当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0112037

漏洞标题:婚礼纪配置不当造成大量数据泄露

相关厂商:hunliji.com

漏洞作者: 路人甲

提交时间:2015-05-05 11:10

修复时间:2015-06-19 11:34

公开时间:2015-06-19 11:34

漏洞类型:系统/服务运维配置不当

危害等级:高

自评Rank:15

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-05-05: 细节已通知厂商并且等待厂商处理中
2015-05-05: 厂商已经确认,细节仅向厂商公开
2015-05-15: 细节向核心白帽子及相关领域专家公开
2015-05-25: 细节向普通白帽子公开
2015-06-04: 细节向实习白帽子公开
2015-06-19: 细节向公众公开

简要描述:

233

详细说明:

http://121.40.89.44/
貌似是个消息平台,貌似可以发消息给任意用户
redis服务 未授权访问。

漏洞证明:

find 121.40.89.44 keys: 863829
这么多key ,可以用key直接获取用户消息。
at', 'user:458914:at_bat', 'user:47398:at_bat', 'user:219217:at_bat', 'user:1746
94:at_bat', 'user:594255:channels', 'user:487079:at_bat', 'user:645749:at_bat',
'user:152362:at_bat', 'user:644844:channels', 'user:466083:at_bat', 'user:729241
:at_bat', 'user:566342:at_bat', 'user:187683:at_bat', 'user:159054:at_bat', 'use
r:716130:at_bat', 'user:600678:at_bat', 'user:680425:at_bat', 'user:204902:at_ba
t', 'user:363721:at_bat', 'user:63936:at_bat', 'user:273371:at_bat', 'user:46447
1:role', 'user:225722:at_bat', 'user:346405:at_bat', 'user:350330:at_bat', 'user
:377093:at_bat', 'user:681693:at_bat', 'user:777763:at_bat', 'user:813145:at_bat
', 'user:252760:at_bat', 'user:716100:channels', 'user:159000:at_bat', 'user:705
888:at_bat', 'user:723670:at_bat', 'user:661486:at_bat', 'user:345506:at_bat', '
user:232123:at_bat', 'user:487506:channels', 'user:533667:at_bat', 'user:149049:
at_bat', 'user:365072:at_bat', 'user:29732:at_bat', 'user:53644:at_bat', 'user:4
12889:at_bat', 'user:605861:at_bat', 'user:559466:at_bat', 'user:219770:at_bat',
'user:300541:at_bat', 'user:833750:at_bat', 'user:632982:at_bat', 'user:163915:
at_bat', 'user:226100:at_bat', 'channel:54ce3eff695a326d31c91000:m_unread', 'use
r:91437:at_bat', 'user:110729:at_bat', 'user:96668:at_bat', 'user:104319:at_bat'
, 'user:827623:at_bat', 'user:51303:at_bat', 'user:379385:at_bat', 'user:539110:
at_bat', 'user:757296:at_bat', 'user:603418:at_bat', 'user:21892:at_bat', 'user:
594249:at_bat', 'user:335478:at_bat', 'channel:55363a9f695a323ced8d0000:m_unread
', 'user:495087:at_bat', 'user:214571:at_bat', 'user:218182:at_bat', 'user:25839
2:at_bat', 'user:126848:at_bat', 'user:828917:at_bat', 'user:572987:at_bat', 'us
er:140549:at_bat', 'user:386879:at_bat', 'user:50845:at_bat', 'user:795076:at_ba
t', 'user:170413:at_bat', 'user:401015:at_bat', 'user:481680:at_bat', 'user:4545
01:at_bat', 'user:797001:at_bat', 'user:565799:at_bat', 'user:710597:at_bat', 'u
ser:354232:at_bat', 'user:454416:at_bat', 'user:606972:at_bat', 'user:366075:at_
bat', 'user:493413:at_bat', 'user:386072:at_bat', 'user:263881:at_bat', 'user:37
5970:at_bat', 'user:259935:at_bat', 'user:723673:at_bat', 'user:645731:at_bat',
'user:631179:at_bat', 'user:382785:at_bat', 'user:744463:at_bat', 'user:639540:a
t_bat', 'user:759779:at_bat', 'user:771581:at_bat', 'user:591070:at_bat', 'user:
464956:at_bat', 'user:627712:at_bat', 'user:57311:at_bat', 'user:591232:at_bat',
'user:110082:at_bat', 'user:348001:at_bat', 'user:781726:at_bat', 'user:208133:
at_bat', 'user:310059:at_bat', 'user:345167:at_bat', 'user:339174:at_bat', 'user
:418873:at_bat', 'user:219910:at_bat', 'user:223355:at_bat', 'user:484135:at_bat
', 'user:240500:at_bat', 'user:88172:at_bat', 'user:91371:at_bat', 'user:590881:
at_bat', 'user:214132:at_bat', 'user:302203:at_bat', 'user:664344:at_bat', 'user
:142612:at_bat', 'user:495314:at_bat', 'user:748430:at_bat', 'user:34965:at_bat'
, 'user:731177:at_bat', 'user:740301:at_bat', 'user:220147:at_bat', 'user:47417:
at_bat', 'user:781362:at_bat', 'user:786132:at_bat', 'user:399616:at_bat', 'user
:105545:at_bat', 'user:252827:at_bat', 'user:40200:at_bat', 'user:826489:at_bat'
, 'user:768723:at_bat', 'user:181157:at_bat', 'user:216148:at_bat', 'user:510593
:at_bat', 'user:613225:at_bat', 'user:519267:at_bat', 'user:227356:at_bat', 'use
r:48184:at_bat', 'user:316023:at_bat', 'user:238159:at_bat', 'user:798392:at_bat
', 'user:793659:at_bat', 'user:508324:at_bat', 'user:413946:at_bat', 'user:43864
0:at_bat', 'user:595028:at_bat', 'user:154223:at_bat', 'user:7577:at_bat', 'user
:380646:at_bat', 'user:731734:at_bat', 'user:379687:channels', 'user:253654:at_b
at', 'user:109331:at_bat', 'user:490303:at_bat', 'user:405811:at_bat', 'user:739
8:at_bat', 'user:253080:at_bat', 'user:269555:at_bat', 'user:720145:at_bat', 'us
er:671032:at_bat', 'user:611426:at_bat', 'user:781361:at_bat', 'user:103668:at_b
at', 'user:380209:at_bat', 'user:602418:at_bat', 'user:207778:at_bat', 'user:135
980:at_bat', 'user:179759:at_bat', 'user:402774:at_bat', 'user:139057:at_bat', '
user:182754:at_bat', 'user:772537:at_bat', 'user:639746:at_bat', 'user:572841:at
_bat', 'user:15695:at_bat', 'user:276906:at_bat', 'user:609711:at_bat', 'user:56
7831:at_bat', 'user:202704:at_bat', 'user:687017:at_bat', 'user:266660:at_bat',
'user:410710:at_bat', 'user:503350:at_bat', 'user:555127:at_bat', 'user:70066:at
_bat', 'user:758241:at_bat', 'user:371460:at_bat', 'user:516275:at_bat', 'user:4
93378:at_bat', 'user:165778:channels', 'user:701354:at_bat', 'user:264568:at_bat
', 'user:670447:at_bat', 'user:75216:at_bat', 'user:638051:at_bat', 'user:538058
:at_bat', 'user:60789:at_bat', 'user:312197:at_bat', 'user:61578:at_bat', 'user:
349876:at_bat', 'user:420355:at_bat', 'user:391048:at_bat', 'user:194438:at_bat'
, 'user:692821:at_bat', 'user:536334:at_bat', 'user:414825:at_bat', 'user:742623
:at_bat', 'user:217448:at_bat', 'user:214716:at_bat', 'user:386333:at_bat', 'use
r:774668:at_bat', 'user:5912:at_bat', 'user:694297:at_bat', 'user:604396:at_bat'
, 'user:200413:at_bat', 'user:116599:at_bat', 'user:817158:at_bat', 'user:504484
:at_bat', 'user:194986:at_bat', 'user:348039:at_bat', 'user:603957:at_bat', 'use
r:43738:at_bat', 'user:621363:at_bat', 'user:125767:at_bat', 'user:608466:at_bat
', 'user:297945:at_bat', 'user:205574:at_bat', 'user:363010:at_bat', 'user:57141
:at_bat', 'user:253923:at_bat', 'user:439121:at_bat', 'user:761541:at_bat', 'use
r:160053:at_bat', 'user:501575:at_bat', 'user:789440:at_bat', 'user:675032:at_ba
t', 'user:8978:at_bat', 'user:574244:at_bat', 'user:414083:at_bat', 'user:658697
:at_bat', 'user:224659:at_bat', 'user:352459:at_bat', 'user:647865:at_bat', 'use
r:486884:at_bat', 'user:140138:at_bat', 'user:423315:at_bat', 'user:792996:at_ba
t', 'user:691414:at_bat', 'user:539958:at_bat', 'user:641996:at_bat', 'user:6729
93:at_bat', 'user:182197:at_bat', 'user:733279:at_bat', 'user:778589:at_bat', 'u
ser:734472:at_bat', 'user:205830:at_bat', 'user:21661:at_bat', 'user:596288:at_b
at', 'user:113518:at_bat', 'user:419272:at_bat', 'user:656544:at_bat', 'user:478
455:at_bat', 'user:264687:at_bat', 'user:36833:at_bat', 'user:827153:at_bat', 'u
ser:523979:at_bat', 'user:765413:at_bat', 'user:87822:at_bat', 'user:248889:at_b
at', 'user:456045:at_bat', 'user:466453:at_bat', 'user:760812:at_bat', 'user:789
852:at_bat', 'user:625171:channels', 'user:73926:at_bat', 'user:262017:at_bat',
'user:271657:at_bat', 'user:666647:at_bat', 'user:755383:at_bat', 'user:788792:a
t_bat', 'user:742560:at_bat', 'user:35880:at_bat', 'user:607966:channels', 'user
:33955:at_bat', 'user:720437:at_bat', 'user:678114:at_bat', 'user:267494:at_bat'
, 'user:765842:at_bat', 'user:315777:at_bat', 'user:350313:at_bat', 'user:338384
:at_bat', 'user:186745:at_bat', 'user:106391:at_bat', 'user:410687:at_bat', 'use
r:454344:at_bat', 'user:390993:at_bat', 'user:582599:at_bat', 'user:122224:at_ba
t', 'user:48488:at_bat', 'user:501847:at_bat', 'user:632632:at_bat', 'user:61722
2:at_bat', 'user:631530:at_bat', 'user:7155:at_bat', 'user:769903:at_bat', 'user
:750264:at_bat', 'user:720710:at_bat', 'user:113315:at_bat', 'user:389617:at_bat
', 'user:143764:at_bat', 'user:508034:at_bat', 'user:233259:at_bat', 'user:29252
1:at_bat', 'user:199546:at_bat', 'user:809735:at_bat', 'user:835755:at_bat', 'us
er:247839:at_bat', 'user:159911:at_bat', 'user:797337:at_bat', 'user:632060:at_b
at', 'user:650246:at_bat', 'user:392826:at_bat', 'user:691456:at_bat', 'user:675
725:at_bat', 'user:320906:at_bat', 'user:550026:at_bat', 'user:727627:at_bat', '
user:728131:at_bat', 'user:678101:at_bat', 'user:50039:at_bat', 'user:493216:at_
bat', 'user:679180:at_bat', 'user:619984:at_bat', 'user:193244:at_bat', 'user:75
7216:at_bat', 'user:758255:at_bat', 'user:338646:at_bat', 'user:11398:at_bat', '
user:818691:at_bat', 'user:491003:at_bat', 'user:602124:at_bat', 'user:202736:at
_bat', 'user:414198:at_bat', 'user:787744:at_bat', 'user:719529:at_bat', 'user:8
37599:at_bat', 'user:55715:at_bat', 'user:487979:at_bat', 'user:755953:at_bat',
'user:513881:at_bat', 'user:643050:channels', 'user:550361:at_bat', 'user:213273
:at_bat', 'user:285547:at_bat', 'user:356472:at_bat', 'user:199488:at_bat', 'use
r:723356:at_bat', 'user:338334:at_bat', 'user:800203:at_bat', 'user:372091:at_ba
t', 'user:398396:at_bat', 'user:609506:at_bat', 'user:649932:at_bat', 'user:2446
27:at_bat', 'user:177031:at_bat', 'user:461477:at_bat', 'user:253475:at_bat', 'u
ser:351484:at_bat', 'user:673670:at_bat', 'user:123242:role', 'user:539403:at_ba
t', 'user:502043:at_bat', 'user:676350:at_bat', 'user:790258:at_bat', 'user:6018
9:at_bat', 'user:837471:at_bat', 'user:78335:at_bat', 'user:115421:at_bat', 'use
r:6748:at_bat', 'user:582843:at_bat', 'user:75004:at_bat', 'user:592847:at_bat',
'user:210805:at_bat', 'user:652816:at_bat', 'user:7284:at_bat', 'user:83259:at_
bat', 'user:777293:at_bat', 'user:634442:at_bat', 'user:784684:at_bat', 'user:73
0967:at_bat', 'user:506877:at_bat', 'user:699666:at_bat', 'user:87136:at_bat', '
user:569023:at_bat', 'user:555127:role', 'user:459438:at_bat', 'user:707641:at_b
at', 'user:550911:at_bat', 'user:715876:at_bat', 'user:14756:at_bat', 'user:1587
09:at_bat', 'user:72380:at_bat', 'user:3756:at_bat', 'user:497531:at_bat', 'user
:208556:at_bat', 'user:325170:at_bat', 'user:378908:at_bat', 'user:610715:at_bat
', 'user:120255:at_bat', 'user:48987:at_bat', 'user:85100:at_bat', 'user:487763:
at_bat', 'user:663605:at_bat', 'user:467673:at_bat', 'user:760218:at_bat', 'user
:542510:at_bat', 'user:236436:at_bat', 'user:386828:at_bat', 'user:577011:at_bat
', 'user:328712:at_bat', 'user:330333:at_bat', 'user:786273:at_bat', 'user:58253
0:at_bat', 'user:51107:at_bat', 'user:45905:at_bat', 'user:490457:at_bat', 'user
:416641:at_bat', 'user:21164:at_bat', 'user:704204:at_bat', 'user:275016:at_bat'
, 'user:384169:at_bat', 'user:599180:at_bat', 'user:73888:at_bat', 'user:685389:
at_bat', 'user:575168:at_bat', 'user:707554:at_bat', 'user:234513:at_bat', 'user
:818644:at_bat', 'user:25444:at_bat', 'user:69721:at_bat', 'user:727498:at_bat',
'user:405199:at_bat', 'user:681994:at_bat', 'user:65264:at_bat', 'user:348049:a
t_bat', 'user:699700:at_bat', 'user:91812:at_bat', 'user:503380:at_bat', 'user:5
99897:at_bat', 'user:826176:at_bat', 'user:233447:at_bat', 'user:548708:at_bat',
'user:8729:at_bat', 'user:463998:at_bat', 'user:679741:at_bat', 'user:488946:at
_bat', 'user:727211:at_bat', 'user:212116:at_bat', 'user:463646:at_bat', 'user:1
00283:at_bat', 'user:410924:at_bat', 'user:101334:at_bat', 'user:248750:at_bat',
'user:703389:at_bat', 'user:543609:at_bat', 'user:449168:at_bat', 'user:771521:
at_bat', 'user:18647:at_bat', 'user:56061:at_bat', 'user:111013:at_bat', 'user:7
38770:at_bat', 'user:432753:at_bat', 'user:339162:at_bat', 'user:656427:at_bat',
'user:204595:at_bat', 'user:16446:at_bat', 'user:42981:at_bat', 'user:103908:at
_bat', 'user:737731:at_bat', 'user:604479:at_bat', 'user:718815:channels', 'user
:176996:at_bat', 'user:350511:at_bat', 'user:661291:at_bat', 'user:136624:at_bat
', 'user:508876:at_bat', 'user:390464:at_bat', 'user:424623:at_bat', 'user:51596
7:at_bat', 'user:458345:at_bat', 'user:765014:at_bat', 'user:128732:at_bat', 'us
er:125659:at_bat', 'user:236584:at_bat', 'user:403373:at_bat', 'user:180228:at_b
at', 'user:351342:at_bat', 'user:715163:at_bat', 'user:287329:at_bat', 'user:816
560:at_bat', 'user:629650:at_bat', 'user:36155:at_bat', 'user:436667:at_bat', 'u
ser:640357:at_bat', 'user:104931:at_bat', 'user:462232:at_bat', 'user:283828:at_
bat', 'user:281423:at_bat', 'user:406507:at_bat', 'user:784801:at_bat', 'user:12
7991:at_bat', 'user:674163:at_bat', 'user:413131:at_bat', 'user:338870:at_bat',
'user:842132:at_bat', 'user:220325:at_bat', 'user:212588:at_bat', 'user:767109:a
t_bat', 'user:29108:at_bat', 'user:263878:at_bat', 'user:731739:at_bat', 'user:1
46130:at_bat', 'user:388868:at_bat', 'user:387299:at_bat', 'user:398658:at_bat',
'user:825373:at_bat', 'user:603481:at_bat', 'user:281280:at_bat', 'user:721131:
at_bat', 'user:686479:channels', 'user:502374:at_bat', 'user:755928:at_bat', 'us
er:335349:at_bat', 'user:355477:at_bat', 'user:762896:at_bat', 'user:589385:at_b
at', 'user:369546:at_bat', 'user:741226:channels', 'user:663372:at_bat', 'user:5
86585:at_bat', 'user:539012:at_bat', 'user:11121:at_bat', 'user:276484:at_bat',
'user:730936:at_bat', 'user:299527:at_bat', 'user:806894:at_bat', 'user:775901:a
t_bat', 'user:634722:at_bat', 'user:654340:at_bat', 'user:527618:at_bat', 'user:
429718:at_bat', 'user:248857:at_bat', 'user:205358:at_bat', 'user:358333:at_bat'
, 'user:439942:at_bat', 'user:456683:at_bat', 'user:778906:at_bat', 'user:662570
:at_bat', 'user:34119:at_bat', 'user:717602:at_bat', 'user:733931:at_bat', 'user
:138461:at_bat', 'user:647863:at_bat', 'user:474020:at_bat', 'user:772979:at_bat
', 'user:226976:at_bat', 'user:436634:at_bat', 'user:385184:at_bat', 'user:68557
:at_bat', 'user:197622:at_bat', 'user:611588:at_bat', 'user:594938:at_bat', 'use
r:273049:at_bat', 'user:273092:at_bat', 'user:776706:at_bat', 'user:730935:at_ba
t', 'user:432513:at_bat', 'user:249049:at_bat', 'user:233976:at_bat', 'user:3179
84:at_bat', 'user:465076:at_bat', 'user:572195:at_bat', 'user:195248:at_bat', 'u
ser:417974:at_bat', 'user:719024:at_bat', 'user:224195:at_bat', 'user:242644:at_
bat', 'user:127036:at_bat', 'user:722089:at_bat', 'user:91527:at_bat', 'user:547
515:at_bat', 'user:66079:at_bat', 'user:86028:at_bat', 'user:239261:at_bat', 'us
er:394604:at_bat', 'user:660541:at_bat', 'user:121466:at_bat', 'user:495586:at_b
at', 'user:756989:at_bat', 'user:182788:at_bat', 'user:451552:at_bat', 'user:768
475:at_bat', 'user:157087:role', 'user:566503:at_bat', 'user:368753:at_bat', 'us
er:492691:at_bat', 'user:774176:at_bat', 'user:519506:at_bat', 'user:377860:at_b
at', 'user:534270:at_bat', 'user:190770:at_bat', 'user:638360:at_bat', 'user:308
657:at_bat', 'user:640314:at_bat', 'user:333603:at_bat', 'user:824162:at_bat', '
user:124306:at_bat', 'user:213001:at_bat', 'user:840286:at_bat', 'user:459764:at
_bat', 'user:573846:at_bat', 'user:621856:at_bat', 'user:678988:at_bat', 'user:5
32381:at_bat', 'user:316475:at_bat', 'user:270082:at_bat', 'user:378882:at_bat',
'user:573134:at_bat', 'user:286623:at_bat', 'user:748414:at_bat', 'user:659868:
at_bat', 'user:796265:role', 'user:613575:at_bat', 'user:431588:channels', 'user
:778158:at_bat', 'user:630043:at_bat', 'user:128148:at_bat', 'user:680442:at_bat
', 'user:540568:at_bat', 'user:613326:at_bat', 'user:428451:at_bat', 'user:82538
4:at_bat', 'user:712264:at_bat', 'user:618065:at_bat', 'user:515657:at_bat', 'us
er:530045:at_bat', 'user:457737:at_bat', 'user:789637:at_bat', 'user:292962:at_b
at', 'user:400462:at_bat', 'user:764209:at_bat', 'user:410705:at_bat', 'user:246
148:at_bat', 'user:54542:at_bat', 'user:815527:at_bat', 'user:420474:at_bat', 'u
ser:31238:at_bat', 'user:803624:at_bat', 'user:734108:at_bat', 'user:566747:at_b
at', 'user:160356:at_bat', 'user:81755:at_bat', 'user:466677:at_bat', 'user:1758
4:at_bat', 'user:194886:at_bat', 'user:244269:at_bat', 'user:172195:at_bat', 'us
er:101330:at_bat', 'user:411358:at_bat', 'user:743805:at_bat', 'user:571913:at_b
at', 'user:245082:at_bat', 'user:692129:at_bat', 'user:721119:at_bat', 'user:404
025:at_bat', 'user:109941:at_bat', 'user:659833:at_bat', 'user:172407:at_bat', '
user:620316:at_bat', 'user:328339:at_bat', 'user:7568:at_bat', 'user:434892:at_b
at', 'user:24336:at_bat', 'user:154510:at_bat', 'user:724076:at_bat', 'user:6124
36:at_bat', 'user:390368:at_bat', 'user:89512:at_bat', 'user:299105:at_bat', 'us
er:483286:at_bat', 'user:26458:at_bat', 'user:81521:at_bat', 'user:553041:at_bat
', 'user:520822:at_bat', 'user:361279:at_bat', 'user:400021:at_bat', 'user:59215
8:at_bat', 'user:154286:at_bat', 'user:685473:at_bat', 'user:50558:at_bat', 'use
r:295009:at_bat', 'user:197888:at_bat', 'user:216845:at_bat', 'user:248183:at_ba
t', 'user:111679:at_bat', 'user:122181:at_bat', 'user:447168:at_bat', 'user:5129
11:at_bat', 'user:600448:at_bat', 'user:232803:at_bat', 'user:545362:at_bat', 'u
ser:557157:at_bat', 'user:223770:at_bat', 'user:743211:at_bat', 'user:449973:at_
bat', 'user:587380:at_bat', 'user:398154:at_bat', 'user:4665:at_bat', 'user:5297
:at_bat', 'user:805024:at_bat', 'user:562444:at_bat', 'user:291954:at_bat', 'use
r:702350:at_bat', 'user:211738:at_bat', 'user:152043:at_bat', 'user:625083:at_ba
t', 'user:750889:at_bat', 'user:592803:at_bat', 'user:90812:at_bat', 'user:73558
6:at_bat', 'user:387430:at_bat', 'user:236817:at_bat', 'user:459452:at_bat', 'us
er:128342:at_bat', 'user:104933:at_bat', 'user:90760:at_bat', 'user:693857:at_ba
t', 'user:341621:at_bat', 'user:798441:at_bat', 'user:654955:at_bat', 'channel:5
5100872695a327a24590500:m_unread', 'user:592714:at_bat', 'user:575810:at_bat', '
user:344206:at_bat', 'user:286375:at_bat', 'user:449657:at_bat', 'user:796995:at
_bat', 'user:592441:role', 'user:702394:at_bat', 'user:367166:at_bat', 'user:373
751:at_bat', 'user:575649:at_bat', 'user:273068:at_bat', 'user:511042:at_bat', '
user:313612:at_bat', 'user:88202:at_bat', 'user:139042:at_bat', 'user:237721:at_
bat', 'user:291207:at_bat', 'user:485564:at_bat', 'user:308683:at_bat', 'user:79
1504:at_bat', 'user:625465:at_bat', 'user:618743:at_bat', 'user:57122:at_bat', '
user:791909:at_bat', 'user:650990:at_bat', 'user:55460:at_bat', 'user:93264:at_b
at', 'user:19218:at_bat', 'user:340834:at_bat', 'user:240691:at_bat', 'user:4871
14:at_bat', 'user:493262:at_bat', 'user:399471:at_bat', 'user:81675:at_bat', 'us
er:572788:at_bat', 'user:67599:at_bat', 'user:713186:at_bat', 'user:226208:at_ba
t', 'user:127411:at_bat', 'user:49939:at_bat', 'user:339936:at_bat', 'user:42084
7:at_bat', 'user:277083:at_bat', 'user:353075:at_bat', 'user:531745:at_bat', 'us
er:702028:at_bat', 'user:625984:at_bat', 'user:32626:at_bat', 'user:384245:at_ba
t', 'user:729352:at_bat', 'user:530440:at_bat', 'user:140875:at_bat', 'user:7449
86:at_bat', 'user:675369:at_bat', 'user:630662:at_bat', 'user:163036:at_bat', 'u
ser:664799:at_bat', 'user:660007:at_bat', 'user:227468:at_bat', 'user:84959:at_b
at', 'user:420162:at_bat', 'user:325431:at_bat', 'user:638629:at_bat', 'user:673
120:at_bat', 'user:355707:at_bat', 'user:225671:at_bat', 'user:791167:at_bat', '
user:830507:at_bat', 'user:399117:at_bat', 'user:436238:at_bat', 'user:422532:at
_bat', 'user:591676:at_bat', 'user:266992:at_bat', 'user:322105:at_bat', 'user:4
55570:at_bat', 'user:771940:at_bat', 'user:558680:at_bat', 'user:835946:at_bat',
'user:198456:at_bat', 'user:721300:at_bat', 'user:612169:at_bat', 'user:116929:
at_bat', 'user:832150:at_bat', 'user:826495:at_bat', 'user:123304:at_bat', 'user
:261192:at_bat', 'user:496634:at_bat', 'user:304440:at_bat', 'user:210600:at_bat
', 'user:500016:at_bat', 'user:486033:at_bat', 'user:532176:at_bat', 'user:21957
7:at_bat', 'user:741096:at_bat', 'user:165040:at_bat', 'user:346426:at_bat', 'us
er:775238:at_bat', 'user:406299:at_bat', 'user:499074:at_bat', 'user:702888:at_b
at', 'user:204739:at_bat', 'user:748330:at_bat', 'user:642399:at_bat', 'user:667
41:at_bat', 'user:430911:at_bat', 'user:127578:at_bat', 'user:488585:at_bat', 'u
ser:578872:at_bat', 'user:776626:at_bat', 'user:57194:at_bat', 'user:782347:at_b
at', 'user:607405:at_bat', 'user:436054:at_bat', 'user:831691:at_bat', 'user:759
571:at_bat', 'user:752487:at_bat', 'user:459467:at_bat', 'user:590208:at_bat', '
user:839856:role', 'user:577491:at_bat', 'user:503337:at_bat', 'user:662582:at_b
at', 'user:268893:at_bat', 'user:235648:at_bat', 'user:437215:at_bat', 'user:798
272:at_bat', 'user:204253:at_bat', 'user:42836:at_bat', 'user:184678:at_bat', 'u
ser:41404:at_bat', 'user:36493:at_bat', 'user:705172:at_bat', 'user:150776:at_ba
t', 'user:756645:at_bat', 'user:601612:at_bat', 'user:665905:at_bat', 'user:1294
83:at_bat', 'user:60375:at_bat', 'user:299457:at_bat', 'user:547871:at_bat', 'us
er:538735:at_bat', 'user:213793:at_bat', 'user:393589:channels', 'user:386983:at
_bat', 'user:687847:at_bat', 'user:617526:at_bat', 'user:719298:at_bat', 'user:4
77038:at_bat', 'user:613108:at_bat', 'user:379849:at_bat', 'user:703955:at_bat',
'user:411461:at_bat', 'user:497513:at_bat', 'user:708665:at_bat', 'user:582933:
at_bat', 'user:216959:at_bat', 'user:811181:at_bat', 'user:521434:at_bat', 'user
:262687:at_bat', 'user:308604:at_bat', 'user:361689:role', 'user:80223:at_bat',
'user:482127:at_bat', 'user:471384:at_bat', 'user:233657:at_bat', 'user:705600:a
t_bat', 'user:376939:at_bat', 'user:573936:at_bat', 'user:648856:at_bat', 'user:
674710:at_bat', 'user:359540:at_bat', 'user:594954:at_bat', 'user:432094:at_bat'
, 'user:671519:at_bat', 'user:250060:at_bat', 'user:782401:at_bat', 'user:34236:
at_bat', 'user:293031:at_bat', 'user:88949:at_bat', 'user:788664:at_bat', 'user:
694495:at_bat', 'user:425305:at_bat', 'user:659243:at_bat', 'user:443078:at_bat'
, 'user:253130:at_bat', 'user:50234:at_bat', 'user:369776:at_bat', 'user:756487:
at_bat', 'user:674983:at_bat', 'user:465651:at_bat', 'user:587579:at_bat', 'user
:114595:at_bat', 'user:190170:at_bat', 'user:65673:at_bat', 'user:826960:at_bat'
, 'user:743389:at_bat', 'user:444922:at_bat', 'user:304727:at_bat', 'user:247904
:at_bat', 'user:150977:at_bat', 'user:588829:at_bat', 'user:772737:at_bat', 'use
r:710124:at_bat', 'user:814091:channels', 'user:134201:at_bat', 'user:347293:at_
bat', 'user:241514:at_bat', 'user:87300:at_bat', 'user:469685:at_bat', 'user:220
686:at_bat', 'user:245054:at_bat', 'user:410857:at_bat', 'user:591562:at_bat', '
user:424416:at_bat', 'user:729157:at_bat', 'user:296504:at_bat', 'user:776046:at
_bat', 'user:686575:at_bat', 'user:19747:at_bat', 'user:699128:at_bat', 'user:46
1940:at_bat', 'user:83955:at_bat', 'user:426705:at_bat', 'user:756794:at_bat', '
user:689317:role', 'user:72405:at_bat', 'user:158974:at_bat', 'user:35024:at_bat
', 'user:456665:at_bat', 'user:635329:at_bat', 'user:290756:at_bat', 'user:10507
1:at_bat', 'user:119215:at_bat', 'user:10245:at_bat', 'user:272283:at_bat', 'use
r:396787:at_bat', 'user:398929:at_bat', 'user:281646:at_bat', 'user:690025:at_ba
t', 'user:787357:at_bat', 'user:739765:at_bat', 'user:253634:at_bat', 'user:2649
15:at_bat', 'user:477683:at_bat', 'user:127210:at_bat', 'user:596730:at_bat', 'u
ser:287438:at_bat', 'user:577583:at_bat', 'user:50712:at_bat', 'user:829473:at_b
at', 'user:153053:at_bat', 'user:544786:at_bat', 'user:399451:at_bat', 'user:465
816:at_bat', 'user:457085:at_bat', 'user:357700:at_bat', 'user:438850:at_bat', '
user:569050:at_bat', 'user:819481:at_bat', 'user:752163:at_bat', 'user:438220:at
_bat', 'user:837030:at_bat', 'user:115516:at_bat', 'user:725700:at_bat', 'user:6
18183:at_bat', 'user:106470:at_bat', 'user:116925:at_bat', 'user:654383:at_bat',
'user:386730:at_bat', 'user:162065:at_bat', 'user:282131:channels', 'user:18128
3:at_bat', 'user:145062:at_bat', 'user:115447:at_bat', 'user:527441:at_bat', 'us
er:224979:at_bat', 'user:345332:at_bat', 'user:58407:at_bat', 'user:469344:at_ba
t', 'user:814557:at_bat', 'user:686717:at_bat', 'user:360385:at_bat', 'user:2381

修复方案:

~~

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:5

确认时间:2015-05-05 11:32

厂商回复:

让开发配置,开发说已经关闭远程连接所以没有问题。

最新状态:

2015-05-12:漏洞已经修复,非常感谢作者对我们信息安全的帮助