当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2010-0776

漏洞标题:淘宝网dns域传送泄露漏洞

相关厂商:淘宝网

漏洞作者: 结界师

提交时间:2010-11-02 15:48

修复时间:2010-12-02 18:00

公开时间:2010-12-02 18:00

漏洞类型:网络敏感信息泄漏

危害等级:中

自评Rank:10

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2010-11-02: 细节已通知厂商并且等待厂商处理中
2010-11-02: 厂商已经确认,细节仅向厂商公开
2010-11-12: 细节向核心白帽子及相关领域专家公开
2010-11-22: 细节向普通白帽子公开
2010-12-02: 细节向实习白帽子公开
2010-12-02: 细节向公众公开

简要描述:

taobao的dns配置存在安全漏洞,导致攻击者可以下载所有的dns信息,为后续的入侵提供帮助

详细说明:

漏洞证明:

Using domain server:
Name: ns3.taobao.com
Address: 121.0.23.188#53
Aliases:
taobao.com name server ns1.taobao.com.
taobao.com name server ns2.taobao.com.
taobao.com name server ns3.taobao.com.
taobao.com has address 115.238.23.241
taobao.com has address 121.14.24.241
crm.1.taobao.com has address 119.38.217.76
acookie.taobao.com has address 119.42.233.239
acookie.taobao.com has address 119.42.233.240
allyes.taobao.com has address 121.0.25.152
allyesafp.taobao.com has address 121.0.25.151
allyespool.taobao.com has address 218.83.153.235
allyespool.taobao.com has address 218.83.153.238
allyespool.taobao.com has address 218.83.153.239
allyespool.taobao.com has address 218.83.153.240
allyespool.taobao.com has address 218.83.153.243
allyespool.taobao.com has address 218.83.153.244
allyespool.taobao.com has address 218.83.153.245
allyespool.taobao.com has address 218.83.153.246
amos1.taobao.com has address 121.0.30.17
auth.api.taobao.com has address 110.75.1.96
internal.api.taobao.com has address 110.75.1.20
internal.api.taobao.com has address 115.124.17.149
app.taobao.com has address 115.124.17.24
apprst.taobao.com has address 121.0.25.160
apps.taobao.com has address 121.0.22.6
assistant.taobao.com has address 110.75.1.53
call.b2c.taobao.com has address 121.0.23.97
ba.taobao.com has address 110.75.2.82
ba.taobao.com has address 115.124.17.51
bangpai.taobao.com has address 110.75.1.84
bangpai.taobao.com has address 115.124.17.41
baoxian.taobao.com has address 110.75.1.82
bundle.taobao.com has address 110.75.1.44
bundle.taobao.com has address 115.124.17.169
cacti.taobao.com has address 115.124.17.26
campus.taobao.com has address 110.75.125.24
centerafp.taobao.com has address 121.0.25.153
chongzhi.taobao.com has address 110.75.1.21
chongzhi.taobao.com has address 115.124.17.151
mon.pe.cm5.taobao.com has address 110.75.6.1
corp.taobao.com name server ns1.alimama.com.
corp.taobao.com name server ns2.alimama.com.
cpgw.taobao.com has address 110.75.1.38
cpgw.taobao.com has address 121.0.28.13
ctu.taobao.com has address 121.0.25.199
api.ctu.taobao.com has address 115.124.17.12
daigou.taobao.com has address 110.75.2.109
daogou.taobao.com has address 110.75.167.70
data.taobao.com has address 119.42.227.210
dating.taobao.com has address 110.75.1.119
dating.taobao.com has address 115.124.17.31
video.daxue.taobao.com has address 110.75.125.61
design.taobao.com has address 110.75.1.124
design.taobao.com has address 115.124.17.3
dian.taobao.com has address 110.75.127.2
dingyue.taobao.com has address 110.75.2.73
dingyue.taobao.com has address 115.124.17.17
discusscenter.taobao.com has address 110.75.2.84
discusscenter.taobao.com has address 115.124.17.53
dm.taobao.com has address 208.70.138.201
eps.dm.taobao.com has address 208.70.139.25
mta.eps.dm.taobao.com has address 198.31.63.138
mta.eps.dm.taobao.com has address 198.31.63.139
mta.eps.dm.taobao.com has address 198.31.63.140
mta.eps.dm.taobao.com has address 198.31.63.141
mta.eps.dm.taobao.com has address 198.31.63.142
mta.eps.dm.taobao.com has address 198.31.63.143
mta.eps.dm.taobao.com has address 198.31.63.144
mta.eps.dm.taobao.com has address 198.31.63.145
mta.eps.dm.taobao.com has address 198.31.63.146
mta.eps.dm.taobao.com has address 198.31.63.147
mta.dm.taobao.com has address 198.31.63.148
mta.dm.taobao.com has address 198.31.63.149
mta.dm.taobao.com has address 198.31.63.150
mta.dm.taobao.com has address 198.31.63.151
mta.dm.taobao.com has address 198.31.63.152
mta.dm.taobao.com has address 198.31.63.153
mta.dm.taobao.com has address 198.31.63.154
mta.dm.taobao.com has address 198.31.63.155
mta.dm.taobao.com has address 198.31.63.156
mta.dm.taobao.com has address 198.31.63.157
mta.dm.taobao.com has address 198.31.63.158
mta.dm.taobao.com has address 198.31.63.159
mta.dm.taobao.com has address 198.31.63.160
mta.dm.taobao.com has address 198.31.63.161
mta.dm.taobao.com has address 198.31.63.162
mta.dm.taobao.com has address 198.31.63.163
mta.dm.taobao.com has address 198.31.63.164
mta.dm.taobao.com has address 198.31.63.165
mta.dm.taobao.com has address 198.31.63.166
mta.dm.taobao.com has address 198.31.63.167
mta.dm.taobao.com has address 198.31.63.168
mta.dm.taobao.com has address 198.31.63.169
mta.dm.taobao.com has address 198.31.63.170
mta.dm.taobao.com has address 198.31.63.171
mta.dm.taobao.com has address 198.31.63.172
mta.dm.taobao.com has address 198.31.63.173
mta.dm.taobao.com has address 198.31.63.174
mta.dm.taobao.com has address 198.31.63.175
mta.dm.taobao.com has address 198.31.63.176
mta.dm.taobao.com has address 198.31.63.242
ecrm.taobao.com has address 110.75.1.126
ecrm.taobao.com has address 115.124.17.38
ecs1.taobao.com has address 115.124.17.49
ecs2.taobao.com has address 110.75.2.81
maria.email.taobao.com has address 121.0.25.141
postoffice.email.taobao.com has address 121.0.25.142
esupply.taobao.com has address 110.75.1.97
esupply.taobao.com has address 121.0.28.46
etao.taobao.com has address 121.0.28.100
antispam.feedback.taobao.com has address 110.75.12.68
search.feedback.taobao.com has address 121.0.28.29
fenxiao.taobao.com has address 121.0.28.37
fuwu.taobao.com has address 110.75.2.216
fx.taobao.com has address 110.75.2.93
go.taobao.com has address 115.124.17.203
good.taobao.com has address 110.75.2.197
gslb.taobao.com name server gslbns1.taobao.com.
gslb.taobao.com name server gslbns2.taobao.com.
gslb.taobao.com name server gslbns3.taobao.com.
gslbns1.taobao.com has address 121.0.23.218
gslbns2.taobao.com has address 115.124.17.70
gslbns3.taobao.com has address 110.75.3.193
hao.taobao.com has address 110.75.2.104
hers.taobao.com has address 61.164.145.41
list.hitao.taobao.com has address 110.75.1.28
list.hitao.taobao.com has address 115.124.17.131
mx2.hk.taobao.com has address 119.38.208.225
hua.taobao.com has address 110.75.2.101
hua.taobao.com has address 110.75.13.1
idaogous.taobao.com has address 121.0.28.98
ilottery.taobao.com has address 110.75.13.8
ims.taobao.com has address 121.0.25.194
cnc.ims.taobao.com has address 121.0.25.194
ctc.ims.taobao.com has address 121.0.25.194
imsvip.taobao.com has address 121.0.25.195
search.info.taobao.com has address 121.0.28.23
gate.ishop.taobao.com has address 121.0.23.19
isp.taobao.com name server ns1.isp.taobao.com.
isp.taobao.com name server ns2.isp.taobao.com.
isp.taobao.com name server ns3.isp.taobao.com.
ns1.isp.taobao.com has address 121.0.28.186
ns2.isp.taobao.com has address 121.0.23.186
ns3.isp.taobao.com has address 121.0.28.186
jhfc.taobao.com has address 110.75.2.93
admin.jianghu.taobao.com has address 110.75.1.77
app.jianghu.taobao.com has address 110.75.1.71
bid.jianghu.taobao.com has address 110.75.2.217
blog.jianghu.taobao.com has address 110.75.1.100
comment.jianghu.taobao.com has address 110.75.1.75
count.jianghu.taobao.com has address 110.75.2.83
jiwai.jianghu.taobao.com has address 110.75.1.71
m.jianghu.taobao.com has address 110.75.2.193
m1.jianghu.taobao.com has address 110.75.14.166
mission.jianghu.taobao.com has address 110.75.1.73
partner.jianghu.taobao.com has address 110.75.1.123
photo.jianghu.taobao.com has address 110.75.1.74
pintu.jianghu.taobao.com has address 121.0.23.36
poll.jianghu.taobao.com has address 110.75.1.70
portal.jianghu.taobao.com has address 110.75.2.68
psc.jianghu.taobao.com has address 110.75.2.103
qz.jianghu.taobao.com has address 110.75.1.101
rizhi.jianghu.taobao.com has address 110.75.1.113
snsac-api.jianghu.taobao.com has address 110.75.1.76
snsapp-api.jianghu.taobao.com has address 110.75.1.72
tnl.jianghu.taobao.com has address 121.0.23.37
wsapi.jianghu.taobao.com has address 110.75.2.80
wwapi.jianghu.taobao.com has address 110.75.1.69
wwvip.jianghu.taobao.com has address 110.75.160.24
jie.taobao.com has address 115.124.17.37
jmt.taobao.com has address 121.0.28.41
job.taobao.com has address 110.75.125.55
ju.taobao.com has address 110.75.2.106
keykeys.taobao.com has address 119.42.227.161
list1.taobao.com has address 110.75.2.90
list1.taobao.com has address 115.124.17.33
lz.taobao.com has address 110.75.2.3
feedback.lz.taobao.com has address 110.75.2.114
image.lz.taobao.com has address 110.75.2.4
light.lz.taobao.com has address 110.75.2.114
ol.lz.taobao.com has address 110.75.2.113
view.lz.taobao.com has address 110.75.120.49
vote.lz.taobao.com has address 110.75.2.215
bus.m.taobao.com has address 121.0.28.41
c.m.taobao.com has address 110.75.1.78
checkcode.m.taobao.com has address 110.75.1.94
checkcode.m.taobao.com has address 115.124.17.23
client.m.taobao.com has address 110.75.125.32
dx.m.taobao.com has address 121.0.28.41
fs.m.taobao.com has address 121.0.28.41
global.m.taobao.com has address 121.0.28.41
gm.m.taobao.com has address 121.0.28.41
info.m.taobao.com has address 121.0.28.20
mall.m.taobao.com has address 121.0.28.41
poster.m.taobao.com has address 121.0.28.36
proxy.m.taobao.com has address 115.124.17.4
rj.m.taobao.com has address 121.0.28.41
shoe.m.taobao.com has address 121.0.28.41
sport.m.taobao.com has address 121.0.28.41
xs.m.taobao.com has address 121.0.28.41
zp.m.taobao.com has address 121.0.28.41
mac.taobao.com has address 110.75.2.206
macim.taobao.com has address 110.75.165.118
madou.taobao.com has address 115.124.17.11
maiba.taobao.com has address 119.42.230.242
mx.mail.taobao.com has address 110.75.2.1
news.mail.taobao.com has address 121.0.25.55
newsletter.mail.taobao.com has address 210.73.195.45
smtp.mail.taobao.com has address 121.0.25.51
smtp.mail.taobao.com has address 121.0.25.52
smtp.mail.taobao.com has address 121.0.25.53
smtp.mail.taobao.com has address 121.0.25.54
vip.mail.taobao.com has address 121.0.25.50
i.mall.taobao.com has address 122.224.194.167
login.mall.taobao.com has address 121.0.23.92
promotion.mall.taobao.com has address 121.0.23.98
wangwang.mall.taobao.com has address 121.0.23.94
zhaoshang.mall.taobao.com has address 121.0.28.31
manyi.taobao.com has address 61.164.145.55
t.manyi.taobao.com has address 61.164.145.55
mmsonline.mc.taobao.com has address 115.124.17.16
mmsprepub.mc.taobao.com has address 110.75.50.74
med.taobao.com has address 119.42.225.189
memberships.taobao.com has address 121.0.23.38
micropay.taobao.com has address 110.75.1.37
mm.taobao.com has address 115.124.17.11
model.taobao.com has address 115.124.17.11
monitor.taobao.com has address 121.0.28.11
igw.monitor.taobao.com has address 115.124.17.61
nagios.monitor.taobao.com has address 115.124.17.52
mpcs1.taobao.com has address 121.0.19.8
mrtg.taobao.com has address 121.0.25.13
msp.taobao.com has address 121.0.28.40
newadmin.taobao.com has address 121.0.25.14
ns1.taobao.com has address 110.75.1.19
ns2.taobao.com has address 121.0.28.185
ns3.taobao.com has address 121.0.23.188
open.taobao.com has address 110.75.1.107
blog.open.taobao.com has address 110.75.125.25
my.open.taobao.com has address 115.124.17.45
opensvn.taobao.com has address 110.75.120.78
partner.taobao.com has address 110.75.1.14
pengyou.taobao.com has address 110.75.1.85
pianyi.taobao.com has address 61.164.145.55
t.pianyi.taobao.com has address 61.164.145.41
pingce.taobao.com has address 121.0.28.29
pinglun.taobao.com has address 121.0.28.21
pop.taobao.com has address 60.190.241.196
pro.taobao.com name server ns1.alimama.com.
pro.taobao.com name server ns2.alimama.com.
product.taobao.com has address 121.0.25.15
promotion.taobao.com has address 110.75.1.125
promotion.taobao.com has address 115.124.17.36
qa.taobao.com has address 110.75.125.25
qudao.taobao.com has address 110.75.2.109
ratehis.taobao.com has address 110.75.1.105
rdc.taobao.com has address 110.75.125.25
re.taobao.com has address 110.75.2.137
re.taobao.com has address 115.124.17.177
render.taobao.com has address 110.75.1.16
render.taobao.com has address 115.124.17.176
i.s.taobao.com has address 121.0.28.91
item.s.taobao.com has address 110.75.1.146
s8.taobao.com has address 110.75.1.145
s8.taobao.com has address 121.0.28.97
container.sandbox.taobao.com has address 121.0.25.141
blog.search.taobao.com has address 121.0.28.29
daily.search.taobao.com has address 121.0.28.96
firebolt.search.taobao.com has address 121.0.28.99
i.search.taobao.com has address 121.0.28.91
product.search.taobao.com has address 110.75.1.139
product.search.taobao.com has address 121.0.28.87
114.product.search.taobao.com has address 121.0.28.45
tools.search.taobao.com has address 121.0.28.94
yuqing.search.taobao.com has address 121.0.28.92
zhushou.search.taobao.com has address 121.0.28.102
seller.taobao.com has address 110.75.2.216
info.seller.taobao.com has address 110.75.125.25
guesthouse.seraph.taobao.com has address 121.0.29.46
guesthouse.seraph.taobao.com has address 121.0.29.120
service.taobao.com has address 110.75.1.118
mx.service.taobao.com has address 121.0.16.126
ocs.service.taobao.com has address 110.75.2.220
sevenhawk.taobao.com has address 121.0.25.180
shiyi.taobao.com has address 121.0.28.28
shopcss.taobao.com has address 110.75.2.142
shopsearch.taobao.com has address 121.0.28.106
show.taobao.com has address 110.75.125.23
blog.shuju.taobao.com has address 110.75.125.25
audit.simba.taobao.com has address 119.42.237.248
blog.simba.taobao.com has address 119.42.225.189
bplog.simba.taobao.com has address 119.42.237.246
call.simba.taobao.com has address 172.19.13.200
click.simba.taobao.com has address 119.42.237.230
cpm.simba.taobao.com has address 119.42.232.61
cpm.simba.taobao.com has address 119.42.232.62
cpm.simba.taobao.com has address 119.42.232.63
cpm.simba.taobao.com has address 119.42.232.64
crm.simba.taobao.com has address 119.42.237.244
match.simba.taobao.com has address 119.42.237.249
mclick.simba.taobao.com has address 119.42.227.253
member.simba.taobao.com has address 119.42.232.242
mirror.simba.taobao.com has address 10.254.1.21
mps.simba.taobao.com has address 119.42.232.248
click.mz.simba.taobao.com has address 119.42.233.247
ns.simba.taobao.com has address 110.75.6.2
pay.simba.taobao.com has address 110.76.29.202
rd.simba.taobao.com has address 119.42.233.247
redirect.simba.taobao.com has address 119.42.227.252
report.simba.taobao.com has address 119.42.237.245
sla.simba.taobao.com has address 110.76.29.200
subway.simba.taobao.com has address 119.42.237.243
svn.simba.taobao.com has address 10.254.2.64
syncapi.simba.taobao.com has address 119.42.237.247
t.simba.taobao.com has address 119.42.227.212
tech.simba.taobao.com has address 119.42.225.189
tiexin.simba.taobao.com has address 121.0.28.185
tmatch.simba.taobao.com has address 119.42.237.249
click.tz.simba.taobao.com has address 119.42.233.247
xmatch.simba.taobao.com has address 110.76.28.243
xtns.simba.taobao.com has address 110.75.6.10
zuanshi.simba.taobao.com has address 119.42.232.243
sitemap.taobao.com has address 121.0.23.72
smtp.taobao.com has address 60.190.241.193
split.taobao.com name server splitns1.taobao.com.
split.taobao.com name server splitns2.taobao.com.
split.taobao.com name server splitns3.taobao.com.
splitns1.taobao.com has address 115.124.17.101
splitns2.taobao.com has address 110.75.3.194
splitns3.taobao.com has address 110.75.3.195
spueditor.taobao.com has address 110.75.2.130
descs.src.taobao.com has address 121.0.28.140
suggest.taobao.com has address 110.75.1.134
suggest.taobao.com has address 121.0.28.83
b.suggest.taobao.com has address 121.0.28.93
r.suggest.taobao.com has address 110.75.1.142
r.suggest.taobao.com has address 121.0.28.81
support.taobao.com has address 115.124.17.42
tadget.taobao.com has address 110.75.1.106
tadget.taobao.com has address 115.124.17.1
tadgetbeta.taobao.com has address 110.75.2.116
tadgetbeta.taobao.com has address 110.75.13.5
tag.taobao.com has address 110.75.2.78
taocode.taobao.com has address 110.75.2.112
tbcms.taobao.com has address 110.75.2.105
tbgw.taobao.com has address 121.0.28.6
tbmodule.taobao.com has address 110.75.1.122
tbmodule.taobao.com has address 115.124.17.2
tbreport.taobao.com has address 121.0.25.181
tbstrd.taobao.com has address 110.75.1.15
top.tbtx.taobao.com has address 110.75.125.23
tg.taobao.com has address 110.75.2.106
tgs.taobao.com has address 110.75.2.199
tgs.taobao.com has address 110.75.13.14
tianxia.taobao.com has address 110.75.125.23
bo.tianxia.taobao.com has address 110.75.125.57
city.tianxia.taobao.com has address 110.75.125.23
daima.tianxia.taobao.com has address 110.75.125.67
top.tianxia.taobao.com has address 110.75.125.23
zhe.tianxia.taobao.com has address 110.75.125.62
tmall.taobao.com has address 119.38.217.61
*.tmall.taobao.com has address 119.38.217.61
api.tmall.taobao.com has address 119.38.217.62
app.tmall.taobao.com has address 119.38.217.63
iapi.tmall.taobao.com has address 119.38.217.62
pw.tmall.taobao.com has address 119.38.217.71
img.pw.tmall.taobao.com has address 119.38.217.74
tool.tmall.taobao.com has address 119.38.217.51
tms.taobao.com has address 110.75.1.117
tps.tms.taobao.com has address 110.75.1.117
dba.tools.taobao.com has address 115.124.17.13
shopmanager.tools.taobao.com has address 121.0.28.80
themis.tools.taobao.com has address 121.0.28.76
top.taobao.com has address 110.75.2.108
top.taobao.com has address 110.75.13.7
tougao.taobao.com has address 110.75.2.110
tp.taobao.com has address 110.75.2.216
tradearchive.taobao.com has address 110.75.1.112
kezhan.trip.taobao.com has address 110.75.1.36
try.taobao.com has address 110.75.2.123
try.taobao.com has address 110.75.13.12
tuan.taobao.com has address 110.75.2.106
tuangou.taobao.com has address 110.75.2.106
tv.taobao.com has address 110.75.2.98
tv.taobao.com has address 115.124.17.60
img1.tv.taobao.com has address 110.75.13.2
img2.tv.taobao.com has address 110.75.13.6
tvcrm.taobao.com has address 115.124.17.59
ued.taobao.com has address 110.75.125.25
ur.taobao.com has address 121.0.28.34
vbuy.taobao.com has address 110.75.1.32
vbuy.taobao.com has address 110.75.2.17
ad.video.taobao.com has address 110.75.1.81
vip.taobao.com has address 110.75.2.79
vip.taobao.com has address 115.124.17.48
newsletter.vip.taobao.com has address 208.70.139.62
cm2.vpn.taobao.com has address 121.0.22.250
amis1.wangwang.taobao.com has address 121.0.25.197
ltjl.wangwang.taobao.com has address 110.75.160.26
multimedia.wangwang.taobao.com has address 121.0.19.12
report.wangwang.taobao.com has address 121.0.25.198
rts.wangwang.taobao.com has address 110.75.161.221
wangzhi.taobao.com has address 110.75.2.104
bbj.wap.taobao.com has address 115.124.17.16
caipiao.wap.taobao.com has address 110.75.1.89
caipiao.wap.taobao.com has address 115.124.17.8
jh.wap.taobao.com has address 121.0.28.41
poster.wap.taobao.com has address 121.0.28.36
wapa.taobao.com has address 110.75.14.116
auction1.wapa.taobao.com has address 110.75.14.96
bbj.wapa.taobao.com has address 110.75.14.117
bivr.wapa.taobao.com has address 110.75.14.117
book.wapa.taobao.com has address 110.75.14.97
caipiao.wapa.taobao.com has address 110.75.14.161
info.wapa.taobao.com has address 110.75.14.97
msp.wapa.taobao.com has address 110.75.14.111
poster.wapa.taobao.com has address 110.75.14.156
zc.wapa.taobao.com has address 110.75.14.96
wapdev.taobao.com has address 121.0.25.145
waptest.taobao.com has address 110.75.120.53
caipiao.waptest.taobao.com has address 110.75.120.60
lottery.waptest.taobao.com has address 121.0.25.144
msp.waptest.taobao.com has address 110.75.120.81
my.waptest.taobao.com has address 110.75.50.65
wtm.waptest.taobao.com has address 110.75.120.54
zc.waptest.taobao.com has address 110.75.120.54
webwangwang.taobao.com has address 110.75.1.35
webwangwang.taobao.com has address 115.124.17.164
img.webww.taobao.com has address 110.75.2.92
wwpartner.taobao.com has address 110.75.2.77
wwpartner.taobao.com has address 115.124.17.30
wwplatform.taobao.com has address 110.75.2.107
wwwtest.taobao.com has address 110.75.50.144
xiaoshuo.taobao.com has address 110.75.2.75
list.xie.taobao.com has address 110.75.1.29
list.xie.taobao.com has address 115.124.17.137
yes.taobao.com has address 119.38.217.77
yitao.taobao.com has address 121.0.28.100
zazhi.taobao.com has address 110.75.1.80
zhaopin.taobao.com has address 110.75.2.122
zhaopin.taobao.com has address 110.75.13.11
zhuangxiu.taobao.com has address 110.75.2.139
bbs.zhuangxiu.taobao.com has address 110.75.125.58
wiki.zhuangxiu.taobao.com has address 110.75.125.58

修复方案:

版权声明:转载请注明来源 结界师@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:10

确认时间:2010-11-02 19:43

厂商回复:

已经修复。谢谢!

最新状态:

暂无