当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0125596

漏洞标题：雷锋网一处未授权访问（泄漏大量信息）

相关厂商：雷锋网

漏洞作者： null_z

提交时间：2015-07-09 12:17

修复时间：2015-08-23 12:48

公开时间：2015-08-23 12:48

漏洞类型：未授权访问/权限绕过

危害等级：中

自评Rank：10

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-07-09： 细节已通知厂商并且等待厂商处理中
2015-07-09： 厂商已经确认，细节仅向厂商公开
2015-07-19： 细节向核心白帽子及相关领域专家公开
2015-07-29： 细节向普通白帽子公开
2015-08-08： 细节向实习白帽子公开
2015-08-23： 细节向公众公开

简要描述：

未授权访问

详细说明：

memcached未授权访问
ip地址113.106.92.93
直接访问ip地址就是雷锋网旗下的爱搞机主站。

root@kali:~# nc -vv 113.106.92.93 11211
113.106.92.93: inverse host lookup failed: Unknown server error : Connection timed out
(UNKNOWN) [113.106.92.93] 11211 (?) open
stats items
STAT items:2:number 11224
STAT items:2:age 13851
STAT items:2:evicted 0
STAT items:2:evicted_nonzero 0
STAT items:2:evicted_time 0
STAT items:2:outofmemory 0
STAT items:2:tailrepairs 0
STAT items:3:number 15737
STAT items:3:age 20834
STAT items:3:evicted 0
STAT items:3:evicted_nonzero 0
STAT items:3:evicted_time 0
STAT items:3:outofmemory 0
STAT items:3:tailrepairs 0
STAT items:4:number 1
STAT items:4:age 1383268
STAT items:4:evicted 0
STAT items:4:evicted_nonzero 0
STAT items:4:evicted_time 0
STAT items:4:outofmemory 0
STAT items:4:tailrepairs 0
STAT items:5:number 2261
STAT items:5:age 1227037
STAT items:5:evicted 0
STAT items:5:evicted_nonzero 0
STAT items:5:evicted_time 0
STAT items:5:outofmemory 0
STAT items:5:tailrepairs 0
STAT items:6:number 6758
STAT items:6:age 1226538
STAT items:6:evicted 0
STAT items:6:evicted_nonzero 0
STAT items:6:evicted_time 0
STAT items:6:outofmemory 0
STAT items:6:tailrepairs 0
STAT items:7:number 121
STAT items:7:age 1377662
STAT items:7:evicted 0
STAT items:7:evicted_nonzero 0
STAT items:7:evicted_time 0
STAT items:7:outofmemory 0
STAT items:7:tailrepairs 0
STAT items:8:number 16
STAT items:8:age 17403
STAT items:8:evicted 0
STAT items:8:evicted_nonzero 0
STAT items:8:evicted_time 0
STAT items:8:outofmemory 0
STAT items:8:tailrepairs 0
STAT items:9:number 4
STAT items:9:age 107926
STAT items:9:evicted 0
STAT items:9:evicted_nonzero 0
STAT items:9:evicted_time 0
STAT items:9:outofmemory 0
STAT items:9:tailrepairs 0
STAT items:11:number 1
STAT items:11:age 1382494
STAT items:11:evicted 0
STAT items:11:evicted_nonzero 0
STAT items:11:evicted_time 0
STAT items:11:outofmemory 0
STAT items:11:tailrepairs 0
STAT items:12:number 3
STAT items:12:age 1318421
STAT items:12:evicted 0
STAT items:12:evicted_nonzero 0
STAT items:12:evicted_time 0
STAT items:12:outofmemory 0
STAT items:12:tailrepairs 0
STAT items:16:number 1
STAT items:16:age 1229976
STAT items:16:evicted 0
STAT items:16:evicted_nonzero 0
STAT items:16:evicted_time 0
STAT items:16:outofmemory 0
STAT items:16:tailrepairs 0
STAT items:17:number 1
STAT items:17:age 1384642
STAT items:17:evicted 0
STAT items:17:evicted_nonzero 0
STAT items:17:evicted_time 0
STAT items:17:outofmemory 0
STAT items:17:tailrepairs 0
STAT items:19:number 1
STAT items:19:age 210547
STAT items:19:evicted 0
STAT items:19:evicted_nonzero 0
STAT items:19:evicted_time 0
STAT items:19:outofmemory 0
STAT items:19:tailrepairs 0
STAT items:21:number 1
STAT items:21:age 1384410
STAT items:21:evicted 0
STAT items:21:evicted_nonzero 0
STAT items:21:evicted_time 0
STAT items:21:outofmemory 0
STAT items:21:tailrepairs 0
STAT items:22:number 2
STAT items:22:age 1343760
STAT items:22:evicted 0
STAT items:22:evicted_nonzero 0
STAT items:22:evicted_time 0
STAT items:22:outofmemory 0
STAT items:22:tailrepairs 0
STAT items:23:number 1
STAT items:23:age 1343801
STAT items:23:evicted 0
STAT items:23:evicted_nonzero 0
STAT items:23:evicted_time 0
STAT items:23:outofmemory 0
STAT items:23:tailrepairs 0
STAT items:24:number 2
STAT items:24:age 1343595
STAT items:24:evicted 0
STAT items:24:evicted_nonzero 0
STAT items:24:evicted_time 0
STAT items:24:outofmemory 0
STAT items:24:tailrepairs 0
STAT items:25:number 1
STAT items:25:age 1383812
STAT items:25:evicted 0
STAT items:25:evicted_nonzero 0
STAT items:25:evicted_time 0
STAT items:25:outofmemory 0
STAT items:25:tailrepairs 0
STAT items:26:number 1
STAT items:26:age 1377716
STAT items:26:evicted 0
STAT items:26:evicted_nonzero 0
STAT items:26:evicted_time 0
STAT items:26:outofmemory 0
STAT items:26:tailrepairs 0
STAT items:27:number 1
STAT items:27:age 1146774
STAT items:27:evicted 0
STAT items:27:evicted_nonzero 0
STAT items:27:evicted_time 0
STAT items:27:outofmemory 0
STAT items:27:tailrepairs 0
STAT items:28:number 1
STAT items:28:age 286720
STAT items:28:evicted 0
STAT items:28:evicted_nonzero 0
STAT items:28:evicted_time 0
STAT items:28:outofmemory 0
STAT items:28:tailrepairs 0
STAT items:29:number 1
STAT items:29:age 1384034
STAT items:29:evicted 0
STAT items:29:evicted_nonzero 0
STAT items:29:evicted_time 0
STAT items:29:outofmemory 0
STAT items:29:tailrepairs 0
STAT items:30:number 1
STAT items:30:age 1147038
STAT items:30:evicted 0
STAT items:30:evicted_nonzero 0
STAT items:30:evicted_time 0
STAT items:30:outofmemory 0
STAT items:30:tailrepairs 0
STAT items:31:number 2
STAT items:31:age 286191
STAT items:31:evicted 0
STAT items:31:evicted_nonzero 0
STAT items:31:evicted_time 0
STAT items:31:outofmemory 0
STAT items:31:tailrepairs 0
STAT items:32:number 1
STAT items:32:age 285783
STAT items:32:evicted 0
STAT items:32:evicted_nonzero 0
STAT items:32:evicted_time 0
STAT items:32:outofmemory 0
STAT items:32:tailrepairs 0
END

漏洞证明：

2015-07-09 12:07:11的屏幕截图.png

修复方案：

给个高rank就继续测试哦。么么哒。。。。

版权声明：转载请注明来源 null_z@乌云

漏洞回应

厂商回应：

危害等级：低

漏洞Rank：4

确认时间：2015-07-09 12:47

厂商回复：

多谢提醒，这是我们测试服务器的IP,您访问到的爱搞机主站，应该可以看到都是测试数据。测试人员为了本地测试使用打开了memcache端口的访问。正式服务器是不会开启的。我们会对服务器防火墙作进一步限制，以防今后出现不可预见的问题，多谢~

最新状态：

暂无