Subj : A true rescan of this echo
To   : Wilfred van Velzen
From : Alexey Vissarionov
Date : Thu Apr 20 2017 15:25:12

Good ${greeting_time}, Wilfred!

20 Apr 2017 13:27:42, you wrote to Bj”rn Felten:

 BF>> I've got some requests for a rescan of this echo, and here you go:
 BF>> http://eljaco.se/FILES/Billing/JAMNNTPD.rar
 WvV> # wget http://eljaco.se/FILES/Billing/JAMNNTPD.rar
 WvV> Connecting to eljaco.se (eljaco.se)|2001:470:27:302::2|:80...
 WvV> failed: Connection refused.
 WvV> But your http server on IPv6 seems to be broken?

He uses very strange setup of M$ IIS, which even discloses inner IP address:

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.1
Content-Location: http://192.168.0.220/index.html
Date: Thu, 20 Apr 2017 12:25:40 GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Mon, 19 Jan 2015 22:52:42 GMT
ETag: "78c025a23a34d01:a3c"
Content-Length: 2307

I guess it's running behind a IPv4 NAT.


P.S.: exxxxxxploitable! :-)

--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin.ru!gremlin; +vii-cmiii-cmlxxvii-mmxlviii

.... :wq!
--- /bin/vi
 * Origin: http://openwall.com/Owl (2:5020/545)

.