漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2015-0101165
漏洞标题：中国北车股份有限公司敏感信息泄露
相关厂商：中国北车股份有限公司
漏洞作者： 路人甲
提交时间：2015-03-16 12:53
修复时间：2015-04-30 18:48
公开时间：2015-04-30 18:48
漏洞类型：网络敏感信息泄漏
危害等级：中
自评Rank：10
漏洞状态：未联系到厂商或者厂商积极忽略
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2015-03-16： 积极联系厂商并且等待厂商认领中，细节不对外公开
2015-04-30： 厂商已经主动忽略漏洞，细节向公众公开
简要描述：
详细说明：
中国北车股份有限公司DNS域传送漏洞主要是由于中国北车股份有限公司DNS服务器配置不当，导致域传送问题服务器：ns.chinacnr.com和 ns1.chinacnr.com
root@kali:~/Desktop# dnsenum chinacnr.com
dnsenum.pl VERSION:1.2.3
----- chinacnr.com -----
Host's addresses:
__________________
Name Servers:
______________
ns.chinacnr.com. 5 IN A 211.147.25.229
ns1.chinacnr.com. 5 IN A 106.39.15.99
fns1.chinacnr.com. 5 IN A 106.39.15.100
fns.chinacnr.com. 5 IN A 211.147.25.254
Mail (MX) Servers:
___________________
mail.chinacnr.com. 5 IN A 211.147.25.234
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for chinacnr.com on ns.chinacnr.com ...
chinacnr.com. 86400 IN SOA ns.chinacnr.com.
chinacnr.com. 86400 IN NS ns.chinacnr.com.
chinacnr.com. 86400 IN NS fns.chinacnr.com.
chinacnr.com. 86400 IN NS ns1.chinacnr.com.
chinacnr.com. 86400 IN NS fns1.chinacnr.com.
chinacnr.com. 86400 IN MX 10
www.27rail.chinacnr.com. 86400 IN A 218.107.207.202
aqjg.chinacnr.com. 86400 IN A 172.25.1.44
bcjg.chinacnr.com. 86400 IN A 180.178.50.205
www.bcjg.chinacnr.com. 86400 IN A 180.178.50.205
bodev.chinacnr.com. 86400 IN A 172.25.0.238
boprd.chinacnr.com. 86400 IN A 172.25.0.247
boprd01.chinacnr.com. 86400 IN A 172.25.0.225
boprd02.chinacnr.com. 86400 IN A 172.25.0.226
bpswf.chinacnr.com. 86400 IN A 172.25.0.102
bwdev.chinacnr.com. 86400 IN A 172.25.0.201
bwprd.chinacnr.com. 86400 IN A 172.25.0.206
bwprd01.chinacnr.com. 86400 IN A 172.25.0.206
bwprd02.chinacnr.com. 86400 IN A 172.25.0.206
bwqas.chinacnr.com. 86400 IN A 172.25.0.202
ccczb.chinacnr.com. 86400 IN MX 10
mail.ccczb.chinacnr.com. 86400 IN A 119.48.74.100
www.ccczb.chinacnr.com. 86400 IN A 119.48.74.102
cf.chinacnr.com. 86400 IN A 172.25.1.31
chuguo.chinacnr.com. 86400 IN CNAME standard.chinacnr.com.
cnrclmp.chinacnr.com. 86400 IN A 172.25.0.87
cnrclmq.chinacnr.com. 86400 IN A 172.25.0.86
cnrcr.chinacnr.com. 86400 IN MX 10
cnrcr.chinacnr.com. 86400 IN MX 50
mail.cnrcr.chinacnr.com. 86400 IN CNAME qiye.163.com.
www.cnrcr.chinacnr.com. 86400 IN A 211.147.25.231
cnred.chinacnr.com. 86400 IN A 172.25.0.219
cnrep.chinacnr.com. 86400 IN A 172.25.0.85
cnreq.chinacnr.com. 86400 IN A 172.25.0.197
www.cnrerd.chinacnr.com. 86400 IN A 211.147.25.231
cnrerp.chinacnr.com. 86400 IN A 172.25.0.34
cnrerp01.chinacnr.com. 86400 IN A 172.25.0.31
cnrerp02.chinacnr.com. 86400 IN A 172.25.0.32
cnrerpdb.chinacnr.com. 86400 IN A 172.25.0.33
cnrerpdev.chinacnr.com. 86400 IN A 172.25.0.75
cnrerpqas.chinacnr.com. 86400 IN A 172.25.0.254
cnrsrmd.chinacnr.com. 86400 IN A 172.25.0.77
cnrsrmq.chinacnr.com. 86400 IN A 172.25.0.78
www.cntrqrrs.chinacnr.com. 86400 IN CNAME dljzx.gotoip55.com.
scm.crc.chinacnr.com. 86400 IN A 202.98.19.190
www.crc.chinacnr.com. 86400 IN A 202.98.19.148
cs.chinacnr.com. 86400 IN A 172.25.202.9
www.dloco.chinacnr.com. 86400 IN A 124.93.249.6
dlri.chinacnr.com. 86400 IN MX 10
gate.dlri.chinacnr.com. 86400 IN A 222.33.84.195
mail.dlri.chinacnr.com. 86400 IN A 222.33.84.196
www.dlri.chinacnr.com. 86400 IN A 218.61.32.82
doc.chinacnr.com. 86400 IN A 172.25.1.93
dt.chinacnr.com. 86400 IN MX 10
mail.dt.chinacnr.com. 86400 IN A 211.142.40.20
www.dt.chinacnr.com. 86400 IN A 211.142.40.19
eccdb.chinacnr.com. 86400 IN A 172.25.0.11
eccdev.chinacnr.com. 86400 IN A 172.25.0.61
eccdi01.chinacnr.com. 86400 IN A 172.25.0.21
eccdi02.chinacnr.com. 86400 IN A 172.25.0.22
eccprd.chinacnr.com. 86400 IN A 172.25.0.65
eccqas.chinacnr.com. 86400 IN A 172.25.0.62
ecctra.chinacnr.com. 86400 IN A 172.25.0.74
en.chinacnr.com. 86400 IN A 211.147.25.231
erpma1.chinacnr.com. 86400 IN A 172.25.0.239
fns.chinacnr.com. 86400 IN A 211.147.25.254
fns1.chinacnr.com. 86400 IN A 106.39.15.100
ftp.chinacnr.com. 86400 IN A 172.25.1.65
gate.chinacnr.com. 86400 IN A 172.25.1.111
hceccdev.chinacnr.com. 86400 IN A 172.28.2.13
hceccprd.chinacnr.com. 86400 IN A 172.28.2.12
hceccprd01.chinacnr.com. 86400 IN A 172.28.2.1
hceccprd02.chinacnr.com. 86400 IN A 172.28.2.2
hceccqas.chinacnr.com. 86400 IN A 172.28.2.14
www.hrte.chinacnr.com. 86400 IN A 61.236.90.165
info.chinacnr.com. 86400 IN A 172.25.1.58
ip.chinacnr.com. 86400 IN A 172.25.1.46
itkh.chinacnr.com. 86400 IN A 172.25.1.17
www.jnjcc.chinacnr.com. 86400 IN A 123.124.2.126
kjgl.chinacnr.com. 86400 IN A 172.25.1.128
km.chinacnr.com. 86400 IN A 172.25.1.118
kxfzg.chinacnr.com. 86400 IN A 172.25.1.20
ldap.chinacnr.com. 86400 IN A 172.25.1.50
lotusmail.chinacnr.com. 86400 IN A 172.25.1.47
lz.chinacnr.com. 86400 IN A 211.147.25.227
lzgl.chinacnr.com. 86400 IN A 172.25.1.60
www.lzloco.chinacnr.com. 86400 IN A 61.178.77.118
m.chinacnr.com. 86400 IN A 172.25.1.90
mail.chinacnr.com. 86400 IN A 211.147.25.234
mdmprd.chinacnr.com. 86400 IN A 172.25.0.221
mdmprd01.chinacnr.com. 86400 IN A 172.25.0.220
mdmprd02.chinacnr.com. 86400 IN A 172.25.0.221
mdmprddb.chinacnr.com. 86400 IN A 172.25.0.222
media.chinacnr.com. 86400 IN A 172.25.24.20
mediaxz.chinacnr.com. 86400 IN A 172.25.24.20
njgs.chinacnr.com. 86400 IN MX 10
eq.njgs.chinacnr.com. 86400 IN CNAME eq99.cn4e.com.
imap.njgs.chinacnr.com. 86400 IN CNAME imap99.cn4e.com.
mail.njgs.chinacnr.com. 86400 IN CNAME s99.cn4e.com.
mx.njgs.chinacnr.com. 86400 IN CNAME smx99.cn4e.com.
pop.njgs.chinacnr.com. 86400 IN CNAME pop99.cn4e.com.
smtp.njgs.chinacnr.com. 86400 IN CNAME smtp99.cn4e.com.
www.njgs.chinacnr.com. 86400 IN A 114.251.33.100
ns.chinacnr.com. 86400 IN A 211.147.25.229
ns1.chinacnr.com. 86400 IN A 106.39.15.99
oa.chinacnr.com. 86400 IN A 172.25.1.92
pic.chinacnr.com. 86400 IN A 172.25.1.51
portal.chinacnr.com. 86400 IN A 172.25.0.248
ptdev.chinacnr.com. 86400 IN A 172.25.0.212
ptprd01.chinacnr.com. 86400 IN A 172.25.0.213
ptprd02.chinacnr.com. 86400 IN A 172.25.0.214
www.qrrs.chinacnr.com. 86400 IN A 218.8.130.46
www.railtank.chinacnr.com. 86400 IN A 61.236.224.27
sapftp.chinacnr.com. 86400 IN A 172.25.24.111
slm.chinacnr.com. 86400 IN A 172.25.0.28
software.chinacnr.com. 86400 IN A 172.25.1.49
srm.chinacnr.com. 86400 IN A 211.147.25.232
www.srsri.chinacnr.com. 86400 IN A 211.98.20.48
standard.chinacnr.com. 86400 IN A 172.25.1.120
sy.chinacnr.com. 86400 IN MX 10
admin.sy.chinacnr.com. 86400 IN CNAME admin.zmail.net.cn.chinacnr.com.
mail.sy.chinacnr.com. 86400 IN CNAME web.zmail.net.cn.chinacnr.com.
oa.sy.chinacnr.com. 86400 IN A 222.33.40.227
pop.sy.chinacnr.com. 86400 IN CNAME pop.zmail.net.cn.chinacnr.com.
smtp.sy.chinacnr.com. 86400 IN CNAME smtp.zmail.net.cn.chinacnr.com.
www.sy.chinacnr.com. 86400 IN A 210.51.171.206
www.tangche.chinacnr.com. 86400 IN A 60.2.37.162
mail.test.chinacnr.com. 86400 IN A 211.147.25.233
www.tlr.chinacnr.com. 86400 IN A 112.125.237.158
www.tszb.chinacnr.com. 86400 IN A 60.2.149.68
www.tyloro.chinacnr.com. 86400 IN A 59.49.31.99
view.chinacnr.com. 86400 IN A 172.25.245.67
vsapebp.chinacnr.com. 86400 IN A 172.25.0.84
vsapsus.chinacnr.com. 86400 IN A 172.25.0.80
web.chinacnr.com. 86400 IN A 172.25.1.58
wf.chinacnr.com. 86400 IN A 172.25.0.231
wfdb.chinacnr.com. 86400 IN A 172.25.0.230
wfdev.chinacnr.com. 86400 IN A 172.25.0.232
wfqas.chinacnr.com. 86400 IN A 172.25.0.233
ws.chinacnr.com. 86400 IN A 172.25.1.55
www.chinacnr.com. 300 IN A 211.147.25.231
xcgz.chinacnr.com. 86400 IN A 172.25.2.21
xidev.chinacnr.com. 86400 IN A 172.25.0.207
xiprd.chinacnr.com. 86400 IN A 172.25.0.211
xiprd01.chinacnr.com. 86400 IN A 172.25.0.208
xiprd02.chinacnr.com. 86400 IN A 172.25.0.209
xmgl.chinacnr.com. 86400 IN A 172.25.2.28
www.yonge.chinacnr.com. 86400 IN A 202.99.213.75
yygl.chinacnr.com. 86400 IN A 172.25.0.72
zb.chinacnr.com. 86400 IN A 172.25.1.20
Trying Zone Transfer for chinacnr.com on ns1.chinacnr.com ...
chinacnr.com. 86400 IN SOA ns.chinacnr.com.
chinacnr.com. 86400 IN NS ns.chinacnr.com.
chinacnr.com. 86400 IN NS fns.chinacnr.com.
chinacnr.com. 86400 IN NS ns1.chinacnr.com.
chinacnr.com. 86400 IN NS fns1.chinacnr.com.
chinacnr.com. 86400 IN MX 10
www.27rail.chinacnr.com. 86400 IN A 218.107.207.202
aqjg.chinacnr.com. 86400 IN A 172.25.1.44
bcjg.chinacnr.com. 86400 IN A 180.178.50.205
www.bcjg.chinacnr.com. 86400 IN A 180.178.50.205
bodev.chinacnr.com. 86400 IN A 172.25.0.238
boprd.chinacnr.com. 86400 IN A 172.25.0.247
boprd01.chinacnr.com. 86400 IN A 172.25.0.225
boprd02.chinacnr.com. 86400 IN A 172.25.0.226
bpswf.chinacnr.com. 86400 IN A 172.25.0.102
bwdev.chinacnr.com. 86400 IN A 172.25.0.201
bwprd.chinacnr.com. 86400 IN A 172.25.0.206
bwprd01.chinacnr.com. 86400 IN A 172.25.0.206
bwprd02.chinacnr.com. 86400 IN A 172.25.0.206
bwqas.chinacnr.com. 86400 IN A 172.25.0.202
ccczb.chinacnr.com. 86400 IN MX 10
mail.ccczb.chinacnr.com. 86400 IN A 119.48.74.100
www.ccczb.chinacnr.com. 86400 IN A 119.48.74.102
cf.chinacnr.com. 86400 IN A 172.25.1.31
chuguo.chinacnr.com. 86400 IN CNAME standard.chinacnr.com.
cnrclmp.chinacnr.com. 86400 IN A 172.25.0.87
cnrclmq.chinacnr.com. 86400 IN A 172.25.0.86
cnrcr.chinacnr.com. 86400 IN MX 10
cnrcr.chinacnr.com. 86400 IN MX 50
mail.cnrcr.chinacnr.com. 86400 IN CNAME qiye.163.com.
www.cnrcr.chinacnr.com. 86400 IN A 211.147.25.231
cnred.chinacnr.com. 86400 IN A 172.25.0.219
cnrep.chinacnr.com. 86400 IN A 172.25.0.85
cnreq.chinacnr.com. 86400 IN A 172.25.0.197
www.cnrerd.chinacnr.com. 86400 IN A 211.147.25.231
cnrerp.chinacnr.com. 86400 IN A 172.25.0.34
cnrerp01.chinacnr.com. 86400 IN A 172.25.0.31
cnrerp02.chinacnr.com. 86400 IN A 172.25.0.32
cnrerpdb.chinacnr.com. 86400 IN A 172.25.0.33
cnrerpdev.chinacnr.com. 86400 IN A 172.25.0.75
cnrerpqas.chinacnr.com. 86400 IN A 172.25.0.254
cnrsrmd.chinacnr.com. 86400 IN A 172.25.0.77
cnrsrmq.chinacnr.com. 86400 IN A 172.25.0.78
www.cntrqrrs.chinacnr.com. 86400 IN CNAME dljzx.gotoip55.com.
scm.crc.chinacnr.com. 86400 IN A 202.98.19.190
www.crc.chinacnr.com. 86400 IN A 202.98.19.148
cs.chinacnr.com. 86400 IN A 172.25.202.9
www.dloco.chinacnr.com. 86400 IN A 124.93.249.6
dlri.chinacnr.com. 86400 IN MX 10
gate.dlri.chinacnr.com. 86400 IN A 222.33.84.195
mail.dlri.chinacnr.com. 86400 IN A 222.33.84.196
www.dlri.chinacnr.com. 86400 IN A 218.61.32.82
doc.chinacnr.com. 86400 IN A 172.25.1.93
dt.chinacnr.com. 86400 IN MX 10
mail.dt.chinacnr.com. 86400 IN A 211.142.40.20
www.dt.chinacnr.com. 86400 IN A 211.142.40.19
eccdb.chinacnr.com. 86400 IN A 172.25.0.11
eccdev.chinacnr.com. 86400 IN A 172.25.0.61
eccdi01.chinacnr.com. 86400 IN A 172.25.0.21
eccdi02.chinacnr.com. 86400 IN A 172.25.0.22
eccprd.chinacnr.com. 86400 IN A 172.25.0.65
eccqas.chinacnr.com. 86400 IN A 172.25.0.62
ecctra.chinacnr.com. 86400 IN A 172.25.0.74
en.chinacnr.com. 86400 IN A 211.147.25.231
erpma1.chinacnr.com. 86400 IN A 172.25.0.239
fns.chinacnr.com. 86400 IN A 211.147.25.254
fns1.chinacnr.com. 86400 IN A 106.39.15.100
ftp.chinacnr.com. 86400 IN A 172.25.1.65
gate.chinacnr.com. 86400 IN A 172.25.1.111
hceccdev.chinacnr.com. 86400 IN A 172.28.2.13
hceccprd.chinacnr.com. 86400 IN A 172.28.2.12
hceccprd01.chinacnr.com. 86400 IN A 172.28.2.1
hceccprd02.chinacnr.com. 86400 IN A 172.28.2.2
hceccqas.chinacnr.com. 86400 IN A 172.28.2.14
www.hrte.chinacnr.com. 86400 IN A 61.236.90.165
info.chinacnr.com. 86400 IN A 172.25.1.58
ip.chinacnr.com. 86400 IN A 172.25.1.46
itkh.chinacnr.com. 86400 IN A 172.25.1.17
www.jnjcc.chinacnr.com. 86400 IN A 123.124.2.126
kjgl.chinacnr.com. 86400 IN A 172.25.1.128
km.chinacnr.com. 86400 IN A 172.25.1.118
kxfzg.chinacnr.com. 86400 IN A 172.25.1.20
ldap.chinacnr.com. 86400 IN A 172.25.1.50
lotusmail.chinacnr.com. 86400 IN A 172.25.1.47
lz.chinacnr.com. 86400 IN A 211.147.25.227
lzgl.chinacnr.com. 86400 IN A 172.25.1.60
www.lzloco.chinacnr.com. 86400 IN A 61.178.77.118
m.chinacnr.com. 86400 IN A 172.25.1.90
mail.chinacnr.com. 86400 IN A 211.147.25.234
mdmprd.chinacnr.com. 86400 IN A 172.25.0.221
mdmprd01.chinacnr.com. 86400 IN A 172.25.0.220
mdmprd02.chinacnr.com. 86400 IN A 172.25.0.221
mdmprddb.chinacnr.com. 86400 IN A 172.25.0.222
media.chinacnr.com. 86400 IN A 172.25.24.20
mediaxz.chinacnr.com. 86400 IN A 172.25.24.20
njgs.chinacnr.com. 86400 IN MX 10
eq.njgs.chinacnr.com. 86400 IN CNAME eq99.cn4e.com.
imap.njgs.chinacnr.com. 86400 IN CNAME imap99.cn4e.com.
mail.njgs.chinacnr.com. 86400 IN CNAME s99.cn4e.com.
mx.njgs.chinacnr.com. 86400 IN CNAME smx99.cn4e.com.
pop.njgs.chinacnr.com. 86400 IN CNAME pop99.cn4e.com.
smtp.njgs.chinacnr.com. 86400 IN CNAME smtp99.cn4e.com.
www.njgs.chinacnr.com. 86400 IN A 114.251.33.100
ns.chinacnr.com. 86400 IN A 211.147.25.229
ns1.chinacnr.com. 86400 IN A 106.39.15.99
oa.chinacnr.com. 86400 IN A 172.25.1.92
pic.chinacnr.com. 86400 IN A 172.25.1.51
portal.chinacnr.com. 86400 IN A 172.25.0.248
ptdev.chinacnr.com. 86400 IN A 172.25.0.212
ptprd01.chinacnr.com. 86400 IN A 172.25.0.213
ptprd02.chinacnr.com. 86400 IN A 172.25.0.214
www.qrrs.chinacnr.com. 86400 IN A 218.8.130.46
www.railtank.chinacnr.com. 86400 IN A 61.236.224.27
sapftp.chinacnr.com. 86400 IN A 172.25.24.111
slm.chinacnr.com. 86400 IN A 172.25.0.28
software.chinacnr.com. 86400 IN A 172.25.1.49
srm.chinacnr.com. 86400 IN A 211.147.25.232
www.srsri.chinacnr.com. 86400 IN A 211.98.20.48
standard.chinacnr.com. 86400 IN A 172.25.1.120
sy.chinacnr.com. 86400 IN MX 10
admin.sy.chinacnr.com. 86400 IN CNAME admin.zmail.net.cn.chinacnr.com.
mail.sy.chinacnr.com. 86400 IN CNAME web.zmail.net.cn.chinacnr.com.
oa.sy.chinacnr.com. 86400 IN A 222.33.40.227
pop.sy.chinacnr.com. 86400 IN CNAME pop.zmail.net.cn.chinacnr.com.
smtp.sy.chinacnr.com. 86400 IN CNAME smtp.zmail.net.cn.chinacnr.com.
www.sy.chinacnr.com. 86400 IN A 210.51.171.206
www.tangche.chinacnr.com. 86400 IN A 60.2.37.162
mail.test.chinacnr.com. 86400 IN A 211.147.25.233
www.tlr.chinacnr.com. 86400 IN A 112.125.237.158
www.tszb.chinacnr.com. 86400 IN A 60.2.149.68
www.tyloro.chinacnr.com. 86400 IN A 59.49.31.99
view.chinacnr.com. 86400 IN A 172.25.245.67
vsapebp.chinacnr.com. 86400 IN A 172.25.0.84
vsapsus.chinacnr.com. 86400 IN A 172.25.0.80
web.chinacnr.com. 86400 IN A 172.25.1.58
wf.chinacnr.com. 86400 IN A 172.25.0.231
wfdb.chinacnr.com. 86400 IN A 172.25.0.230
wfdev.chinacnr.com. 86400 IN A 172.25.0.232
wfqas.chinacnr.com. 86400 IN A 172.25.0.233
ws.chinacnr.com. 86400 IN A 172.25.1.55
www.chinacnr.com. 300 IN A 211.147.25.231
xcgz.chinacnr.com. 86400 IN A 172.25.2.21
xidev.chinacnr.com. 86400 IN A 172.25.0.207
xiprd.chinacnr.com. 86400 IN A 172.25.0.211
xiprd01.chinacnr.com. 86400 IN A 172.25.0.208
xiprd02.chinacnr.com. 86400 IN A 172.25.0.209
xmgl.chinacnr.com. 86400 IN A 172.25.2.28
www.yonge.chinacnr.com. 86400 IN A 202.99.213.75
yygl.chinacnr.com. 86400 IN A 172.25.0.72
zb.chinacnr.com. 86400 IN A 172.25.1.20
漏洞证明：
修复方案：
修改dns服务配置
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
未能联系到厂商或者厂商积极拒绝