CCM 5.17.8 - Use of Third Party Libraries Name Selected License Granados SSH Library (Apache v1.1) Apache License 1.1 Granados Log4net for .NET Framework 1.2 (Apache Apache License 2.0 v2.0) swagger-ui 3.2.0 (Apache v2.0) Apache License 2.0 ApplicationMonitor.cs (BSD-2) BSD 2-clause "Simplified" or "FreeBSD" License LukeSkywalker.IPNetwork 1.3.2.0 (BSD) BSD 2-clause "Simplified" or "FreeBSD" License Oval (BSD) BSD 3-clause "New" or "Revised" License SCAP Files copyright MITRE Corporation (BSD) BSD 3-clause "New" or "Revised" License ajax.js (BSD) BSD-Style License SharpZipLib (GPL v2 w/CE) GNU General Public License v2.0 or later Cygwin 2.6.0 (GPL v3) GNU General Public License v3.0 Gentle.NET (LGPL-2) GNU Lesser General Public License v2.1 paramiko 1.7.7.2 (LGPL 2.1) GNU Lesser General Public License v2.1 Template to generate a Gentle compatible business GNU Lesser General Public License v2.1 or later object from the database p0f service database (LGPL v2.1) GNU Lesser General Public License v2.1 or later Cygrunsrv 1.62 (LPGLv3) GNU Lesser General Public License v3.0 DES.cs (Legion of the Bouncy Castle License) Legion Of The Bouncy Castle License Rc4.cs (Legion of the Bouncy Castle License) Legion Of The Bouncy Castle License SharpSNMPLib 9.0.3 (MIT) MIT License (also X11) jQuerry 1.11.1 (MIT) MIT License (also X11) nancyfx-nancy 2.0.0-clinteastwood (MIT) MIT License (also X11) simple-json 0.38.0 (MIT) MIT License (also X11) CookComputing XML-RPC (MIT) MIT-Style License Mono Class (MIT) MIT-Style License Npgsql 2.0.14.3 (MIT) MIT-Style License Ntlm.cs (MIT) MIT-Style License lua (MIT) MIT-Style License nancy.swagger 2.2.31-alpha (MIT) MIT-Style License Tripwire CCM 5.17.8 1 License Agreements Name Selected License Microsoft .NET Framework & Associated Libraries Microsoft .NET Library License (Microsoft.NET Library License) Microsoft.AspNetCore.Cryptography.Internal 1.0 Microsoft ASP.NET Tools License (Microsoft ASP.NET Tools License) Microsoft.AspNetCore.Cryptography.KeyDerivation Microsoft ASP.NET Tools License 1.0 (Microsoft ASP.NET Tools License) Win32Security (MS-PL) Microsoft Public License (Ms-PL) OpenSSH 7.3P1 (Open SSH License) OpenSSH License OpenSSL 1.0.2j (OpenSSL License) OpenSSL License AR System .NET and COM API (Other/Commercial) Other/Commercial Checkpoint OPSEC Components Other/Commercial (Other/Commercial) Crystal Reports For Visual Studio .NET Other/Commercial (Other/Commercial) DotNetMagic (Other/Commercial) Other/Commercial Infragistics NetAdvantage (Other/Commercial) Other/Commercial ManagedThreadPool.cs 1.0.1 (Other/Commercial) Other/Commercial Nlstree.js (Other/Commercial) Other/Commercial Nmap OS database (Other/Commercial) Other/Commercial Nmap Service database (Other/Commercial) Other/Commercial Visual C++ Redistributable 2013 Installer Other/Commercial (Other/Commercial) Visual C++ Redistributable 2015 Installer Other/Commercial (Other/Commercial) dotConnector for MySQL by Devart Other/Commercial (Other/Commercial) Lyquidity.Controls.ExtendedListViews (Other/Open Other/Open Source Source) MD4.cs (Other/Open Source) Other/Open Source CRC32.cs (Public Domain) Public Domain PyCrypto 2.3 (Public Domain - with additional Public Domain license notices) Sha1.c (Public Domain) Public Domain Python 2.6.6 (Python License) Python License 2.0 PyWin32 (Python License) Python License, Release 2.6.2 md5.c (RSA Data Security License) RSA Data Security License Colorutil.cs (CPOL-1.02) The Code Project Open License (CPOL) 1.02 Tripwire CCM 5.17.8 2 License Agreements Name Selected License balloon windows for .net (CPOL-1.02) The Code Project Open License (CPOL) 1.02 PostgreSQL 9.5.1 (PostgreSQL License) The PostgreSQL License WinPCap 4.1.3 (WinPcap License) WinPcap License zlib 1.2.8-3 (zlib License) zlib License NSIS Installer (Zlib/libpng License) zlib/libpng License CCM 5.17.8 - Third-Party Notices Report [ajax.js (BSD)] Copyright Statements Copyright (c) 2005-2012 by Matthias Hertel, http://www.mathertel.de/ All rights reserved. License Text (https://fedoraproject.org/wiki/Licensing:BSD?rd=Licensing/BSD) Copyright (c) 2005-2012 by Matthias Hertel, http://www.mathertel.de/ All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of the copyright owners nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Tripwire CCM 5.17.8 3 License Agreements [ApplicationMonitor.cs (BSD-2)] Copyright Statements Copyright (C) 2004 Dennis Dietrich All rights reserved. License Text (http://spdx.org/licenses/BSD-2-Clause) Source/Licensor: http://www.codeproject.com/Articles/9104/How-to-check-for- user-inactivitywith-and-without ****************************************************************************** **** Copyright (C) 2004 Dennis Dietrich Released unter the BSD License http://www.opensource.org/licenses/bsd-license.php All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. [AR System .NET and COM API (Other/Commercial)] Copyright Statements Freely provided by BMC Software, Inc under AR System Developer Community [balloon windows for .net (CPOL-1.02)] License Text (http://www.codeproject.com/info/cpol10.aspx) The Code Project Open License (CPOL) 1.02 Tripwire CCM 5.17.8 4 License Agreements Preamble This License governs Your use of the Work. This License is intended to allow developers to use the Source Code and Executable Files provided as part of the Work in any application in any form. The main points subject to the terms of the License are: Source Code and Executable Files can be used in commercial applications; Source Code and Executable Files can be redistributed; and Source Code can be modified to create derivative works. No claim of suitability, guarantee, or any warranty whatsoever is provided. The software is provided "as-is". The Article accompanying the Work may not be distributed or republished without the Author's consent This License is entered between You, the individual or other entity reading or otherwise making use of the Work licensed pursuant to this License and the individual or other entity which offers the Work under the terms of this License ("Author"). License THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CODE PROJECT OPEN LICENSE ("LICENSE"). THE WORK IS PROTECTED BY COPYRIGHT AND/OR OTHER APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS AUTHORIZED UNDER THIS LICENSE OR COPYRIGHT LAW IS PROHIBITED. BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HEREIN, YOU ACCEPT AND AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE. THE AUTHOR GRANTS YOU THE RIGHTS CONTAINED HEREIN IN CONSIDERATION OF YOUR ACCEPTANCE OF SUCH TERMS AND CONDITIONS. IF YOU DO NOT AGREE TO ACCEPT AND BE BOUND BY THE TERMS OF THIS LICENSE, YOU CANNOT MAKE ANY USE OF THE WORK. Definitions. "Articles" means, collectively, all articles written by Author which describes how the Source Code and Executable Files for the Work may be used by a user. "Author" means the individual or entity that offers the Work under the terms of this License. "Derivative Work" means a work based upon the Work or upon the Work and other pre-existing works. "Executable Files" refer to the executables, binary files, configuration and any required data files included in the Work. "Publisher" means the provider of the website, magazine, CD-ROM, DVD or other medium from or by which the Work is obtained by You. "Source Code" refers to the collection of source code and configuration files used to create the Executable Files. "Standard Version" refers to such a Work if it has not been modified, or has been modified in accordance with the consent of the Author, such consent being in the full discretion of the Author.