From: Declan Ingram <dingram(at)itacsecurity.com>
To: moderators(at)osvdb.org
Date: Mon, 03 Apr 2006 14:33:40 +1000
Subject: [OSVDB Mods] [Change Request] 630: Microsoft IIS Internal IP Address/Hostname Disclosure

Hi, 

This also effects IIS 6. As below, however I have removed some sensitive
stuff.

user@host:/dir$ telnet example.com 80
Trying xx.xx.xx.xxx...
Connected to xx.xx.xx.xxx.
Escape character is '^]'.
HEAD /images HTTP/1.0

HTTP/1.1 301 Moved Permanently
Content-Length: 151
Content-Type: text/html
Location: http://192.168.0.1/images/
Server: Microsoft-IIS/6.0
Date: Mon, 03 Apr 2006 04:31:22 GMT
Connection: close

Connection closed by foreign host.