漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2013-042139
漏洞标题：射手网存在DNS域传送漏洞
相关厂商：射手网
漏洞作者： Honker红颜
提交时间：2013-11-06 15:26
修复时间：2013-11-11 15:26
公开时间：2013-11-11 15:26
漏洞类型：系统/服务运维配置不当
危害等级：中
自评Rank：10
漏洞状态：漏洞已经通知厂商但是厂商忽略漏洞
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2013-11-06： 细节已通知厂商并且等待厂商处理中
2013-11-11： 厂商已经主动忽略漏洞，细节向公众公开
简要描述：
看看
详细说明：
----- shooter.cn -----
Host's addresses:
__________________
shooter.cn 5 IN A 222.73.165.25
Name Servers:
______________
ns1.tomasen.org 5 IN A 72.14.188.94
ns2.tomasen.org 5 IN A 117.135.163.198
ns3.tomasen.org 5 IN A 106.187.36.180
Mail (MX) Servers:
___________________
mxbiz1.qq.com 5 IN A 183.60.62.12
mxbiz1.qq.com 5 IN A 183.62.125.200
mxbiz1.qq.com 5 IN A 183.60.61.225
mxbiz2.qq.com 5 IN A 183.62.125.200
mxbiz2.qq.com 5 IN A 64.71.138.53
mxbiz2.qq.com 5 IN A 64.71.138.90
mxbiz2.qq.com 5 IN A 112.90.142.55
mxbiz2.qq.com 5 IN A 112.95.241.32
mxbiz2.qq.com 5 IN A 183.60.61.225
mxbiz2.qq.com 5 IN A 183.60.62.12
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for shooter.cn on ns1.tomasen.org ...
shooter.cn 800 IN SOA
shooter.cn 800 IN A 222.73.165.25
shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN MX
shooter.cn 800 IN MX
shooter.cn 800 IN TXT
*.shooter.cn 800 IN CNAME
2010.shooter.cn 800 IN A 192.168.0.9
3g.shooter.cn 800 IN A 210.14.78.139
auth.shooter.cn 800 IN A 61.155.107.33
bbs.shooter.cn 800 IN A 106.187.36.180
cdn.shooter.cn 800 IN A 60.191.132.122
cds.shooter.cn 800 IN A 211.100.30.86
central.shooter.cn 800 IN A 222.73.165.25
*.central.shooter.cn 800 IN A 222.73.165.25
cnc.shooter.cn 800 IN A 210.51.50.71
cnc2.shooter.cn 800 IN A 222.73.165.25
cnc3.shooter.cn 800 IN A 222.73.165.25
cncback.shooter.cn 800 IN A 221.6.206.82
cncfile0.shooter.cn 800 IN A 60.191.132.122
cncfile1.shooter.cn 800 IN A 60.191.132.122
cncfile2.shooter.cn 800 IN A 60.191.132.122
cncimg0.shooter.cn 800 IN A 60.191.132.122
cncounter.shooter.cn 800 IN A 210.51.50.71
counter.shooter.cn 800 IN A 202.107.196.24
ct.shooter.cn 800 IN A 60.191.132.122
ctimg0.shooter.cn 800 IN A 60.191.132.122
docs.shooter.cn 800 IN CNAME
edu.shooter.cn 800 IN A 60.191.132.122
edufile0.shooter.cn 800 IN A 60.191.132.122
edufile1.shooter.cn 800 IN A 60.191.132.122
eduimg0.shooter.cn 800 IN A 60.191.132.122
engine.shooter.cn 800 IN A 222.73.165.25
file.shooter.cn 800 IN A 60.191.132.122
file0.shooter.cn 800 IN A 222.73.165.25
file1.shooter.cn 800 IN A 60.191.132.122
file2.shooter.cn 800 IN A 210.14.78.139
flash.shooter.cn 800 IN A 210.51.50.71
game.shooter.cn 800 IN A 210.14.78.137
*.game.shooter.cn 800 IN A 115.182.50.159
cs.game.shooter.cn 800 IN A 61.160.192.131
hk.shooter.cn 800 IN A 113.196.160.80
html.shooter.cn 800 IN CNAME
img.shooter.cn 800 IN A 60.191.132.122
img0.shooter.cn 800 IN A 222.73.165.25
ipv6.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
jp.shooter.cn 800 IN A 106.187.36.180
m.shooter.cn 800 IN A 60.191.132.122
mail.shooter.cn 800 IN CNAME
mo.shooter.cn 800 IN A 221.130.182.25
phash.shooter.cn 800 IN A 222.73.165.25
phashserv.shooter.cn 800 IN A 210.14.78.137
search.shooter.cn 800 IN A 61.155.107.33
shop.shooter.cn 800 IN CNAME
splayer.shooter.cn 800 IN A 60.191.132.122
splayer1.shooter.cn 800 IN A 60.191.132.122
splayer10.shooter.cn 800 IN A 222.73.165.25
splayer11.shooter.cn 800 IN A 60.191.132.122
splayer2.shooter.cn 800 IN A 60.191.132.122
splayer3.shooter.cn 800 IN A 60.191.132.122
splayer4.shooter.cn 800 IN A 60.191.132.122
splayer5.shooter.cn 800 IN A 210.14.78.139
splayer6.shooter.cn 800 IN A 218.249.29.199
splayer7.shooter.cn 800 IN A 218.249.29.199
splayer8.shooter.cn 800 IN A 60.191.132.122
splayer9.shooter.cn 800 IN A 222.73.165.25
static.shooter.cn 800 IN A 58.215.55.141
stunnel.shooter.cn 800 IN A 221.130.184.210
svplayer.shooter.cn 800 IN A 60.191.132.122
t.shooter.cn 800 IN A 60.191.132.122
tomas.shooter.cn 800 IN A 192.168.0.9
tphz.shooter.cn 800 IN A 60.191.132.122
tw.shooter.cn 800 IN A 113.196.160.80
twitter.shooter.cn 800 IN A 173.230.153.246
updater.shooter.cn 800 IN A 60.191.132.122
us.shooter.cn 800 IN A 106.187.36.180
us2.shooter.cn 800 IN A 72.14.188.94
usads.shooter.cn 800 IN A 106.187.36.180
usfile0.shooter.cn 800 IN A 60.191.132.122
usfile1.shooter.cn 800 IN A 60.191.132.122
usimg0.shooter.cn 800 IN A 106.187.36.180
vpn.shooter.cn 800 IN CNAME
www.shooter.cn 800 IN A 222.73.165.25
www.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
ns1.tomasen.org Bind Version: "9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
Trying Zone Transfer for shooter.cn on ns2.tomasen.org ...
shooter.cn 800 IN SOA
shooter.cn 800 IN A 222.73.165.25
shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN MX
shooter.cn 800 IN MX
shooter.cn 800 IN TXT
*.shooter.cn 800 IN CNAME
2010.shooter.cn 800 IN A 192.168.0.9
3g.shooter.cn 800 IN A 210.14.78.139
auth.shooter.cn 800 IN A 61.155.107.33
bbs.shooter.cn 800 IN A 106.187.36.180
cdn.shooter.cn 800 IN A 60.191.132.122
cds.shooter.cn 800 IN A 211.100.30.86
central.shooter.cn 800 IN A 222.73.165.25
*.central.shooter.cn 800 IN A 222.73.165.25
cnc.shooter.cn 800 IN A 210.51.50.71
cnc2.shooter.cn 800 IN A 222.73.165.25
cnc3.shooter.cn 800 IN A 222.73.165.25
cncback.shooter.cn 800 IN A 221.6.206.82
cncfile0.shooter.cn 800 IN A 60.191.132.122
cncfile1.shooter.cn 800 IN A 60.191.132.122
cncfile2.shooter.cn 800 IN A 60.191.132.122
cncimg0.shooter.cn 800 IN A 60.191.132.122
cncounter.shooter.cn 800 IN A 210.51.50.71
counter.shooter.cn 800 IN A 202.107.196.24
ct.shooter.cn 800 IN A 60.191.132.122
ctimg0.shooter.cn 800 IN A 60.191.132.122
docs.shooter.cn 800 IN CNAME
edu.shooter.cn 800 IN A 60.191.132.122
edufile0.shooter.cn 800 IN A 60.191.132.122
edufile1.shooter.cn 800 IN A 60.191.132.122
eduimg0.shooter.cn 800 IN A 60.191.132.122
engine.shooter.cn 800 IN A 222.73.165.25
file.shooter.cn 800 IN A 60.191.132.122
file0.shooter.cn 800 IN A 222.73.165.25
file1.shooter.cn 800 IN A 60.191.132.122
file2.shooter.cn 800 IN A 210.14.78.139
flash.shooter.cn 800 IN A 210.51.50.71
game.shooter.cn 800 IN A 210.14.78.137
*.game.shooter.cn 800 IN A 115.182.50.159
cs.game.shooter.cn 800 IN A 61.160.192.131
hk.shooter.cn 800 IN A 113.196.160.80
html.shooter.cn 800 IN CNAME
img.shooter.cn 800 IN A 60.191.132.122
img0.shooter.cn 800 IN A 222.73.165.25
ipv6.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
jp.shooter.cn 800 IN A 106.187.36.180
m.shooter.cn 800 IN A 60.191.132.122
mail.shooter.cn 800 IN CNAME
mo.shooter.cn 800 IN A 221.130.182.25
phash.shooter.cn 800 IN A 222.73.165.25
phashserv.shooter.cn 800 IN A 210.14.78.137
search.shooter.cn 800 IN A 61.155.107.33
shop.shooter.cn 800 IN CNAME
splayer.shooter.cn 800 IN A 60.191.132.122
splayer1.shooter.cn 800 IN A 60.191.132.122
splayer10.shooter.cn 800 IN A 222.73.165.25
splayer11.shooter.cn 800 IN A 60.191.132.122
splayer2.shooter.cn 800 IN A 60.191.132.122
splayer3.shooter.cn 800 IN A 60.191.132.122
splayer4.shooter.cn 800 IN A 60.191.132.122
splayer5.shooter.cn 800 IN A 210.14.78.139
splayer6.shooter.cn 800 IN A 218.249.29.199
splayer7.shooter.cn 800 IN A 218.249.29.199
splayer8.shooter.cn 800 IN A 60.191.132.122
splayer9.shooter.cn 800 IN A 222.73.165.25
static.shooter.cn 800 IN A 58.215.55.141
stunnel.shooter.cn 800 IN A 221.130.184.210
svplayer.shooter.cn 800 IN A 60.191.132.122
t.shooter.cn 800 IN A 60.191.132.122
tomas.shooter.cn 800 IN A 192.168.0.9
tphz.shooter.cn 800 IN A 60.191.132.122
tw.shooter.cn 800 IN A 113.196.160.80
twitter.shooter.cn 800 IN A 173.230.153.246
updater.shooter.cn 800 IN A 60.191.132.122
us.shooter.cn 800 IN A 106.187.36.180
us2.shooter.cn 800 IN A 72.14.188.94
usads.shooter.cn 800 IN A 106.187.36.180
usfile0.shooter.cn 800 IN A 60.191.132.122
usfile1.shooter.cn 800 IN A 60.191.132.122
usimg0.shooter.cn 800 IN A 106.187.36.180
vpn.shooter.cn 800 IN CNAME
www.shooter.cn 800 IN A 222.73.165.25
www.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
ns2.tomasen.org Bind Version: &9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4
Trying Zone Transfer for shooter.cn on ns3.tomasen.org ...
shooter.cn 800 IN SOA
shooter.cn 800 IN A 222.73.165.25
shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN NS
shooter.cn 800 IN MX
shooter.cn 800 IN MX
shooter.cn 800 IN TXT
*.shooter.cn 800 IN CNAME
2010.shooter.cn 800 IN A 192.168.0.9
3g.shooter.cn 800 IN A 210.14.78.139
auth.shooter.cn 800 IN A 61.155.107.33
bbs.shooter.cn 800 IN A 106.187.36.180
cdn.shooter.cn 800 IN A 60.191.132.122
cds.shooter.cn 800 IN A 211.100.30.86
central.shooter.cn 800 IN A 222.73.165.25
*.central.shooter.cn 800 IN A 222.73.165.25
cnc.shooter.cn 800 IN A 210.51.50.71
cnc2.shooter.cn 800 IN A 222.73.165.25
cnc3.shooter.cn 800 IN A 222.73.165.25
cncback.shooter.cn 800 IN A 221.6.206.82
cncfile0.shooter.cn 800 IN A 60.191.132.122
cncfile1.shooter.cn 800 IN A 60.191.132.122
cncfile2.shooter.cn 800 IN A 60.191.132.122
cncimg0.shooter.cn 800 IN A 60.191.132.122
cncounter.shooter.cn 800 IN A 210.51.50.71
counter.shooter.cn 800 IN A 202.107.196.24
ct.shooter.cn 800 IN A 60.191.132.122
ctimg0.shooter.cn 800 IN A 60.191.132.122
docs.shooter.cn 800 IN CNAME
edu.shooter.cn 800 IN A 60.191.132.122
edufile0.shooter.cn 800 IN A 60.191.132.122
edufile1.shooter.cn 800 IN A 60.191.132.122
eduimg0.shooter.cn 800 IN A 60.191.132.122
engine.shooter.cn 800 IN A 222.73.165.25
file.shooter.cn 800 IN A 60.191.132.122
file0.shooter.cn 800 IN A 222.73.165.25
file1.shooter.cn 800 IN A 60.191.132.122
file2.shooter.cn 800 IN A 210.14.78.139
flash.shooter.cn 800 IN A 210.51.50.71
game.shooter.cn 800 IN A 210.14.78.137
*.game.shooter.cn 800 IN A 115.182.50.159
cs.game.shooter.cn 800 IN A 61.160.192.131
hk.shooter.cn 800 IN A 113.196.160.80
html.shooter.cn 800 IN CNAME
img.shooter.cn 800 IN A 60.191.132.122
img0.shooter.cn 800 IN A 222.73.165.25
ipv6.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
jp.shooter.cn 800 IN A 106.187.36.180
m.shooter.cn 800 IN A 60.191.132.122
mail.shooter.cn 800 IN CNAME
mo.shooter.cn 800 IN A 221.130.182.25
phash.shooter.cn 800 IN A 222.73.165.25
phashserv.shooter.cn 800 IN A 210.14.78.137
search.shooter.cn 800 IN A 61.155.107.33
shop.shooter.cn 800 IN CNAME
splayer.shooter.cn 800 IN A 60.191.132.122
splayer1.shooter.cn 800 IN A 60.191.132.122
splayer10.shooter.cn 800 IN A 222.73.165.25
splayer11.shooter.cn 800 IN A 60.191.132.122
splayer2.shooter.cn 800 IN A 60.191.132.122
splayer3.shooter.cn 800 IN A 60.191.132.122
splayer4.shooter.cn 800 IN A 60.191.132.122
splayer5.shooter.cn 800 IN A 210.14.78.139
splayer6.shooter.cn 800 IN A 218.249.29.199
splayer7.shooter.cn 800 IN A 218.249.29.199
splayer8.shooter.cn 800 IN A 60.191.132.122
splayer9.shooter.cn 800 IN A 222.73.165.25
static.shooter.cn 800 IN A 58.215.55.141
stunnel.shooter.cn 800 IN A 221.130.184.210
svplayer.shooter.cn 800 IN A 60.191.132.122
t.shooter.cn 800 IN A 60.191.132.122
tomas.shooter.cn 800 IN A 192.168.0.9
tphz.shooter.cn 800 IN A 60.191.132.122
tw.shooter.cn 800 IN A 113.196.160.80
twitter.shooter.cn 800 IN A 173.230.153.246
updater.shooter.cn 800 IN A 60.191.132.122
us.shooter.cn 800 IN A 106.187.36.180
us2.shooter.cn 800 IN A 72.14.188.94
usads.shooter.cn 800 IN A 106.187.36.180
usfile0.shooter.cn 800 IN A 60.191.132.122
usfile1.shooter.cn 800 IN A 60.191.132.122
usimg0.shooter.cn 800 IN A 106.187.36.180
vpn.shooter.cn 800 IN CNAME
www.shooter.cn 800 IN A 222.73.165.25
www.shooter.cn 800 IN AAAA 2607:f740:90:0:0:0:0:ea8
漏洞证明：
同上
修复方案：
看看
版权声明：转载请注明来源 Honker红颜@乌云
漏洞回应
厂商回应：
危害等级：无影响厂商忽略
忽略时间：2013-11-11 15:26
厂商回复：
最新状态：
2013-11-11：已经禁止 zone transfer