漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2013-039725
漏洞标题：中国电信# 某业务DNS域传送漏洞一枚
相关厂商：cncert国家互联网应急中心
漏洞作者： 爱上平顶山
提交时间：2013-10-15 15:57
修复时间：2013-11-29 16:04
公开时间：2013-11-29 16:04
漏洞类型：系统/服务运维配置不当
危害等级：中
自评Rank：10
漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2013-10-15： 细节已通知厂商并且等待厂商处理中
2013-10-19： 厂商已经确认，细节仅向厂商公开
2013-10-29： 细节向核心白帽子及相关领域专家公开
2013-11-08： 细节向普通白帽子公开
2013-11-18： 细节向实习白帽子公开
2013-11-29： 细节向公众公开
简要描述：
0.0
详细说明：
中国电信股份有限公司云计算分公司
www.ctyun.cn
ok
C:\Documents and Settings\Administrator>nslookup
Default Server: google-public-dns-a.google.com
Address: 8.8.8.8
> set type=ns
> ctyun.cn
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
ctyun.cn nameserver = ns6.ctyun.cn
ctyun.cn nameserver = ns4.ctyun.cn
ctyun.cn nameserver = ns.ctyun.cn
ctyun.cn nameserver = ns2.ctyun.cn
ctyun.cn nameserver = ns3.ctyun.cn
ctyun.cn nameserver = ns5.ctyun.cn
> server ns2.ctyun.cn
Default Server: ns2.ctyun.cn
Address: 124.127.188.76
> ls ctyun.cn
[ns2.ctyun.cn]
ctyun.cn. A 118.85.194.44
ctyun.cn. NS server = ns.ctyun.cn
ctyun.cn. NS server = ns2.ctyun.cn
ctyun.cn. NS server = ns3.ctyun.cn
ctyun.cn. NS server = ns4.ctyun.cn
ctyun.cn. NS server = ns5.ctyun.cn
ctyun.cn. NS server = ns6.ctyun.cn
about A 124.127.188.86
atmos A 180.153.28.38
beta A 118.85.194.44
cdn01 A 124.127.188.77
webdev.chenlong A 124.127.188.75
app01.demo A 124.127.188.87
call01.demo A 124.127.188.91
call02.demo A 124.127.188.92
cloudoa.demo A 124.127.204.34
desktop01.demo A 124.127.188.75
desktop02.demo A 124.127.188.85
desktop03.demo A 124.127.188.92
desktop05.demo A 124.127.188.85
kr.demo A 124.127.188.68
sa.demo A 124.127.188.68
adaptor01.dev A 180.153.28.37
bestpay.dev A 124.127.188.78
deploy.dev A 101.227.253.113
deploygz.dev A 183.56.130.58
note01.dev A 124.127.188.83
skip.dev A 118.85.194.44
test01.dev A 180.153.28.36
yk.dev A 124.127.188.75
ecbs A 180.153.28.31
ecbserver A 180.153.28.32
api1.enote A 101.227.251.191
api2.enote A 101.227.251.192
madeira01.evalua A 124.127.188.79
madeira02.evalua A 124.127.188.80
mail A 124.127.204.62
mail1 A 182.140.241.46
oos-cd.monitor A 182.140.241.217
inbound.msf A 180.153.28.74
outbound.msf A 180.153.28.135
portal.msf A 180.153.28.101
ns A 124.127.188.75
ns2 A 124.127.188.76
ns3 A 101.227.253.39
ns4 A 183.56.128.146
ns5 A 101.227.253.40
ns6 A 183.56.128.152
oos A 180.153.28.107
oos-cd A 182.140.241.219
service A 118.85.194.42
sms01 A 124.127.188.82
api.temp A 124.127.188.84
api2.temp A 124.127.188.84
test.temp A 124.127.188.85
home.work A 124.127.188.76
>
哦了
漏洞证明：
C:\Documents and Settings\Administrator>nslookup
Default Server: google-public-dns-a.google.com
Address: 8.8.8.8
> set type=ns
> ctyun.cn
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
ctyun.cn nameserver = ns6.ctyun.cn
ctyun.cn nameserver = ns4.ctyun.cn
ctyun.cn nameserver = ns.ctyun.cn
ctyun.cn nameserver = ns2.ctyun.cn
ctyun.cn nameserver = ns3.ctyun.cn
ctyun.cn nameserver = ns5.ctyun.cn
> server ns2.ctyun.cn
Default Server: ns2.ctyun.cn
Address: 124.127.188.76
> ls ctyun.cn
[ns2.ctyun.cn]
ctyun.cn. A 118.85.194.44
ctyun.cn. NS server = ns.ctyun.cn
ctyun.cn. NS server = ns2.ctyun.cn
ctyun.cn. NS server = ns3.ctyun.cn
ctyun.cn. NS server = ns4.ctyun.cn
ctyun.cn. NS server = ns5.ctyun.cn
ctyun.cn. NS server = ns6.ctyun.cn
about A 124.127.188.86
atmos A 180.153.28.38
beta A 118.85.194.44
cdn01 A 124.127.188.77
webdev.chenlong A 124.127.188.75
app01.demo A 124.127.188.87
call01.demo A 124.127.188.91
call02.demo A 124.127.188.92
cloudoa.demo A 124.127.204.34
desktop01.demo A 124.127.188.75
desktop02.demo A 124.127.188.85
desktop03.demo A 124.127.188.92
desktop05.demo A 124.127.188.85
kr.demo A 124.127.188.68
sa.demo A 124.127.188.68
adaptor01.dev A 180.153.28.37
bestpay.dev A 124.127.188.78
deploy.dev A 101.227.253.113
deploygz.dev A 183.56.130.58
note01.dev A 124.127.188.83
skip.dev A 118.85.194.44
test01.dev A 180.153.28.36
yk.dev A 124.127.188.75
ecbs A 180.153.28.31
ecbserver A 180.153.28.32
api1.enote A 101.227.251.191
api2.enote A 101.227.251.192
madeira01.evalua A 124.127.188.79
madeira02.evalua A 124.127.188.80
mail A 124.127.204.62
mail1 A 182.140.241.46
oos-cd.monitor A 182.140.241.217
inbound.msf A 180.153.28.74
outbound.msf A 180.153.28.135
portal.msf A 180.153.28.101
ns A 124.127.188.75
ns2 A 124.127.188.76
ns3 A 101.227.253.39
ns4 A 183.56.128.146
ns5 A 101.227.253.40
ns6 A 183.56.128.152
oos A 180.153.28.107
oos-cd A 182.140.241.219
service A 118.85.194.42
sms01 A 124.127.188.82
api.temp A 124.127.188.84
api2.temp A 124.127.188.84
test.temp A 124.127.188.85
home.work A 124.127.188.76
>
修复方案：
改设置。
版权声明：转载请注明来源 爱上平顶山@乌云
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：5
确认时间：2013-10-19 21:03
厂商回复：
最新状态：
暂无