当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2013-025445

漏洞标题:西北工业大学DNS域传送漏洞

相关厂商:西北工业大学

漏洞作者: Alcar

提交时间:2013-06-08 13:38

修复时间:2013-07-23 13:39

公开时间:2013-07-23 13:39

漏洞类型:网络敏感信息泄漏

危害等级:中

自评Rank:5

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2013-06-08: 积极联系厂商并且等待厂商认领中,细节不对外公开
2013-07-23: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

西北工业大学DNS服务器配置不当导致DNS域传送漏洞
分别为dns.nwpu.edu.cn,dns2.nwpu.edu.cn

详细说明:

root@kali:~# dnsenum nwpu.edu.cn
dnsenum.pl VERSION:1.2.2
----- nwpu.edu.cn -----
Host's addresses:
__________________
Name Servers:
______________
dns.nwpu.edu.cn 69087 IN A 202.117.80.2
dns3.nwpu.edu.cn 0 IN A 202.117.80.3
dns2.nwpu.edu.cn 0 IN A 202.117.80.2
dns1.nwpu.edu.cn 68771 IN A 202.117.80.3
Mail (MX) Servers:
___________________
nwpu03.nwpu.edu.cn 64911 IN A 202.117.80.4
nwpu03.nwpu.edu.cn 64911 IN A 202.117.80.4
nwpu03.nwpu.edu.cn 64911 IN A 202.117.80.4
nwpu03.nwpu.edu.cn 64911 IN A 202.117.80.4
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for nwpu.edu.cn on dns.nwpu.edu.cn ...
nwpu.edu.cn 86400 IN SOA
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 600 IN MX
nwpu.edu.cn 600 IN MX
*.nwpu.edu.cn 86400 IN A 222.24.192.45
amec.nwpu.edu.cn 86400 IN NS
netserver.amec.nwpu.edu.cn 86400 IN A 202.117.85.2
anti-virus.nwpu.edu.cn 86400 IN A 222.24.211.30
apps.nwpu.edu.cn 86400 IN A 222.24.192.82
archives.nwpu.edu.cn 86400 IN A 222.24.192.70
asn.nwpu.edu.cn 86400 IN A 202.117.80.1
bbs.nwpu.edu.cn 86400 IN A 222.24.192.61
campus.nwpu.edu.cn 86400 IN A 222.24.192.52
cas.nwpu.edu.cn 86400 IN A 222.24.192.81
ccc2013.nwpu.edu.cn 86400 IN A 222.24.192.44
ns.ce.nwpu.edu.cn 86400 IN A 202.117.88.181
cert.nwpu.edu.cn 86400 IN CNAME
cifc2011.nwpu.edu.cn 86400 IN A 222.24.212.130
cme.nwpu.edu.cn 86400 IN NS
cms.nwpu.edu.cn 86400 IN A 222.24.211.60
csctc.nwpu.edu.cn 86400 IN A 222.24.192.39
cw.nwpu.edu.cn 86400 IN A 202.117.87.162
db.nwpu.edu.cn 86400 IN A 202.117.80.231
dcel.nwpu.edu.cn 86400 IN NS
www.dcel.nwpu.edu.cn 86400 IN A 202.117.85.130
denglun.nwpu.edu.cn 86400 IN A 202.117.80.24
dns.nwpu.edu.cn 86400 IN A 202.117.80.2
dns1.nwpu.edu.cn 86400 IN A 202.117.80.3
dns2.nwpu.edu.cn 86400 IN A 61.150.43.14
dns3.nwpu.edu.cn 86400 IN A 61.150.43.13
dzzf.nwpu.edu.cn 86400 IN A 222.24.201.133
eased.nwpu.edu.cn 86400 IN A 202.117.248.41
epaper.nwpu.edu.cn 86400 IN A 222.24.192.38
eqmanager1.nwpu.edu.cn 600 IN A 202.117.80.31
eqmanager2.nwpu.edu.cn 600 IN A 202.117.80.31
etv.nwpu.edu.cn 86400 IN A 202.117.80.20
fee.nwpu.edu.cn 86400 IN CNAME
grs.nwpu.edu.cn 86400 IN A 222.24.211.70
gw.nwpu.edu.cn 86400 IN A 202.117.80.231
hongtd.nwpu.edu.cn 86400 IN A 222.24.192.52
houqin.nwpu.edu.cn 600 IN A 10.129.29.2
hpc.nwpu.edu.cn 86400 IN A 202.117.249.5
hq.nwpu.edu.cn 86400 IN A 202.117.255.106
i631.nwpu.edu.cn 86400 IN A 202.117.255.200
icpt2011.nwpu.edu.cn 86400 IN A 222.24.192.45
imap.nwpu.edu.cn 86400 IN CNAME
info.nwpu.edu.cn 86400 IN A 222.24.192.51
job.nwpu.edu.cn 600 IN A 222.24.211.73
jobszqy.nwpu.edu.cn 86400 IN A 222.24.211.73
jpkc.nwpu.edu.cn 86400 IN A 202.117.80.9
jw.nwpu.edu.cn 86400 IN A 222.24.192.69
learn.nwpu.edu.cn 86400 IN A 202.117.80.212
ftpserver.lib.nwpu.edu.cn 86400 IN A 202.117.255.179
webserver.lib.nwpu.edu.cn 86400 IN CNAME
www.lib.nwpu.edu.cn 86400 IN A 202.117.255.177
lifelab.nwpu.edu.cn 86400 IN A 202.117.85.11
login.nwpu.edu.cn 86400 IN CNAME
mail.nwpu.edu.cn 600 IN A 202.117.80.4
mail.nwpu.edu.cn 600 IN MX
mail.nwpu.edu.cn 600 IN MX
mailbak.nwpu.edu.cn 86400 IN A 202.117.80.6
maildat.nwpu.edu.cn 86400 IN A 202.117.80.5
material.nwpu.edu.cn 86400 IN NS
dns.material.nwpu.edu.cn 86400 IN A 202.117.95.2
www.mba.nwpu.edu.cn 86400 IN CNAME
mcm.nwpu.edu.cn 86400 IN A 222.24.192.52
mems.nwpu.edu.cn 86400 IN A 202.117.85.138
mun.nwpu.edu.cn 86400 IN A 202.117.88.135
netc-yx.nwpu.edu.cn 86400 IN A 202.117.83.90
newcampus.nwpu.edu.cn 86400 IN A 222.24.192.52
news.nwpu.edu.cn 86400 IN A 222.24.192.45
npunecas.nwpu.edu.cn 86400 IN NS
webcomp.npunecas.nwpu.edu.cn 86400 IN A 202.117.85.146
nwpu03.nwpu.edu.cn 86400 IN A 202.117.80.4
nwpudb2.nwpu.edu.cn 86400 IN A 222.24.210.149
poj.nwpu.edu.cn 86400 IN A 192.168.0.248
pop3.nwpu.edu.cn 86400 IN CNAME
portal.nwpu.edu.cn 600 IN A 222.24.192.74
portal1.nwpu.edu.cn 600 IN A 222.24.192.31
portal2.nwpu.edu.cn 600 IN A 222.24.192.32
rei.nwpu.edu.cn 86400 IN A 202.117.85.10
saip.nwpu.edu.cn 86400 IN NS
saipserver.saip.nwpu.edu.cn 86400 IN A 202.117.85.72
search.nwpu.edu.cn 86400 IN A 222.24.192.54
self.nwpu.edu.cn 86400 IN A 202.117.80.218
sfzx.nwpu.edu.cn 86400 IN A 202.117.80.9
ski-ana.nwpu.edu.cn 86400 IN A 202.117.86.2
smtp.nwpu.edu.cn 86400 IN CNAME
som.nwpu.edu.cn 86400 IN A 202.117.85.13
spacebiotech.nwpu.edu.cn 86400 IN A 10.128.6.5
staff.nwpu.edu.cn 86400 IN MX
staff.nwpu.edu.cn 86400 IN MX
sysc.nwpu.edu.cn 86400 IN A 202.117.85.136
test.nwpu.edu.cn 86400 IN A 222.24.192.29
tijianzhan.nwpu.edu.cn 86400 IN A 202.117.85.140
tuanwei.nwpu.edu.cn 86400 IN A 202.117.88.186
view.nwpu.edu.cn 86400 IN A 222.24.192.52
vpn.nwpu.edu.cn 86400 IN A 202.117.80.11
web.nwpu.edu.cn 600 IN A 222.24.192.44
www.nwpu.edu.cn 600 IN A 222.24.192.45
xbgf.nwpu.edu.cn 86400 IN A 202.117.85.14
xszy.nwpu.edu.cn 86400 IN A 222.24.192.60
xyh.nwpu.edu.cn 86400 IN A 222.24.192.76
yanhui.nwpu.edu.cn 86400 IN A 222.24.192.52
yingxin.nwpu.edu.cn 86400 IN A 222.24.211.31
ykt.nwpu.edu.cn 86400 IN A 222.24.201.132
yzb.nwpu.edu.cn 600 IN A 202.117.85.3
zsb.nwpu.edu.cn 86400 IN A 202.117.87.130
zygx.nwpu.edu.cn 86400 IN A 202.117.80.9
dns.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns1.nwpu.edu.cn ...
AXFR record query failed: NOERROR
dns1.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns3.nwpu.edu.cn ...
AXFR record query failed: NOERROR
dns3.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns2.nwpu.edu.cn ...
nwpu.edu.cn 86400 IN SOA
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 86400 IN NS
nwpu.edu.cn 600 IN MX
nwpu.edu.cn 600 IN MX
*.nwpu.edu.cn 86400 IN A 222.24.192.45
amec.nwpu.edu.cn 86400 IN NS
netserver.amec.nwpu.edu.cn 86400 IN A 202.117.85.2
anti-virus.nwpu.edu.cn 86400 IN A 222.24.211.30
apps.nwpu.edu.cn 86400 IN A 222.24.192.82
archives.nwpu.edu.cn 86400 IN A 222.24.192.70
asn.nwpu.edu.cn 86400 IN A 202.117.80.1
bbs.nwpu.edu.cn 86400 IN A 222.24.192.61
campus.nwpu.edu.cn 86400 IN A 222.24.192.52
cas.nwpu.edu.cn 86400 IN A 222.24.192.81
ccc2013.nwpu.edu.cn 86400 IN A 222.24.192.44
ns.ce.nwpu.edu.cn 86400 IN A 202.117.88.181
cert.nwpu.edu.cn 86400 IN CNAME
cifc2011.nwpu.edu.cn 86400 IN A 222.24.212.130
cme.nwpu.edu.cn 86400 IN NS
cms.nwpu.edu.cn 86400 IN A 222.24.211.60
csctc.nwpu.edu.cn 86400 IN A 222.24.192.39
cw.nwpu.edu.cn 86400 IN A 202.117.87.162
db.nwpu.edu.cn 86400 IN A 202.117.80.231
dcel.nwpu.edu.cn 86400 IN NS
www.dcel.nwpu.edu.cn 86400 IN A 202.117.85.130
denglun.nwpu.edu.cn 86400 IN A 202.117.80.24
dns.nwpu.edu.cn 86400 IN A 202.117.80.2
dns1.nwpu.edu.cn 86400 IN A 202.117.80.3
dns2.nwpu.edu.cn 86400 IN A 61.150.43.14
dns3.nwpu.edu.cn 86400 IN A 61.150.43.13
dzzf.nwpu.edu.cn 86400 IN A 222.24.201.133
eased.nwpu.edu.cn 86400 IN A 202.117.248.41
epaper.nwpu.edu.cn 86400 IN A 222.24.192.38
eqmanager1.nwpu.edu.cn 600 IN A 202.117.80.31
eqmanager2.nwpu.edu.cn 600 IN A 202.117.80.31
etv.nwpu.edu.cn 86400 IN A 202.117.80.20
fee.nwpu.edu.cn 86400 IN CNAME
grs.nwpu.edu.cn 86400 IN A 222.24.211.70
gw.nwpu.edu.cn 86400 IN A 202.117.80.231
hongtd.nwpu.edu.cn 86400 IN A 222.24.192.52
houqin.nwpu.edu.cn 600 IN A 10.129.29.2
hpc.nwpu.edu.cn 86400 IN A 202.117.249.5
hq.nwpu.edu.cn 86400 IN A 202.117.255.106
i631.nwpu.edu.cn 86400 IN A 202.117.255.200
icpt2011.nwpu.edu.cn 86400 IN A 222.24.192.45
imap.nwpu.edu.cn 86400 IN CNAME
info.nwpu.edu.cn 86400 IN A 222.24.192.51
job.nwpu.edu.cn 600 IN A 222.24.211.73
jobszqy.nwpu.edu.cn 86400 IN A 222.24.211.73
jpkc.nwpu.edu.cn 86400 IN A 202.117.80.9
jw.nwpu.edu.cn 86400 IN A 222.24.192.69
learn.nwpu.edu.cn 86400 IN A 202.117.80.212
ftpserver.lib.nwpu.edu.cn 86400 IN A 202.117.255.179
webserver.lib.nwpu.edu.cn 86400 IN CNAME
www.lib.nwpu.edu.cn 86400 IN A 202.117.255.177
lifelab.nwpu.edu.cn 86400 IN A 202.117.85.11
login.nwpu.edu.cn 86400 IN CNAME
mail.nwpu.edu.cn 600 IN A 202.117.80.4
mail.nwpu.edu.cn 600 IN MX
mail.nwpu.edu.cn 600 IN MX
mailbak.nwpu.edu.cn 86400 IN A 202.117.80.6
maildat.nwpu.edu.cn 86400 IN A 202.117.80.5
material.nwpu.edu.cn 86400 IN NS
dns.material.nwpu.edu.cn 86400 IN A 202.117.95.2
www.mba.nwpu.edu.cn 86400 IN CNAME
mcm.nwpu.edu.cn 86400 IN A 222.24.192.52
mems.nwpu.edu.cn 86400 IN A 202.117.85.138
mun.nwpu.edu.cn 86400 IN A 202.117.88.135
netc-yx.nwpu.edu.cn 86400 IN A 202.117.83.90
newcampus.nwpu.edu.cn 86400 IN A 222.24.192.52
news.nwpu.edu.cn 86400 IN A 222.24.192.45
npunecas.nwpu.edu.cn 86400 IN NS
webcomp.npunecas.nwpu.edu.cn 86400 IN A 202.117.85.146
nwpu03.nwpu.edu.cn 86400 IN A 202.117.80.4
nwpudb2.nwpu.edu.cn 86400 IN A 222.24.210.149
poj.nwpu.edu.cn 86400 IN A 192.168.0.248
pop3.nwpu.edu.cn 86400 IN CNAME
portal.nwpu.edu.cn 600 IN A 222.24.192.74
portal1.nwpu.edu.cn 600 IN A 222.24.192.31
portal2.nwpu.edu.cn 600 IN A 222.24.192.32
rei.nwpu.edu.cn 86400 IN A 202.117.85.10
saip.nwpu.edu.cn 86400 IN NS
saipserver.saip.nwpu.edu.cn 86400 IN A 202.117.85.72
search.nwpu.edu.cn 86400 IN A 222.24.192.54
self.nwpu.edu.cn 86400 IN A 202.117.80.218
sfzx.nwpu.edu.cn 86400 IN A 202.117.80.9
ski-ana.nwpu.edu.cn 86400 IN A 202.117.86.2
smtp.nwpu.edu.cn 86400 IN CNAME
som.nwpu.edu.cn 86400 IN A 202.117.85.13
spacebiotech.nwpu.edu.cn 86400 IN A 10.128.6.5
staff.nwpu.edu.cn 86400 IN MX
staff.nwpu.edu.cn 86400 IN MX
sysc.nwpu.edu.cn 86400 IN A 202.117.85.136
test.nwpu.edu.cn 86400 IN A 222.24.192.29
tijianzhan.nwpu.edu.cn 86400 IN A 202.117.85.140
tuanwei.nwpu.edu.cn 86400 IN A 202.117.88.186
view.nwpu.edu.cn 86400 IN A 222.24.192.52
vpn.nwpu.edu.cn 86400 IN A 202.117.80.11
web.nwpu.edu.cn 600 IN A 222.24.192.44
www.nwpu.edu.cn 600 IN A 222.24.192.45
xbgf.nwpu.edu.cn 86400 IN A 202.117.85.14
xszy.nwpu.edu.cn 86400 IN A 222.24.192.60
xyh.nwpu.edu.cn 86400 IN A 222.24.192.76
yanhui.nwpu.edu.cn 86400 IN A 222.24.192.52
yingxin.nwpu.edu.cn 86400 IN A 222.24.211.31
ykt.nwpu.edu.cn 86400 IN A 222.24.201.132
yzb.nwpu.edu.cn 600 IN A 202.117.85.3
zsb.nwpu.edu.cn 86400 IN A 202.117.87.130
zygx.nwpu.edu.cn 86400 IN A 202.117.80.9

漏洞证明:

Screenshot from 2013-06-08 13:30:51.png


Screenshot from 2013-06-08 13:31:29.png


修复方案:

更改dns服务器设置

版权声明:转载请注明来源 Alcar@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝