mailbox.vsb.cz
Nmap scan report for mailbox.vsb.cz (158.196.149.78)
Host is up (0.00033s latency).
Other addresses for mailbox.vsb.cz (not scanned): 2001:718:1001:149::78

PORT     STATE SERVICE  VERSION
993/tcp  open  ssl/imap Cyrus imapd 3.0.13-Debian-3.0.13-5
995/tcp  open  ssl/pop3
| fingerprint-strings: 
|   GenericLines: 
|     +OK mailbox Cyrus POP3 3.0.13-Debian-3.0.13-5 server ready <6158317771199165444.1711180036@mailbox>
|     -ERR Unrecognized command
|     -ERR Unrecognized command
|   HTTPOptions: 
|     +OK mailbox Cyrus POP3 3.0.13-Debian-3.0.13-5 server ready <18171242408138857735.1711180046@mailbox>
|     -ERR Unrecognized command
|     -ERR Unrecognized command
|   NULL: 
|_    +OK mailbox Cyrus POP3 3.0.13-Debian-3.0.13-5 server ready <6158317771199165444.1711180036@mailbox>
4190/tcp open  sieve?
| fingerprint-strings: 
|   GenericLines, NULL: 
|     "IMPLEMENTATION" "Cyrus timsieved 3.0.13-Debian-3.0.13-5"
|     "VERSION" "1.0"
|     "SASL" "PLAIN LOGIN"
|     "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation vacation-seconds imapflags notify envelope imap4flags date mailbox mboxmetadata servermetadata relational regex subaddress copy index variables"
|     "STARTTLS"
|     "UNAUTHENTICATE"
|   GetRequest, HTTPOptions: 
|     "IMPLEMENTATION" "Cyrus timsieved 3.0.13-Debian-3.0.13-5"
|     "VERSION" "1.0"
|     "SASL" "PLAIN LOGIN"
|     "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation vacation-seconds imapflags notify envelope imap4flags date mailbox mboxmetadata servermetadata relational regex subaddress copy index variables"
|     "STARTTLS"
|     "UNAUTHENTICATE"
|_    "Expected a command. Got something else."
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port995-TCP:V=7.93%T=SSL%I=7%D=3/23%Time=65FE8909%P=x86_64-pc-linux-gnu
SF:%r(NULL,65,"\+OK\x20mailbox\x20Cyrus\x20POP3\x203\.0\.13-Debian-3\.0\.1
SF:3-5\x20server\x20ready\x20<6158317771199165444\.1711180036@mailbox>\r\n
SF:")%r(GenericLines,9B,"\+OK\x20mailbox\x20Cyrus\x20POP3\x203\.0\.13-Debi
SF:an-3\.0\.13-5\x20server\x20ready\x20<6158317771199165444\.1711180036@ma
SF:ilbox>\r\n-ERR\x20Unrecognized\x20command\r\n-ERR\x20Unrecognized\x20co
SF:mmand\r\n")%r(HTTPOptions,9C,"\+OK\x20mailbox\x20Cyrus\x20POP3\x203\.0\
SF:.13-Debian-3\.0\.13-5\x20server\x20ready\x20<18171242408138857735\.1711
SF:180046@mailbox>\r\n-ERR\x20Unrecognized\x20command\r\n-ERR\x20Unrecogni
SF:zed\x20command\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port4190-TCP:V=7.93%I=7%D=3/23%Time=65FE8903%P=x86_64-pc-linux-gnu%r(NU
SF:LL,153,"\"IMPLEMENTATION\"\x20\"Cyrus\x20timsieved\x203\.0\.13-Debian-3
SF:\.0\.13-5\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"SASL\"\x20\"PLAIN\x20LOGIN\
SF:"\r\n\"SIEVE\"\x20\"comparator-i;ascii-numeric\x20fileinto\x20reject\x2
SF:0vacation\x20vacation-seconds\x20imapflags\x20notify\x20envelope\x20ima
SF:p4flags\x20date\x20mailbox\x20mboxmetadata\x20servermetadata\x20relatio
SF:nal\x20regex\x20subaddress\x20copy\x20index\x20variables\"\r\n\"STARTTL
SF:S\"\r\n\"UNAUTHENTICATE\"\r\nOK\r\n")%r(GenericLines,153,"\"IMPLEMENTAT
SF:ION\"\x20\"Cyrus\x20timsieved\x203\.0\.13-Debian-3\.0\.13-5\"\r\n\"VERS
SF:ION\"\x20\"1\.0\"\r\n\"SASL\"\x20\"PLAIN\x20LOGIN\"\r\n\"SIEVE\"\x20\"c
SF:omparator-i;ascii-numeric\x20fileinto\x20reject\x20vacation\x20vacation
SF:-seconds\x20imapflags\x20notify\x20envelope\x20imap4flags\x20date\x20ma
SF:ilbox\x20mboxmetadata\x20servermetadata\x20relational\x20regex\x20subad
SF:dress\x20copy\x20index\x20variables\"\r\n\"STARTTLS\"\r\n\"UNAUTHENTICA
SF:TE\"\r\nOK\r\n")%r(GetRequest,181,"\"IMPLEMENTATION\"\x20\"Cyrus\x20tim
SF:sieved\x203\.0\.13-Debian-3\.0\.13-5\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"
SF:SASL\"\x20\"PLAIN\x20LOGIN\"\r\n\"SIEVE\"\x20\"comparator-i;ascii-numer
SF:ic\x20fileinto\x20reject\x20vacation\x20vacation-seconds\x20imapflags\x
SF:20notify\x20envelope\x20imap4flags\x20date\x20mailbox\x20mboxmetadata\x
SF:20servermetadata\x20relational\x20regex\x20subaddress\x20copy\x20index\
SF:x20variables\"\r\n\"STARTTLS\"\r\n\"UNAUTHENTICATE\"\r\nOK\r\nNO\x20\"E
SF:xpected\x20a\x20command\.\x20Got\x20something\x20else\.\"\r\n")%r(HTTPO
SF:ptions,181,"\"IMPLEMENTATION\"\x20\"Cyrus\x20timsieved\x203\.0\.13-Debi
SF:an-3\.0\.13-5\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"SASL\"\x20\"PLAIN\x20LO
SF:GIN\"\r\n\"SIEVE\"\x20\"comparator-i;ascii-numeric\x20fileinto\x20rejec
SF:t\x20vacation\x20vacation-seconds\x20imapflags\x20notify\x20envelope\x2
SF:0imap4flags\x20date\x20mailbox\x20mboxmetadata\x20servermetadata\x20rel
SF:ational\x20regex\x20subaddress\x20copy\x20index\x20variables\"\r\n\"STA
SF:RTTLS\"\r\n\"UNAUTHENTICATE\"\r\nOK\r\nNO\x20\"Expected\x20a\x20command
SF:\.\x20Got\x20something\x20else\.\"\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 4.X|5.X
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
OS details: Linux 4.15 - 5.6, Linux 5.0 - 5.4
Network Distance: 2 hops
Service Info: Hosts:  mailbox.vsb.cz, mailbox

TRACEROUTE (using port 25/tcp)
HOP RTT     ADDRESS
1   0.36 ms 158.196.94.2
2   0.38 ms mailbox.vsb.cz (158.196.149.78)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Mar 23 08:49:52 2024 -- 1 IP address (1 host up) scanned in 173.07 seconds
