GeneralInformation

Hostnames	ip070.puli17.ncnu.edu.tw mirror.ossplanet.net ftp.ubuntu-tw.net ncnu.ftp.ubuntu-tw.net ftp.ubuntu-tw.org
Domains	ncnu.edu.tw ossplanet.net ubuntu-tw.net ubuntu-tw.org
Country	Taiwan
City	Puli
Organization	Ministry of Education Computer Center
ISP	Taiwan Academic Network (TANet) Information Center
ASN	AS1659

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-11072	7.5lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.
CVE-2018-19052	5.0An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
CVE-2015-3200	5.0mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character.

OpenPorts

21 25 80 443 873

-1980272093 | 2024-04-16T13:09:41.728536

21 / tcp

220 Welcome to Ubuntu-TW FTP service.
230 Login successful.
214-The following commands are recognized.
 ABOR ACCT ALLO APPE CDUP CWD  DELE EPRT EPSV FEAT HELP LIST MDTM MKD
 MODE NLST NOOP OPTS PASS PASV PORT PWD  QUIT REIN REST RETR RMD  RNFR
 RNTO SITE SIZE SMNT STAT STOR STOU STRU SYST TYPE USER XCUP XCWD XMKD
 XPWD XRMD
214 Help OK.
211-Features:
 UTF8
 EPRT
 EPSV
 MDTM
 PASV
 REST STREAM
 SIZE
 TVFS
211 End

47403611 | 2024-04-16T07:41:24.566067

25 / tcp

220 ncnu.ftp.ubuntu-tw.net ESMTP Postfix (Ubuntu)
250-ncnu.ftp.ubuntu-tw.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b6:bb:ac:86:c0:6a:ab:06
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ftp-ncnu-ubuntu-tw
        Validity
            Not Before: Dec 18 14:49:46 2017 GMT
            Not After : Dec 16 14:49:46 2027 GMT
        Subject: CN=ftp-ncnu-ubuntu-tw
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:36:b3:dd:bb:05:0c:b7:18:26:7c:4c:fc:
                    ba:e6:fc:06:dd:9e:b2:84:e3:07:3d:b1:48:55:25:
                    b9:e2:58:a3:3f:b8:3b:9c:be:1a:38:a0:6e:bd:f0:
                    82:df:4d:2b:d7:34:8d:55:29:cc:88:c4:b3:e9:cb:
                    aa:e3:c4:a3:c2:03:53:9e:be:1a:5a:ab:59:1e:30:
                    9b:c2:08:70:a6:08:9c:6c:3c:e6:69:c3:2b:30:24:
                    71:d1:34:18:6e:1b:85:55:87:86:ca:b4:7b:cc:be:
                    99:7f:80:f7:c1:a5:40:65:21:7c:77:10:f6:2a:7e:
                    3c:1a:90:cd:0a:99:bd:8a:96:2a:53:75:48:e9:60:
                    c5:4f:47:19:2e:eb:8a:0b:aa:99:13:03:2a:26:43:
                    43:11:5f:1c:ff:10:ef:c7:b4:c0:e4:f1:a0:36:1a:
                    24:3c:8d:c1:61:7a:2e:19:57:df:c6:e3:8d:a6:c3:
                    45:da:61:c3:2c:6e:96:4f:d7:ba:07:1c:3a:71:ae:
                    8b:d9:9c:49:53:b3:1f:02:d4:e3:0b:25:44:fa:96:
                    dd:32:a8:13:ae:17:c6:7b:25:af:c3:fc:61:78:fd:
                    dd:e6:47:df:08:52:86:dc:7c:99:b1:c5:73:5f:26:
                    cc:e6:54:a2:d3:20:50:26:37:6b:3b:1a:c1:83:f5:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8e:9b:40:be:0c:a8:4e:01:9e:a9:5c:c4:8f:90:d2:df:47:2b:
        be:dc:7e:85:4f:6d:b4:88:bb:38:91:65:ea:1d:01:64:b2:8c:
        78:b3:ab:f5:16:aa:30:5d:62:d5:71:0e:ee:bf:e0:83:c1:76:
        bd:78:97:6b:27:ac:f6:ce:66:f5:a8:ad:65:a3:87:4f:e9:a0:
        c2:e0:e1:da:eb:b5:5e:3f:43:13:8d:50:1d:42:46:5b:9b:96:
        48:e7:0c:49:e6:c6:a0:ca:96:5e:40:4d:17:80:6c:0d:7f:ad:
        8f:e6:2c:13:d3:61:12:f0:cf:f8:de:0c:af:75:9c:81:11:15:
        9e:de:9a:b7:8b:22:70:e3:5f:d5:b5:70:a3:d3:c5:18:fc:5c:
        53:76:4a:0a:0e:92:40:a7:f3:06:3d:04:5b:14:af:4d:fa:b2:
        f1:37:c1:de:47:9e:47:62:0b:6e:be:90:d8:8a:7b:2f:d8:86:
        ac:15:9c:a4:60:dc:11:83:b7:02:a9:d2:a3:84:18:30:a5:8f:
        43:9a:bd:55:1c:a3:ff:02:0c:a8:6e:a8:10:23:ab:06:83:7e:
        b5:d3:23:ed:4a:08:12:4e:df:bd:03:9a:7e:90:6c:a6:e7:1f:
        28:ad:f1:e2:2d:74:48:f7:b7:5e:57:4f:35:bf:95:2c:f1:a6:
        0f:41:7a:c8

805793958 | 2024-04-19T01:55:10.957262

80 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "2825830996"
Last-Modified: Thu, 08 Sep 2016 22:11:19 GMT
Content-Length: 3356
Date: Fri, 19 Apr 2024 01:55:10 GMT
Server: lighttpd/1.4.35

805793958 | 2024-04-09T12:58:31.345395

443 / tcp

HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Type: text/html
Accept-Ranges: bytes
ETag: "2825830996"
Last-Modified: Thu, 08 Sep 2016 22:11:19 GMT
Content-Length: 3356
Date: Tue, 09 Apr 2024 12:58:31 GMT
Server: lighttpd/1.4.35

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:1d:b9:e8:e5:6e:d0:50:76:af:51:0a:8d:47:c2:3c:50
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Feb 23 21:06:39 2024 GMT
            Not After : May 23 21:06:38 2024 GMT
        Subject: CN=mirror.ossplanet.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:35:43:5f:cf:71:d1:65:6b:f1:61:99:be:
                    c4:1f:a7:86:f1:a3:4c:43:5c:aa:59:5c:48:2c:75:
                    e2:40:e7:82:18:05:ee:03:74:1b:37:4f:4c:21:a1:
                    22:df:30:60:75:56:13:f1:0c:ee:2f:a3:5d:3d:7a:
                    5b:b1:bd:be:d5:1e:3e:fb:b3:90:1c:58:26:24:df:
                    a8:c1:ca:bd:b2:75:88:bc:bf:04:3e:62:a0:fa:da:
                    95:43:60:52:1e:cc:b1:73:dd:f8:ad:60:cb:50:b7:
                    46:60:b1:7d:59:4d:86:44:6e:14:6e:bf:28:81:4a:
                    c1:9c:7a:e8:ac:f1:ea:1f:b0:73:ad:d4:c8:10:ef:
                    0d:b2:e6:5c:bf:d9:3a:cd:4d:e1:d5:f7:d3:2a:53:
                    44:0d:1c:a7:d6:b3:42:e8:dc:85:56:36:48:8d:59:
                    cb:ed:b8:76:d7:23:ae:b3:f6:8a:9a:f9:4e:cb:f7:
                    db:74:18:b8:4d:76:e4:08:3c:9c:7c:30:69:d4:67:
                    bf:fd:8f:ce:de:75:6c:19:03:49:2e:9d:6f:9f:23:
                    79:ca:9c:f1:3b:ff:55:7b:2c:69:2d:e1:34:b2:bb:
                    54:e6:76:f7:8c:9c:08:94:ba:78:67:34:fd:05:f6:
                    50:a8:e8:d9:8d:fd:7e:ee:15:48:f0:41:05:74:13:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D4:EF:20:40:8E:48:4E:FB:D7:F3:9B:9B:0E:F1:99:4F:C1:34:59:CB
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:ftp.ubuntu-tw.net, DNS:ftp.ubuntu-tw.org, DNS:mirror.ossplanet.net, DNS:ncnu.ftp.ubuntu-tw.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Feb 23 22:06:39.864 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5C:E6:DD:8C:08:D0:37:E2:3D:28:11:16:
                                14:CC:E1:8A:1C:73:9D:00:60:0A:30:FA:CD:C7:CD:04:
                                05:DB:4B:B8:02:21:00:F7:B0:BE:48:1B:2A:0D:7E:33:
                                C3:BA:12:60:E0:31:18:7B:F0:6F:2C:77:78:6F:F9:04:
                                12:4B:CD:FE:86:22:D7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Feb 23 22:06:40.293 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D3:16:DB:CC:EC:59:8D:68:14:C1:BB:
                                AD:82:74:B6:9A:EE:FF:10:E8:3E:8B:22:53:8C:80:F1:
                                0F:0F:37:C1:34:02:21:00:8B:6D:40:4F:72:DD:35:67:
                                FA:51:F2:8D:EF:DD:E2:F0:E8:C4:BB:53:F5:2B:AB:B7:
                                2A:32:69:E6:49:C9:B9:D7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        af:99:61:7b:11:6a:fb:e3:51:02:68:80:50:3b:72:0d:01:ea:
        dc:07:b2:47:71:91:49:2a:bf:d2:b9:26:d7:f4:c2:4c:95:89:
        e1:d3:5a:44:75:2b:de:f3:32:ba:40:90:15:c7:b1:f1:c4:50:
        b2:49:f8:41:bb:75:4f:92:64:c8:08:e8:ba:d2:c7:40:ad:b3:
        f7:ee:fb:17:fe:dc:9d:e1:e9:83:b0:5f:ab:42:f9:8c:aa:ca:
        91:64:a8:36:58:a7:e1:7f:40:26:c9:a4:2b:f7:95:67:73:20:
        52:eb:9a:96:72:6d:dc:c2:a2:f9:06:9c:ff:26:17:2a:cd:8b:
        9e:87:74:fd:c7:e2:27:26:bc:73:c9:cc:24:ef:a4:af:ab:b4:
        33:0e:26:4c:bc:b8:14:a3:d9:27:1c:b2:61:04:12:f1:9f:52:
        88:ab:69:8f:34:af:54:32:c0:83:3d:74:75:08:3e:02:63:23:
        9a:27:4a:c7:91:46:97:eb:e9:9a:37:da:34:9d:a6:98:c9:ef:
        28:11:11:20:fe:24:57:93:b8:b7:6c:dc:80:00:84:df:f0:07:
        30:18:a6:26:2d:c9:a5:b7:e7:1d:cc:39:d0:da:ab:74:34:8e:
        e6:ad:eb:7b:a5:f9:83:06:7d:46:de:db:54:b5:08:86:f9:0a:
        25:b6:35:0f

803522203 | 2024-04-16T13:00:17.642780

873 / tcp

@RSYNCD: 31.0\n\nalmalinux      	AlmaLinux
anthonos       	Anthon OS Linux
apache-dist    	apache-dist
armbian        	armbian packages and releases
CPAN           	Comprehensive Perl Archive Network
crystal-linux  	Crystal Linux
debian-multimedia	debian-multimedia Project
deepin         	Linux Deepin Archive Repository
deepin-cd      	Linux Deepin ISO
download.xpud.org	A Browser OS with an App Store.
dvwa           	DVWA - Damn Vulnerable Web Application
fdroid         	F-Droid - Free and Open Source Android App Repository
FreeBSD        	The FreeBSD Project
gnome          	GNOME Desktop Environment
gnu            	The Free Software Foundation (The GNU Project)
gutenberg      	Project Gutenberg: Free eBooks
kali           	Kali Linux Archive
kali-images    	Kali Linux ISO images
LDP            	The Linux Documentation Project
linuxmint      	Linux Mint
linuxmint-iso  	Linux Mint ISO
mariadb        	MariaDB
mirror         	All mirror archives
msys2          	MSYS2 - Software Distribution and Building Platform for Windows
nongnu         	NonGNU
peppermint     	Peppermint OS
qtproject      	Qt Project
raspbian       	Raspbian for RaspberryPi
raspbian-downloads	
regolith       	Regolith Linux
rockylinux     	Rocky Linux
ubuntu         	Ubuntu Archive Repository
ubuntu-cdimage 	cdimage.ubuntu.com
ubuntu-ports   	Ubuntu Ports
ubuntu-releases	releases.ubuntu.com
@RSYNCD: EXIT

163.22.17.70

Last Seen: 2024-04-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1980272093 | 2024-04-16T13:09:41.728536
21 / tcp

47403611 | 2024-04-16T07:41:24.566067
25 / tcp

Postfix smtpd

805793958 | 2024-04-19T01:55:10.957262
80 / tcp

lighttpd1.4.35

805793958 | 2024-04-09T12:58:31.345395
443 / tcp

lighttpd1.4.35

803522203 | 2024-04-16T13:00:17.642780
873 / tcp

rsyncd31.0

Products

Pricing

Contact Us

163.22.17.70

Last Seen: 2024-04-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1980272093 | 2024-04-16T13:09:41.728536 21 / tcp

47403611 | 2024-04-16T07:41:24.566067 25 / tcp

Postfix smtpd

805793958 | 2024-04-19T01:55:10.957262 80 / tcp

lighttpd1.4.35

805793958 | 2024-04-09T12:58:31.345395 443 / tcp

lighttpd1.4.35

803522203 | 2024-04-16T13:00:17.642780 873 / tcp

rsyncd31.0

Products

Pricing

Contact Us

-1980272093 | 2024-04-16T13:09:41.728536
21 / tcp

47403611 | 2024-04-16T07:41:24.566067
25 / tcp

805793958 | 2024-04-19T01:55:10.957262
80 / tcp

805793958 | 2024-04-09T12:58:31.345395
443 / tcp

803522203 | 2024-04-16T13:00:17.642780
873 / tcp