当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2013-039725

漏洞标题：中国电信# 某业务DNS域传送漏洞一枚

相关厂商：cncert国家互联网应急中心

漏洞作者： 爱上平顶山

提交时间：2013-10-15 15:57

修复时间：2013-11-29 16:04

公开时间：2013-11-29 16:04

漏洞类型：系统/服务运维配置不当

危害等级：中

自评Rank：10

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2013-10-15： 细节已通知厂商并且等待厂商处理中
2013-10-19： 厂商已经确认，细节仅向厂商公开
2013-10-29： 细节向核心白帽子及相关领域专家公开
2013-11-08： 细节向普通白帽子公开
2013-11-18： 细节向实习白帽子公开
2013-11-29： 细节向公众公开

简要描述：

0.0

详细说明：

中国电信股份有限公司云计算分公司
www.ctyun.cn
ok
C:\Documents and Settings\Administrator>nslookup
Default Server: google-public-dns-a.google.com
Address: 8.8.8.8
> set type=ns
> ctyun.cn
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
ctyun.cn nameserver = ns6.ctyun.cn
ctyun.cn nameserver = ns4.ctyun.cn
ctyun.cn nameserver = ns.ctyun.cn
ctyun.cn nameserver = ns2.ctyun.cn
ctyun.cn nameserver = ns3.ctyun.cn
ctyun.cn nameserver = ns5.ctyun.cn
> server ns2.ctyun.cn
Default Server: ns2.ctyun.cn
Address: 124.127.188.76
> ls ctyun.cn
[ns2.ctyun.cn]
ctyun.cn. A 118.85.194.44
ctyun.cn. NS server = ns.ctyun.cn
ctyun.cn. NS server = ns2.ctyun.cn
ctyun.cn. NS server = ns3.ctyun.cn
ctyun.cn. NS server = ns4.ctyun.cn
ctyun.cn. NS server = ns5.ctyun.cn
ctyun.cn. NS server = ns6.ctyun.cn
about A 124.127.188.86
atmos A 180.153.28.38
beta A 118.85.194.44
cdn01 A 124.127.188.77
webdev.chenlong A 124.127.188.75
app01.demo A 124.127.188.87
call01.demo A 124.127.188.91
call02.demo A 124.127.188.92
cloudoa.demo A 124.127.204.34
desktop01.demo A 124.127.188.75
desktop02.demo A 124.127.188.85
desktop03.demo A 124.127.188.92
desktop05.demo A 124.127.188.85
kr.demo A 124.127.188.68
sa.demo A 124.127.188.68
adaptor01.dev A 180.153.28.37
bestpay.dev A 124.127.188.78
deploy.dev A 101.227.253.113
deploygz.dev A 183.56.130.58
note01.dev A 124.127.188.83
skip.dev A 118.85.194.44
test01.dev A 180.153.28.36
yk.dev A 124.127.188.75
ecbs A 180.153.28.31
ecbserver A 180.153.28.32
api1.enote A 101.227.251.191
api2.enote A 101.227.251.192
madeira01.evalua A 124.127.188.79
madeira02.evalua A 124.127.188.80
mail A 124.127.204.62
mail1 A 182.140.241.46
oos-cd.monitor A 182.140.241.217
inbound.msf A 180.153.28.74
outbound.msf A 180.153.28.135
portal.msf A 180.153.28.101
ns A 124.127.188.75
ns2 A 124.127.188.76
ns3 A 101.227.253.39
ns4 A 183.56.128.146
ns5 A 101.227.253.40
ns6 A 183.56.128.152
oos A 180.153.28.107
oos-cd A 182.140.241.219
service A 118.85.194.42
sms01 A 124.127.188.82
api.temp A 124.127.188.84
api2.temp A 124.127.188.84
test.temp A 124.127.188.85
home.work A 124.127.188.76
>
哦了

漏洞证明：

C:\Documents and Settings\Administrator>nslookup
Default Server: google-public-dns-a.google.com
Address: 8.8.8.8
> set type=ns
> ctyun.cn
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
ctyun.cn nameserver = ns6.ctyun.cn
ctyun.cn nameserver = ns4.ctyun.cn
ctyun.cn nameserver = ns.ctyun.cn
ctyun.cn nameserver = ns2.ctyun.cn
ctyun.cn nameserver = ns3.ctyun.cn
ctyun.cn nameserver = ns5.ctyun.cn
> server ns2.ctyun.cn
Default Server: ns2.ctyun.cn
Address: 124.127.188.76
> ls ctyun.cn
[ns2.ctyun.cn]
ctyun.cn. A 118.85.194.44
ctyun.cn. NS server = ns.ctyun.cn
ctyun.cn. NS server = ns2.ctyun.cn
ctyun.cn. NS server = ns3.ctyun.cn
ctyun.cn. NS server = ns4.ctyun.cn
ctyun.cn. NS server = ns5.ctyun.cn
ctyun.cn. NS server = ns6.ctyun.cn
about A 124.127.188.86
atmos A 180.153.28.38
beta A 118.85.194.44
cdn01 A 124.127.188.77
webdev.chenlong A 124.127.188.75
app01.demo A 124.127.188.87
call01.demo A 124.127.188.91
call02.demo A 124.127.188.92
cloudoa.demo A 124.127.204.34
desktop01.demo A 124.127.188.75
desktop02.demo A 124.127.188.85
desktop03.demo A 124.127.188.92
desktop05.demo A 124.127.188.85
kr.demo A 124.127.188.68
sa.demo A 124.127.188.68
adaptor01.dev A 180.153.28.37
bestpay.dev A 124.127.188.78
deploy.dev A 101.227.253.113
deploygz.dev A 183.56.130.58
note01.dev A 124.127.188.83
skip.dev A 118.85.194.44
test01.dev A 180.153.28.36
yk.dev A 124.127.188.75
ecbs A 180.153.28.31
ecbserver A 180.153.28.32
api1.enote A 101.227.251.191
api2.enote A 101.227.251.192
madeira01.evalua A 124.127.188.79
madeira02.evalua A 124.127.188.80
mail A 124.127.204.62
mail1 A 182.140.241.46
oos-cd.monitor A 182.140.241.217
inbound.msf A 180.153.28.74
outbound.msf A 180.153.28.135
portal.msf A 180.153.28.101
ns A 124.127.188.75
ns2 A 124.127.188.76
ns3 A 101.227.253.39
ns4 A 183.56.128.146
ns5 A 101.227.253.40
ns6 A 183.56.128.152
oos A 180.153.28.107
oos-cd A 182.140.241.219
service A 118.85.194.42
sms01 A 124.127.188.82
api.temp A 124.127.188.84
api2.temp A 124.127.188.84
test.temp A 124.127.188.85
home.work A 124.127.188.76
>

修复方案：

改设置。

版权声明：转载请注明来源 爱上平顶山@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：5

确认时间：2013-10-19 21:03

厂商回复：

最新状态：

暂无