Identifying a buggy SFTP server found at an archaeological dig
Peter Gutmann <[email protected]> Tue, 7 May 2024 12:18:44 +0000
| Newsgroups | gmane.ietf.secsh |
|---|---|
| Message-ID | <ME0P300MB071388EBC6BA22B55030FC3BEEE42@ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM> |
I've had a report of someone having problems connecting to something that= =0Aidentifies itself with the totally useless "SSH-2.0-FTP Server ready". = As=0Asoon as it sees a SSH_MSG_KEY_DH_GEX_REQUEST it disconnects, wanting t= o see a=0ASSH_MSG_KEX_DH_GEX_REQUEST_OLD from around 20 years ago instead (= and yes, it=0Aalso does blowfish, 3des, rsa1024-sha1, hmac-ripemd160, and a= bunch of other=0Astuff).=0A=0ADoes anyone know what this is? And it wasn'= t really found at an=0Aarchaeological dig, it's a live production server in= active use.=0A=0APeter.=0A