Rice University logo
 
Top blue bar image
Or looking for known, fixed vulnerabilities on servers that should know better (and several that shouldn't)
 

Unusual Server Responses

Just for fun, I thought I would post a few items to show the breadth of the servers that we surveyed.

  • http://www.skattelister.no responded to our relative request with a code from IETF RFC 2324 (2.3.2) indicating that it is, in fact, a teapot.  We find this response somewhat irregular as it is only supposed to be returned in response to a brew request for coffee.
  • Mailmta.com, running the Varnish server, reports status code 770 for all requests.  As this is one of the area codes for Atlanta, it makes me feel right at home.
  • Boisestate.edu is running the commodore64-HTTPD/1.1.  While we understand this to be a very efficient implementation, it may also point to the levels of education funding in Iowa.
  • CQNews.net is running server “unknow.”  Hopefully this does not reflect the purpose of their news room.
  • http://www.alittihad.co.ae runs on Nintendo
  • TravelingLuck.com run’s on what is reported as “My Arse.”  Our condolences to the webmaster.
  • We have already mentioned reddit.com’s SQL injection string
  • The Orthodox Jewish web site vosizneias.com has some high powered security.  Their server string? “In Hashem We Trust.”
  • Citibank Thailand runs their insecure server on “unkown” software
  • Expensify.com reports “All your base are belong to us”.  Hopefully the meme doesn’t express how they view your data.
  • LoveMoney.com is also holding tight on expenses.  They are running on Windows/3.11
  • and that’s only the tip of the iceberg!

Comments are closed.