在连接器上检测到CVE-2000-0649

调查结果：

端口80和443上的Web服务器HTTP标头内部IP泄露。

证据：
Nessus was able to exploit the issue using the following request :

GET //IgOo5nQ0.asp HTTP/1.0
Accept-Charset: iso-8859-1,utf-8;q=0.9,*;q=0.1
Accept-Language: en
Connection: Close
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*

This produced the following truncated output (limited to 10 lines) :
------------------------------ snip ------------------------------
Date: Sun, 10 Mar 2024 14:15:19 GMT
Cache-Control: public,max-age=31536000
X-FRAME-Options: SAMEORIGIN
Location: https://10.5.20.4
Content-Length: 0
Server: Jetty(9.4.52.v20230823)