当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0107268

漏洞标题：中国联通某省域传送漏洞

相关厂商：中国联通

漏洞作者： 几何黑店

提交时间：2015-04-14 10:37

修复时间：2015-05-30 17:34

公开时间：2015-05-30 17:34

漏洞类型：系统/服务运维配置不当

危害等级：低

自评Rank：1

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-04-14： 细节已通知厂商并且等待厂商处理中
2015-04-15： 厂商已经确认，细节仅向厂商公开
2015-04-25： 细节向核心白帽子及相关领域专家公开
2015-05-05： 细节向普通白帽子公开
2015-05-15： 细节向实习白帽子公开
2015-05-30： 细节向公众公开

简要描述：

中国联通某省域传送漏洞

详细说明：

dnsenum gzuni.com
dnsenum.pl VERSION:1.2.3
-----   gzuni.com   -----
Host's addresses:
__________________
Name Servers:
______________
dns.gzuni.com.                           900      IN    A        211.96.6.2
ns2.gzuni.com.                           137      IN    A        58.248.49.142
Mail (MX) Servers:
___________________
mail.gzuni.com.                          8        IN    A        58.248.49.138
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for gzuni.com on dns.gzuni.com ... 
AXFR record query failed: connection failed
Trying Zone Transfer for gzuni.com on ns2.gzuni.com ... 
gzuni.com.                               300      IN    SOA      ns1.gzuni.com.
gzuni.com.                               300      IN    NS       dns.gzuni.com.
gzuni.com.                               300      IN    NS       ns2.gzuni.com.
gzuni.com.                               300      IN    MX               10
10010.gzuni.com.                         300      IN    A        58.248.49.135
2Ga.gzuni.com.                           300      IN    A        58.248.49.139
2Gb.gzuni.com.                           300      IN    A        58.248.49.140
3g.gzuni.com.                            300      IN    A        58.248.49.139
3g1.gzuni.com.                           300      IN    A        58.248.49.140
3Ga.gzuni.com.                           300      IN    A        58.248.49.139
3Gb.gzuni.com.                           300      IN    A        58.248.49.140
app.gzuni.com.                           300      IN    A        58.248.49.139
app.gzuni.com.                           300      IN    A        58.248.49.140
bz.gzuni.com.                            300      IN    A        58.248.49.139
bz.gzuni.com.                            300      IN    A        58.248.49.140
bz1.gzuni.com.                           300      IN    A        58.248.49.139
bz1.gzuni.com.                           300      IN    A        58.248.49.140
cl.gzuni.com.                            300      IN    A        58.248.49.140
cost.gzuni.com.                          300      IN    A        58.248.49.139
data.gzuni.com.                          300      IN    A        58.248.49.140
dd.gzuni.com.                            300      IN    A        58.248.49.140
dd1.gzuni.com.                           300      IN    A        58.248.49.140
dl.gzuni.com.                            300      IN    A        58.248.49.117
dns.gzuni.com.                           300      IN    A        211.96.6.2
dream.gzuni.com.                         300      IN    A        58.248.49.117
dx.gzuni.com.                            300      IN    A        58.248.49.140
error.gzuni.com.                         300      IN    A        58.248.49.139
es.gzuni.com.                            300      IN    A        120.85.133.140
esale.gzuni.com.                         300      IN    A        58.248.17.23
fengling.gzuni.com.                      300      IN    A        122.13.0.57
gg3.gzuni.com.                           300      IN    A        122.13.2.29
ggg.gzuni.com.                           300      IN    A        58.248.49.140
gi.gzuni.com.                            300      IN    A        120.83.2.20
gw.gzuni.com.                            300      IN    A        58.248.49.139
gzres.gzuni.com.                         300      IN    A        120.83.2.21
gzwifi.gzuni.com.                        300      IN    A        58.248.49.140
hd.gzuni.com.                            300      IN    A        58.248.49.139
hr.gzuni.com.                            300      IN    A        58.248.49.139
ican.gzuni.com.                          300      IN    A        122.13.0.63
*.ican.gzuni.com.                        300      IN    A        122.13.0.63
id.gzuni.com.                            300      IN    A        58.248.49.139
id.gzuni.com.                            300      IN    A        58.248.49.140
id2.gzuni.com.                           300      IN    A        58.248.49.140
jd.gzuni.com.                            300      IN    A        58.248.49.139
jd2.gzuni.com.                           300      IN    A        58.248.49.139
jd9.gzuni.com.                           300      IN    A        58.248.49.140
jf.gzuni.com.                            300      IN    A        58.248.49.139
jf.gzuni.com.                            300      IN    A        58.248.49.140
jmt.gzuni.com.                           300      IN    A        163.177.26.28
kc1.gzuni.com.                           300      IN    A        58.248.49.139
kc2.gzuni.com.                           300      IN    A        58.248.49.140
kfjl.gzuni.com.                          300      IN    A        58.248.49.139
kfjl.gzuni.com.                          300      IN    A        58.248.49.140
m.gzuni.com.                             300      IN    A        58.248.49.140
mail.gzuni.com.                          300      IN    A        58.248.49.138
ns2.gzuni.com.                           300      IN    A        58.248.49.142
o.gzuni.com.                             300      IN    A        58.249.55.118
oa.gzuni.com.                            300      IN    A        58.248.49.139
oa.gzuni.com.                            300      IN    A        58.248.49.140
oa1.gzuni.com.                           300      IN    A        58.248.49.139
oa1.gzuni.com.                           300      IN    A        58.248.49.140
omc.gzuni.com.                           300      IN    A        58.248.49.139
project.gzuni.com.                       300      IN    A        58.248.49.140
qcs.gzuni.com.                           300      IN    A        58.248.49.139
qcs.gzuni.com.                           300      IN    A        58.248.49.140
wzf.qcs.gzuni.com.                       300      IN    A        122.13.2.159
sn.gzuni.com.                            300      IN    A        58.248.49.139
sports.gzuni.com.                        300      IN    A        58.248.49.139
ssl.gzuni.com.                           300      IN    A        58.248.49.139
ssl.gzuni.com.                           300      IN    A        58.248.49.140
store.gzuni.com.                         300      IN    A        58.248.49.139
store.gzuni.com.                         300      IN    A        58.248.49.140
stwxhb.gzuni.com.                        300      IN    A        58.248.17.28
t.gzuni.com.                             300      IN    A        58.248.49.140
temp.gzuni.com.                          300      IN    A        58.248.49.140
tp.gzuni.com.                            300      IN    A        58.248.49.140
vote.gzuni.com.                          300      IN    A        58.248.29.197
vshop.gzuni.com.                         300      IN    A        58.248.49.139
vshop.gzuni.com.                         300      IN    A        58.248.49.140
wap.gzuni.com.                           300      IN    A        58.248.49.140
weixin.gzuni.com.                        300      IN    A        58.248.29.199
*.weixin.gzuni.com.                      300      IN    A        58.248.29.199
app.weixin.gzuni.com.                    300      IN    A        58.248.49.139
app.weixin.gzuni.com.                    300      IN    A        58.248.49.140
wl.gzuni.com.                            300      IN    A        58.248.49.140
wo.gzuni.com.                            300      IN    A        58.248.49.140
www.gzuni.com.                           300      IN    A        58.248.49.140
wx.gzuni.com.                            300      IN    A        58.248.49.117
wxapp.gzuni.com.                         300      IN    A        58.248.49.139
wxapp.gzuni.com.                         300      IN    A        58.248.49.140
xm.gzuni.com.                            300      IN    A        58.248.49.139
xm.gzuni.com.                            300      IN    A        58.248.49.140
xy.gzuni.com.                            300      IN    A        58.248.49.139
zc.gzuni.com.                            300      IN    A        58.248.49.140
zglt.gzuni.com.                          300      IN    A        58.248.48.139
zhaopin.gzuni.com.                       300      IN    A        58.248.29.197


QQ图片20150411121815.jpg


QQ图片20150411121825.jpg


QQ图片20150411121834.jpg


QQ图片20150411121851.png


QQ图片20150411122005.png


QQ图片20150411122104.png

漏洞证明：

还有个心脏出血
http://gi.gzuni.com 443

QQ图片20150411121711.png

修复方案：

你懂的

版权声明：转载请注明来源 几何黑店@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：8

确认时间：2015-04-15 17:32

厂商回复：

CNVD确认并复现所述漏洞情况，已经转由CNCERT下发给广东分中心，由广东分中心后续协调网站管理单位处置。

最新状态：

暂无