当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2013-025445

漏洞标题：西北工业大学DNS域传送漏洞

相关厂商：西北工业大学

漏洞作者： Alcar

提交时间：2013-06-08 13:38

修复时间：2013-07-23 13:39

公开时间：2013-07-23 13:39

漏洞类型：网络敏感信息泄漏

危害等级：中

自评Rank：5

漏洞状态：未联系到厂商或者厂商积极忽略

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2013-06-08： 积极联系厂商并且等待厂商认领中，细节不对外公开
2013-07-23： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

西北工业大学DNS服务器配置不当导致DNS域传送漏洞
分别为dns.nwpu.edu.cn,dns2.nwpu.edu.cn

详细说明：

root@kali:~# dnsenum nwpu.edu.cn
dnsenum.pl VERSION:1.2.2
-----   nwpu.edu.cn   -----
Host's addresses:
__________________
Name Servers:
______________
dns.nwpu.edu.cn                          69087    IN    A        202.117.80.2
dns3.nwpu.edu.cn                         0        IN    A        202.117.80.3
dns2.nwpu.edu.cn                         0        IN    A        202.117.80.2
dns1.nwpu.edu.cn                         68771    IN    A        202.117.80.3
Mail (MX) Servers:
___________________
nwpu03.nwpu.edu.cn                       64911    IN    A        202.117.80.4
nwpu03.nwpu.edu.cn                       64911    IN    A        202.117.80.4
nwpu03.nwpu.edu.cn                       64911    IN    A        202.117.80.4
nwpu03.nwpu.edu.cn                       64911    IN    A        202.117.80.4
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for nwpu.edu.cn on dns.nwpu.edu.cn ... 
nwpu.edu.cn                              86400    IN    SOA                
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              600      IN    MX                 
nwpu.edu.cn                              600      IN    MX                 
*.nwpu.edu.cn                            86400    IN    A        222.24.192.45
amec.nwpu.edu.cn                         86400    IN    NS                 
netserver.amec.nwpu.edu.cn               86400    IN    A        202.117.85.2
anti-virus.nwpu.edu.cn                   86400    IN    A        222.24.211.30
apps.nwpu.edu.cn                         86400    IN    A        222.24.192.82
archives.nwpu.edu.cn                     86400    IN    A        222.24.192.70
asn.nwpu.edu.cn                          86400    IN    A        202.117.80.1
bbs.nwpu.edu.cn                          86400    IN    A        222.24.192.61
campus.nwpu.edu.cn                       86400    IN    A        222.24.192.52
cas.nwpu.edu.cn                          86400    IN    A        222.24.192.81
ccc2013.nwpu.edu.cn                      86400    IN    A        222.24.192.44
ns.ce.nwpu.edu.cn                        86400    IN    A        202.117.88.181
cert.nwpu.edu.cn                         86400    IN    CNAME              
cifc2011.nwpu.edu.cn                     86400    IN    A        222.24.212.130
cme.nwpu.edu.cn                          86400    IN    NS                 
cms.nwpu.edu.cn                          86400    IN    A        222.24.211.60
csctc.nwpu.edu.cn                        86400    IN    A        222.24.192.39
cw.nwpu.edu.cn                           86400    IN    A        202.117.87.162
db.nwpu.edu.cn                           86400    IN    A        202.117.80.231
dcel.nwpu.edu.cn                         86400    IN    NS                 
www.dcel.nwpu.edu.cn                     86400    IN    A        202.117.85.130
denglun.nwpu.edu.cn                      86400    IN    A        202.117.80.24
dns.nwpu.edu.cn                          86400    IN    A        202.117.80.2
dns1.nwpu.edu.cn                         86400    IN    A        202.117.80.3
dns2.nwpu.edu.cn                         86400    IN    A        61.150.43.14
dns3.nwpu.edu.cn                         86400    IN    A        61.150.43.13
dzzf.nwpu.edu.cn                         86400    IN    A        222.24.201.133
eased.nwpu.edu.cn                        86400    IN    A        202.117.248.41
epaper.nwpu.edu.cn                       86400    IN    A        222.24.192.38
eqmanager1.nwpu.edu.cn                   600      IN    A        202.117.80.31
eqmanager2.nwpu.edu.cn                   600      IN    A        202.117.80.31
etv.nwpu.edu.cn                          86400    IN    A        202.117.80.20
fee.nwpu.edu.cn                          86400    IN    CNAME              
grs.nwpu.edu.cn                          86400    IN    A        222.24.211.70
gw.nwpu.edu.cn                           86400    IN    A        202.117.80.231
hongtd.nwpu.edu.cn                       86400    IN    A        222.24.192.52
houqin.nwpu.edu.cn                       600      IN    A        10.129.29.2
hpc.nwpu.edu.cn                          86400    IN    A        202.117.249.5
hq.nwpu.edu.cn                           86400    IN    A        202.117.255.106
i631.nwpu.edu.cn                         86400    IN    A        202.117.255.200
icpt2011.nwpu.edu.cn                     86400    IN    A        222.24.192.45
imap.nwpu.edu.cn                         86400    IN    CNAME              
info.nwpu.edu.cn                         86400    IN    A        222.24.192.51
job.nwpu.edu.cn                          600      IN    A        222.24.211.73
jobszqy.nwpu.edu.cn                      86400    IN    A        222.24.211.73
jpkc.nwpu.edu.cn                         86400    IN    A        202.117.80.9
jw.nwpu.edu.cn                           86400    IN    A        222.24.192.69
learn.nwpu.edu.cn                        86400    IN    A        202.117.80.212
ftpserver.lib.nwpu.edu.cn                86400    IN    A        202.117.255.179
webserver.lib.nwpu.edu.cn                86400    IN    CNAME              
www.lib.nwpu.edu.cn                      86400    IN    A        202.117.255.177
lifelab.nwpu.edu.cn                      86400    IN    A        202.117.85.11
login.nwpu.edu.cn                        86400    IN    CNAME              
mail.nwpu.edu.cn                         600      IN    A        202.117.80.4
mail.nwpu.edu.cn                         600      IN    MX                 
mail.nwpu.edu.cn                         600      IN    MX                 
mailbak.nwpu.edu.cn                      86400    IN    A        202.117.80.6
maildat.nwpu.edu.cn                      86400    IN    A        202.117.80.5
material.nwpu.edu.cn                     86400    IN    NS                 
dns.material.nwpu.edu.cn                 86400    IN    A        202.117.95.2
www.mba.nwpu.edu.cn                      86400    IN    CNAME              
mcm.nwpu.edu.cn                          86400    IN    A        222.24.192.52
mems.nwpu.edu.cn                         86400    IN    A        202.117.85.138
mun.nwpu.edu.cn                          86400    IN    A        202.117.88.135
netc-yx.nwpu.edu.cn                      86400    IN    A        202.117.83.90
newcampus.nwpu.edu.cn                    86400    IN    A        222.24.192.52
news.nwpu.edu.cn                         86400    IN    A        222.24.192.45
npunecas.nwpu.edu.cn                     86400    IN    NS                 
webcomp.npunecas.nwpu.edu.cn             86400    IN    A        202.117.85.146
nwpu03.nwpu.edu.cn                       86400    IN    A        202.117.80.4
nwpudb2.nwpu.edu.cn                      86400    IN    A        222.24.210.149
poj.nwpu.edu.cn                          86400    IN    A        192.168.0.248
pop3.nwpu.edu.cn                         86400    IN    CNAME              
portal.nwpu.edu.cn                       600      IN    A        222.24.192.74
portal1.nwpu.edu.cn                      600      IN    A        222.24.192.31
portal2.nwpu.edu.cn                      600      IN    A        222.24.192.32
rei.nwpu.edu.cn                          86400    IN    A        202.117.85.10
saip.nwpu.edu.cn                         86400    IN    NS                 
saipserver.saip.nwpu.edu.cn              86400    IN    A        202.117.85.72
search.nwpu.edu.cn                       86400    IN    A        222.24.192.54
self.nwpu.edu.cn                         86400    IN    A        202.117.80.218
sfzx.nwpu.edu.cn                         86400    IN    A        202.117.80.9
ski-ana.nwpu.edu.cn                      86400    IN    A        202.117.86.2
smtp.nwpu.edu.cn                         86400    IN    CNAME              
som.nwpu.edu.cn                          86400    IN    A        202.117.85.13
spacebiotech.nwpu.edu.cn                 86400    IN    A        10.128.6.5
staff.nwpu.edu.cn                        86400    IN    MX                 
staff.nwpu.edu.cn                        86400    IN    MX                 
sysc.nwpu.edu.cn                         86400    IN    A        202.117.85.136
test.nwpu.edu.cn                         86400    IN    A        222.24.192.29
tijianzhan.nwpu.edu.cn                   86400    IN    A        202.117.85.140
tuanwei.nwpu.edu.cn                      86400    IN    A        202.117.88.186
view.nwpu.edu.cn                         86400    IN    A        222.24.192.52
vpn.nwpu.edu.cn                          86400    IN    A        202.117.80.11
web.nwpu.edu.cn                          600      IN    A        222.24.192.44
www.nwpu.edu.cn                          600      IN    A        222.24.192.45
xbgf.nwpu.edu.cn                         86400    IN    A        202.117.85.14
xszy.nwpu.edu.cn                         86400    IN    A        222.24.192.60
xyh.nwpu.edu.cn                          86400    IN    A        222.24.192.76
yanhui.nwpu.edu.cn                       86400    IN    A        222.24.192.52
yingxin.nwpu.edu.cn                      86400    IN    A        222.24.211.31
ykt.nwpu.edu.cn                          86400    IN    A        222.24.201.132
yzb.nwpu.edu.cn                          600      IN    A        202.117.85.3
zsb.nwpu.edu.cn                          86400    IN    A        202.117.87.130
zygx.nwpu.edu.cn                         86400    IN    A        202.117.80.9
dns.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns1.nwpu.edu.cn ... 
AXFR record query failed: NOERROR
dns1.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns3.nwpu.edu.cn ... 
AXFR record query failed: NOERROR
dns3.nwpu.edu.cn Bind Version: BIND nwpu,Powered by nwpu.
Trying Zone Transfer for nwpu.edu.cn on dns2.nwpu.edu.cn ... 
nwpu.edu.cn                              86400    IN    SOA                
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              86400    IN    NS                 
nwpu.edu.cn                              600      IN    MX                 
nwpu.edu.cn                              600      IN    MX                 
*.nwpu.edu.cn                            86400    IN    A        222.24.192.45
amec.nwpu.edu.cn                         86400    IN    NS                 
netserver.amec.nwpu.edu.cn               86400    IN    A        202.117.85.2
anti-virus.nwpu.edu.cn                   86400    IN    A        222.24.211.30
apps.nwpu.edu.cn                         86400    IN    A        222.24.192.82
archives.nwpu.edu.cn                     86400    IN    A        222.24.192.70
asn.nwpu.edu.cn                          86400    IN    A        202.117.80.1
bbs.nwpu.edu.cn                          86400    IN    A        222.24.192.61
campus.nwpu.edu.cn                       86400    IN    A        222.24.192.52
cas.nwpu.edu.cn                          86400    IN    A        222.24.192.81
ccc2013.nwpu.edu.cn                      86400    IN    A        222.24.192.44
ns.ce.nwpu.edu.cn                        86400    IN    A        202.117.88.181
cert.nwpu.edu.cn                         86400    IN    CNAME              
cifc2011.nwpu.edu.cn                     86400    IN    A        222.24.212.130
cme.nwpu.edu.cn                          86400    IN    NS                 
cms.nwpu.edu.cn                          86400    IN    A        222.24.211.60
csctc.nwpu.edu.cn                        86400    IN    A        222.24.192.39
cw.nwpu.edu.cn                           86400    IN    A        202.117.87.162
db.nwpu.edu.cn                           86400    IN    A        202.117.80.231
dcel.nwpu.edu.cn                         86400    IN    NS                 
www.dcel.nwpu.edu.cn                     86400    IN    A        202.117.85.130
denglun.nwpu.edu.cn                      86400    IN    A        202.117.80.24
dns.nwpu.edu.cn                          86400    IN    A        202.117.80.2
dns1.nwpu.edu.cn                         86400    IN    A        202.117.80.3
dns2.nwpu.edu.cn                         86400    IN    A        61.150.43.14
dns3.nwpu.edu.cn                         86400    IN    A        61.150.43.13
dzzf.nwpu.edu.cn                         86400    IN    A        222.24.201.133
eased.nwpu.edu.cn                        86400    IN    A        202.117.248.41
epaper.nwpu.edu.cn                       86400    IN    A        222.24.192.38
eqmanager1.nwpu.edu.cn                   600      IN    A        202.117.80.31
eqmanager2.nwpu.edu.cn                   600      IN    A        202.117.80.31
etv.nwpu.edu.cn                          86400    IN    A        202.117.80.20
fee.nwpu.edu.cn                          86400    IN    CNAME              
grs.nwpu.edu.cn                          86400    IN    A        222.24.211.70
gw.nwpu.edu.cn                           86400    IN    A        202.117.80.231
hongtd.nwpu.edu.cn                       86400    IN    A        222.24.192.52
houqin.nwpu.edu.cn                       600      IN    A        10.129.29.2
hpc.nwpu.edu.cn                          86400    IN    A        202.117.249.5
hq.nwpu.edu.cn                           86400    IN    A        202.117.255.106
i631.nwpu.edu.cn                         86400    IN    A        202.117.255.200
icpt2011.nwpu.edu.cn                     86400    IN    A        222.24.192.45
imap.nwpu.edu.cn                         86400    IN    CNAME              
info.nwpu.edu.cn                         86400    IN    A        222.24.192.51
job.nwpu.edu.cn                          600      IN    A        222.24.211.73
jobszqy.nwpu.edu.cn                      86400    IN    A        222.24.211.73
jpkc.nwpu.edu.cn                         86400    IN    A        202.117.80.9
jw.nwpu.edu.cn                           86400    IN    A        222.24.192.69
learn.nwpu.edu.cn                        86400    IN    A        202.117.80.212
ftpserver.lib.nwpu.edu.cn                86400    IN    A        202.117.255.179
webserver.lib.nwpu.edu.cn                86400    IN    CNAME              
www.lib.nwpu.edu.cn                      86400    IN    A        202.117.255.177
lifelab.nwpu.edu.cn                      86400    IN    A        202.117.85.11
login.nwpu.edu.cn                        86400    IN    CNAME              
mail.nwpu.edu.cn                         600      IN    A        202.117.80.4
mail.nwpu.edu.cn                         600      IN    MX                 
mail.nwpu.edu.cn                         600      IN    MX                 
mailbak.nwpu.edu.cn                      86400    IN    A        202.117.80.6
maildat.nwpu.edu.cn                      86400    IN    A        202.117.80.5
material.nwpu.edu.cn                     86400    IN    NS                 
dns.material.nwpu.edu.cn                 86400    IN    A        202.117.95.2
www.mba.nwpu.edu.cn                      86400    IN    CNAME              
mcm.nwpu.edu.cn                          86400    IN    A        222.24.192.52
mems.nwpu.edu.cn                         86400    IN    A        202.117.85.138
mun.nwpu.edu.cn                          86400    IN    A        202.117.88.135
netc-yx.nwpu.edu.cn                      86400    IN    A        202.117.83.90
newcampus.nwpu.edu.cn                    86400    IN    A        222.24.192.52
news.nwpu.edu.cn                         86400    IN    A        222.24.192.45
npunecas.nwpu.edu.cn                     86400    IN    NS                 
webcomp.npunecas.nwpu.edu.cn             86400    IN    A        202.117.85.146
nwpu03.nwpu.edu.cn                       86400    IN    A        202.117.80.4
nwpudb2.nwpu.edu.cn                      86400    IN    A        222.24.210.149
poj.nwpu.edu.cn                          86400    IN    A        192.168.0.248
pop3.nwpu.edu.cn                         86400    IN    CNAME              
portal.nwpu.edu.cn                       600      IN    A        222.24.192.74
portal1.nwpu.edu.cn                      600      IN    A        222.24.192.31
portal2.nwpu.edu.cn                      600      IN    A        222.24.192.32
rei.nwpu.edu.cn                          86400    IN    A        202.117.85.10
saip.nwpu.edu.cn                         86400    IN    NS                 
saipserver.saip.nwpu.edu.cn              86400    IN    A        202.117.85.72
search.nwpu.edu.cn                       86400    IN    A        222.24.192.54
self.nwpu.edu.cn                         86400    IN    A        202.117.80.218
sfzx.nwpu.edu.cn                         86400    IN    A        202.117.80.9
ski-ana.nwpu.edu.cn                      86400    IN    A        202.117.86.2
smtp.nwpu.edu.cn                         86400    IN    CNAME              
som.nwpu.edu.cn                          86400    IN    A        202.117.85.13
spacebiotech.nwpu.edu.cn                 86400    IN    A        10.128.6.5
staff.nwpu.edu.cn                        86400    IN    MX                 
staff.nwpu.edu.cn                        86400    IN    MX                 
sysc.nwpu.edu.cn                         86400    IN    A        202.117.85.136
test.nwpu.edu.cn                         86400    IN    A        222.24.192.29
tijianzhan.nwpu.edu.cn                   86400    IN    A        202.117.85.140
tuanwei.nwpu.edu.cn                      86400    IN    A        202.117.88.186
view.nwpu.edu.cn                         86400    IN    A        222.24.192.52
vpn.nwpu.edu.cn                          86400    IN    A        202.117.80.11
web.nwpu.edu.cn                          600      IN    A        222.24.192.44
www.nwpu.edu.cn                          600      IN    A        222.24.192.45
xbgf.nwpu.edu.cn                         86400    IN    A        202.117.85.14
xszy.nwpu.edu.cn                         86400    IN    A        222.24.192.60
xyh.nwpu.edu.cn                          86400    IN    A        222.24.192.76
yanhui.nwpu.edu.cn                       86400    IN    A        222.24.192.52
yingxin.nwpu.edu.cn                      86400    IN    A        222.24.211.31
ykt.nwpu.edu.cn                          86400    IN    A        222.24.201.132
yzb.nwpu.edu.cn                          600      IN    A        202.117.85.3
zsb.nwpu.edu.cn                          86400    IN    A        202.117.87.130
zygx.nwpu.edu.cn                         86400    IN    A        202.117.80.9

漏洞证明：

Screenshot from 2013-06-08 13:30:51.png


Screenshot from 2013-06-08 13:31:29.png


修复方案：

更改dns服务器设置

版权声明：转载请注明来源 Alcar@乌云

漏洞回应

厂商回应：

未能联系到厂商或者厂商积极拒绝