当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2012-08717

漏洞标题:网络违法犯罪举报网站DNS传送域漏洞

相关厂商:网络违法犯罪举报网站

漏洞作者: _Evil

提交时间:2012-06-24 18:01

修复时间:2012-08-08 18:02

公开时间:2012-08-08 18:02

漏洞类型:系统/服务运维配置不当

危害等级:中

自评Rank:10

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2012-06-24: 细节已通知厂商并且等待厂商处理中
2012-06-26: 厂商已经确认,细节仅向厂商公开
2012-07-06: 细节向核心白帽子及相关领域专家公开
2012-07-16: 细节向普通白帽子公开
2012-07-26: 细节向实习白帽子公开
2012-08-08: 细节向公众公开

简要描述:

这个网站惹我犯罪 (#‵′)

详细说明:

http://www.cyberpolice.cn

changchun                      A      61.138.176.93
changdu A 220.182.3.22
www.changdu A 220.182.3.22
changsha A 202.103.69.62
chaohu A 60.174.198.9
www.chaohu A 220.180.245.12
chengdu A 218.6.168.107
chifeng A 60.31.196.126
www.chifeng A 60.31.196.126
chizhou A 218.22.211.165
www.chizhou A 220.180.84.10
www.chongzuo A 220.200.114.12
chuzhou A 60.172.139.50
www.chuzhou A 218.23.236.18
mail.bj.cyberpolice.cn CNAME qiye.163.com
cq A 61.186.159.85
www.cq A 61.186.250.110
dalian A 210.83.208.156
www.dalian A 210.83.208.154
www.daqing A 60.218.96.253
www.daxinganling A 218.7.240.215
dezhou A 222.174.54.172
dongying A 60.214.233.52
www.dongying A 60.214.233.52
eerduosi A 60.31.196.126
www.eerduosi A 60.31.196.126
enshi A 58.19.173.194
www.enshi A 58.19.173.194
ezhou A 219.138.222.228
www.ezhou A 219.138.222.228
www.fangchenggang A 219.159.185.73
www.fj A 218.66.36.227
www.futian A 218.86.63.106
fuyang A 218.23.30.82
www.fuyang A 218.23.30.91
www.fuzhou A 218.66.36.227
www.ganzhou A 59.52.97.231
guangzhou A 61.144.139.16
www.guigang A 218.65.250.201
www.guilin A 220.173.141.169
guiyang A 219.151.1.132
www.gx A 222.216.5.60
gz A 219.141.36.137
www.ha A 218.28.193.196
haerbin A 218.9.29.201
www.haerbin A 218.9.29.201
haikou A 59.50.99.253
www.haikou A 59.50.99.253
hangzhou A 202.91.244.130
www.hangzhou A 202.91.244.130
www.hanzhong A 61.134.36.43
www.hebi A 222.141.118.1
www.hebi A 222.141.118.2
www.hechi A 218.65.221.116
hefei A 218.104.73.195
www.hegang A 202.97.245.34
www.heihe A 61.158.101.88
www.henan A 218.28.193.195
heze A 219.146.168.202
www.heze A 219.146.168.202
www.hezhou A 222.216.224.166
www.hlj A 221.212.235.8
huaibei A 220.179.165.186
www.huaibei A 220.179.173.7
huainan A 60.171.56.199
www.huainan A 60.171.56.199
huanggang A 202.103.57.44
www.huanggang A 202.103.57.44
huangshan A 218.22.223.104
huangshi A 61.184.101.46
www.huangshi A 61.184.101.46
hubei A 221.232.131.52
www.hubei A 221.232.131.52
huhehaote A 60.31.214.155
www.huhehaote A 60.31.214.155
hulunbeier A 60.31.196.126
www.hulunbeier A 60.31.196.126
huzhou A 220.189.237.14
www.huzhou A 220.189.237.14
www.jiamusi A 61.138.10.100
www.jian A 59.52.97.231
www.jianghanyoutian A 61.183.23.229
www.jiaozuo A 202.102.253.30
www.jiaxing A 122.225.18.135
jilin A 202.111.169.230
jinan A 61.133.3.54
www.jinan A 61.133.3.60
www.jingdezhen A 59.52.97.231
jingmen A 221.234.25.75
www.jingmen A 221.234.25.75
www.jingzhou A 61.184.45.154
jinhua A 61.175.226.28
www.jinhua A 61.175.226.28
jining A 222.175.162.5
www.jining A 222.175.162.5
www.jiujiang A 59.52.97.231
www.jixi A 218.8.251.19
www.jiyuan A 125.46.0.108
js A 222.190.111.54
www.js A 222.190.111.54
www.jx A 59.52.97.231
www.kaifeng A 218.28.206.52
www.kaifeng A 218.28.206.62
kunming A 220.163.12.124
www.laibin A 218.21.64.12
www.laibin A 218.21.164.12
lanzhou A 202.100.72.52
lanzhou MX 10 mail.lanzhou.cyberpolice.cn
mail.lanzhou A 202.100.64.115
lasa A 219.151.40.12
lasa A 220.182.3.22
www.lasa A 220.182.3.22
liaocheng A 61.156.38.7
www.liaocheng A 61.156.38.7
linyi A 61.133.63.211
www.linyi A 61.133.63.211
linzhi A 220.182.3.22
www.linzhi A 220.182.3.22
liuan A 218.23.82.203
www.liuzhou A 202.103.207.206
ln A 218.25.29.196
www.ln A 218.25.29.196
www.longyan A 220.162.160.13
www.luan A 218.23.82.210
www.luohe A 222.141.201.163
www.luoyang A 221.15.75.140
maanshan A 218.22.169.91
www.maanshan A 218.22.169.91
www.mudanjiang A 218.7.84.126
nanchang A 218.87.4.80
www.nanchang A 117.40.91.39
nanjing A 218.94.6.179
nanning A 222.216.1.138
www.nanning A 222.216.1.138
www.nanping A 218.66.36.227
www.nanyang A 218.28.79.213
naqu A 220.182.3.22
www.naqu A 220.182.3.22
ningbo A 61.153.17.94
www.ningbo A 221.136.54.33
www.ningde A 220.249.141.140
nmg A 60.31.196.126
www.nmg A 60.31.196.126
www.nx A 211.93.5.36
www.pingdingshan A 125.46.111.171
www.pingxiang A 59.52.97.231
www.putian A 218.66.36.227
www.puyang A 125.46.109.221
qh A 125.72.63.59
www.qh A 125.72.63.59
qianjiang A 221.232.131.52
www.qianjiang A 221.232.131.52
qingdao A 218.57.19.118
www.qinghai A 221.207.14.75
www.qinzhou A 222.83.251.88
qiqihaer A 218.10.2.217
www.qiqihaer A 218.10.2.217
www.qitaihe A 61.243.204.173
www.quanzhou A 218.5.102.130
quzhou A 221.12.142.250
www.quzhou A 221.12.142.250
rika A 220.182.3.22
www.rika A 220.182.3.22
rikaze A 220.182.3.22
www.rikaze A 220.182.3.22
rizhao A 222.133.189.12
www.sanmenxia A 125.46.98.126
www.sanming A 218.86.121.26
www.sanya A 220.200.110.10
sh A 202.101.5.158
www.sh A 202.101.5.158
www.shangluo A 61.134.49.13
www.shangqiu A 222.138.139.242
www.shangrao A 59.52.97.231
shannan A 220.182.3.22
www.shannan A 220.182.3.22
www.shaoxing A 122.224.8.133
shennongjia A 221.232.131.52
www.shennongjia A 221.232.131.52
shenyang A 202.107.119.199
www.shenyang A 218.25.49.231
shenzhen A 202.104.129.181
shijiazhuang A 218.12.44.139
shiyan A 61.183.35.4
www.shiyan A 61.183.35.4
www.shuangyashan A 219.147.231.117
www.suihua A 218.7.159.172
suizhou A 219.138.243.151
www.suizhou A 219.138.243.151
suzhou A 221.224.13.92
www.suzhou A 221.224.13.92
taian A 218.56.145.234
www.taian A 218.56.145.234
taiyuan A 202.99.219.148
dsn.taiyuan A 202.99.219.148
taizhou A 61.191.128.140
www.taizhou A 61.191.128.140
tianmen A 61.136.252.153
www.tianmen A 61.136.252.153
tj A 60.28.141.228
www.tj A 60.28.141.228
www.tongchuan A 61.134.53.110
tongliao A 60.31.196.126
www.tongliao A 60.31.196.126
tongling A 202.102.202.102
www.tongling A 202.102.202.102
weifang A 218.59.139.14
www.weifang A 218.59.139.14
weihai A 221.2.152.67
www.weinan A 61.150.87.7
www.wenzhou A 220.189.246.77
wuhai A 60.31.196.126
www.wuhai A 60.31.196.126
wuhan A 221.232.152.66
www.wuhan A 221.232.152.66
wuhu A 60.169.1.28
www.wuhu A 60.169.1.28
wulanchabu A 60.31.196.126
www.wulanchabu A 60.31.196.126
wulumuqi A 61.128.100.45
www.wulumuqi A 61.218.100.45
www.wuzhou A 202.103.251.242
www A 211.88.112.60
xiamen A 202.101.104.106
www.xiamen A 202.101.104.113
xian A 222.90.28.98
www.xian A 222.90.28.99
xiangan A 219.138.199.148
www.xiangan A 219.138.199.148
xiangfan A 211.91.147.152
www.xiangfan A 211.91.147.152
www.xiangyang A 124.116.176.80
xianning A 61.184.179.45
www.xianning A 61.184.179.45
xiantao A 221.233.240.2
www.xiantao A 202.103.13.237
www.xianyang A 61.134.26.129
www.xiaogan A 219.138.199.148
xilinguole A 61.134.97.59
www.xilinguole A 60.134.97.59
xingan A 60.31.196.126
www.xingan A 60.31.196.126
xining A 220.167.224.114
www.xinxiang A 222.139.151.69
www.xinyang A 218.28.83.37
www.xinyu A 59.52.97.231
www.xjakesu A 218.84.218.2
www.xjaletai A 218.31.88.138
www.xjbazhou A 218.34.124.228
xjbozhou A 218.31.94.150
www.xjbozhou A 218.31.94.150
www.xjchangji A 218.31.43.46
www.xjhami A 218.202.193.165
www.xjhetian A 218.31.134.254
www.xjkashi A 218.84.175.35
xjkelamayi A 218.84.100.115
www.xjkelamayi A 218.84.100.115
www.xjkezhou A 218.84.240.2
www.xjshihezi A 218.84.65.7
www.xjtacheng A 218.84.35.45
www.xjtulufan A 218.202.191.5
xjwulumuqi A 222.82.238.83
www.xjwulumuqi A 222.82.238.83
www.xjyili A 218.31.66.87
xuancheng A 58.243.104.147
www.xuancheng A 218.22.204.20
www.xuchang A 222.140.6.21
www.xuchang A 222.140.6.22
www.xz A 220.182.3.22
www.yanan A 61.185.12.86
www.yangling A 61.150.65.196
yantai A 218.56.37.12
www.yantai A 222.135.146.6
yichang A 61.136.223.238
www.yichang A 61.136.223.238
www.yichun A 59.52.97.231
www.yichun A 202.97.236.157
yinchuan A 202.100.100.29
www.yingtan A 59.52.97.231
www.yn A 61.159.214.200
www.yulin A 61.134.60.18
www.yulin A 124.226.234.24
www.yulin A 202.103.246.197
zaozhuang A 218.56.153.36
www.zaozhuang A 218.56.153.36
www.zhangzhou A 218.66.36.227
zhengzhou CNAME www.zz-police.com
www.zhengzhou A 202.111.153.27
www.zhoukou A 61.158.228.185
www.zhoukou A 61.163.127.53
zhoushan A 61.153.213.66
www.zhoushan A 61.153.213.66
www.zhumadian A 218.28.100.11
www.zhumadian A 218.29.231.30
zibo A 219.146.145.235
www.zibo A 219.146.145.235
www.zj A 202.75.222.28
www.zj A 211.155.233.248
cyberpolice.cn. SOA dns1.datadragon.net lichao.bj.datadragon.net. (2012053103 86400 7200 86400 3600)
>


漏洞证明:

http://www.cyberpolice.cn

changchun                      A      61.138.176.93
changdu A 220.182.3.22
www.changdu A 220.182.3.22
changsha A 202.103.69.62
chaohu A 60.174.198.9
www.chaohu A 220.180.245.12
chengdu A 218.6.168.107
chifeng A 60.31.196.126
www.chifeng A 60.31.196.126
chizhou A 218.22.211.165
www.chizhou A 220.180.84.10
www.chongzuo A 220.200.114.12
chuzhou A 60.172.139.50
www.chuzhou A 218.23.236.18
mail.bj.cyberpolice.cn CNAME qiye.163.com
cq A 61.186.159.85
www.cq A 61.186.250.110
dalian A 210.83.208.156
www.dalian A 210.83.208.154
www.daqing A 60.218.96.253
www.daxinganling A 218.7.240.215
dezhou A 222.174.54.172
dongying A 60.214.233.52
www.dongying A 60.214.233.52
eerduosi A 60.31.196.126
www.eerduosi A 60.31.196.126
enshi A 58.19.173.194
www.enshi A 58.19.173.194
ezhou A 219.138.222.228
www.ezhou A 219.138.222.228
www.fangchenggang A 219.159.185.73
www.fj A 218.66.36.227
www.futian A 218.86.63.106
fuyang A 218.23.30.82
www.fuyang A 218.23.30.91
www.fuzhou A 218.66.36.227
www.ganzhou A 59.52.97.231
guangzhou A 61.144.139.16
www.guigang A 218.65.250.201
www.guilin A 220.173.141.169
guiyang A 219.151.1.132
www.gx A 222.216.5.60
gz A 219.141.36.137
www.ha A 218.28.193.196
haerbin A 218.9.29.201
www.haerbin A 218.9.29.201
haikou A 59.50.99.253
www.haikou A 59.50.99.253
hangzhou A 202.91.244.130
www.hangzhou A 202.91.244.130
www.hanzhong A 61.134.36.43
www.hebi A 222.141.118.1
www.hebi A 222.141.118.2
www.hechi A 218.65.221.116
hefei A 218.104.73.195
www.hegang A 202.97.245.34
www.heihe A 61.158.101.88
www.henan A 218.28.193.195
heze A 219.146.168.202
www.heze A 219.146.168.202
www.hezhou A 222.216.224.166
www.hlj A 221.212.235.8
huaibei A 220.179.165.186
www.huaibei A 220.179.173.7
huainan A 60.171.56.199
www.huainan A 60.171.56.199
huanggang A 202.103.57.44
www.huanggang A 202.103.57.44
huangshan A 218.22.223.104
huangshi A 61.184.101.46
www.huangshi A 61.184.101.46
hubei A 221.232.131.52
www.hubei A 221.232.131.52
huhehaote A 60.31.214.155
www.huhehaote A 60.31.214.155
hulunbeier A 60.31.196.126
www.hulunbeier A 60.31.196.126
huzhou A 220.189.237.14
www.huzhou A 220.189.237.14
www.jiamusi A 61.138.10.100
www.jian A 59.52.97.231
www.jianghanyoutian A 61.183.23.229
www.jiaozuo A 202.102.253.30
www.jiaxing A 122.225.18.135
jilin A 202.111.169.230
jinan A 61.133.3.54
www.jinan A 61.133.3.60
www.jingdezhen A 59.52.97.231
jingmen A 221.234.25.75
www.jingmen A 221.234.25.75
www.jingzhou A 61.184.45.154
jinhua A 61.175.226.28
www.jinhua A 61.175.226.28
jining A 222.175.162.5
www.jining A 222.175.162.5
www.jiujiang A 59.52.97.231
www.jixi A 218.8.251.19
www.jiyuan A 125.46.0.108
js A 222.190.111.54
www.js A 222.190.111.54
www.jx A 59.52.97.231
www.kaifeng A 218.28.206.52
www.kaifeng A 218.28.206.62
kunming A 220.163.12.124
www.laibin A 218.21.64.12
www.laibin A 218.21.164.12
lanzhou A 202.100.72.52
lanzhou MX 10 mail.lanzhou.cyberpolice.cn
mail.lanzhou A 202.100.64.115
lasa A 219.151.40.12
lasa A 220.182.3.22
www.lasa A 220.182.3.22
liaocheng A 61.156.38.7
www.liaocheng A 61.156.38.7
linyi A 61.133.63.211
www.linyi A 61.133.63.211
linzhi A 220.182.3.22
www.linzhi A 220.182.3.22
liuan A 218.23.82.203
www.liuzhou A 202.103.207.206
ln A 218.25.29.196
www.ln A 218.25.29.196
www.longyan A 220.162.160.13
www.luan A 218.23.82.210
www.luohe A 222.141.201.163
www.luoyang A 221.15.75.140
maanshan A 218.22.169.91
www.maanshan A 218.22.169.91
www.mudanjiang A 218.7.84.126
nanchang A 218.87.4.80
www.nanchang A 117.40.91.39
nanjing A 218.94.6.179
nanning A 222.216.1.138
www.nanning A 222.216.1.138
www.nanping A 218.66.36.227
www.nanyang A 218.28.79.213
naqu A 220.182.3.22
www.naqu A 220.182.3.22
ningbo A 61.153.17.94
www.ningbo A 221.136.54.33
www.ningde A 220.249.141.140
nmg A 60.31.196.126
www.nmg A 60.31.196.126
www.nx A 211.93.5.36
www.pingdingshan A 125.46.111.171
www.pingxiang A 59.52.97.231
www.putian A 218.66.36.227
www.puyang A 125.46.109.221
qh A 125.72.63.59
www.qh A 125.72.63.59
qianjiang A 221.232.131.52
www.qianjiang A 221.232.131.52
qingdao A 218.57.19.118
www.qinghai A 221.207.14.75
www.qinzhou A 222.83.251.88
qiqihaer A 218.10.2.217
www.qiqihaer A 218.10.2.217
www.qitaihe A 61.243.204.173
www.quanzhou A 218.5.102.130
quzhou A 221.12.142.250
www.quzhou A 221.12.142.250
rika A 220.182.3.22
www.rika A 220.182.3.22
rikaze A 220.182.3.22
www.rikaze A 220.182.3.22
rizhao A 222.133.189.12
www.sanmenxia A 125.46.98.126
www.sanming A 218.86.121.26
www.sanya A 220.200.110.10
sh A 202.101.5.158
www.sh A 202.101.5.158
www.shangluo A 61.134.49.13
www.shangqiu A 222.138.139.242
www.shangrao A 59.52.97.231
shannan A 220.182.3.22
www.shannan A 220.182.3.22
www.shaoxing A 122.224.8.133
shennongjia A 221.232.131.52
www.shennongjia A 221.232.131.52
shenyang A 202.107.119.199
www.shenyang A 218.25.49.231
shenzhen A 202.104.129.181
shijiazhuang A 218.12.44.139
shiyan A 61.183.35.4
www.shiyan A 61.183.35.4
www.shuangyashan A 219.147.231.117
www.suihua A 218.7.159.172
suizhou A 219.138.243.151
www.suizhou A 219.138.243.151
suzhou A 221.224.13.92
www.suzhou A 221.224.13.92
taian A 218.56.145.234
www.taian A 218.56.145.234
taiyuan A 202.99.219.148
dsn.taiyuan A 202.99.219.148
taizhou A 61.191.128.140
www.taizhou A 61.191.128.140
tianmen A 61.136.252.153
www.tianmen A 61.136.252.153
tj A 60.28.141.228
www.tj A 60.28.141.228
www.tongchuan A 61.134.53.110
tongliao A 60.31.196.126
www.tongliao A 60.31.196.126
tongling A 202.102.202.102
www.tongling A 202.102.202.102
weifang A 218.59.139.14
www.weifang A 218.59.139.14
weihai A 221.2.152.67
www.weinan A 61.150.87.7
www.wenzhou A 220.189.246.77
wuhai A 60.31.196.126
www.wuhai A 60.31.196.126
wuhan A 221.232.152.66
www.wuhan A 221.232.152.66
wuhu A 60.169.1.28
www.wuhu A 60.169.1.28
wulanchabu A 60.31.196.126
www.wulanchabu A 60.31.196.126
wulumuqi A 61.128.100.45
www.wulumuqi A 61.218.100.45
www.wuzhou A 202.103.251.242
www A 211.88.112.60
xiamen A 202.101.104.106
www.xiamen A 202.101.104.113
xian A 222.90.28.98
www.xian A 222.90.28.99
xiangan A 219.138.199.148
www.xiangan A 219.138.199.148
xiangfan A 211.91.147.152
www.xiangfan A 211.91.147.152
www.xiangyang A 124.116.176.80
xianning A 61.184.179.45
www.xianning A 61.184.179.45
xiantao A 221.233.240.2
www.xiantao A 202.103.13.237
www.xianyang A 61.134.26.129
www.xiaogan A 219.138.199.148
xilinguole A 61.134.97.59
www.xilinguole A 60.134.97.59
xingan A 60.31.196.126
www.xingan A 60.31.196.126
xining A 220.167.224.114
www.xinxiang A 222.139.151.69
www.xinyang A 218.28.83.37
www.xinyu A 59.52.97.231
www.xjakesu A 218.84.218.2
www.xjaletai A 218.31.88.138
www.xjbazhou A 218.34.124.228
xjbozhou A 218.31.94.150
www.xjbozhou A 218.31.94.150
www.xjchangji A 218.31.43.46
www.xjhami A 218.202.193.165
www.xjhetian A 218.31.134.254
www.xjkashi A 218.84.175.35
xjkelamayi A 218.84.100.115
www.xjkelamayi A 218.84.100.115
www.xjkezhou A 218.84.240.2
www.xjshihezi A 218.84.65.7
www.xjtacheng A 218.84.35.45
www.xjtulufan A 218.202.191.5
xjwulumuqi A 222.82.238.83
www.xjwulumuqi A 222.82.238.83
www.xjyili A 218.31.66.87
xuancheng A 58.243.104.147
www.xuancheng A 218.22.204.20
www.xuchang A 222.140.6.21
www.xuchang A 222.140.6.22
www.xz A 220.182.3.22
www.yanan A 61.185.12.86
www.yangling A 61.150.65.196
yantai A 218.56.37.12
www.yantai A 222.135.146.6
yichang A 61.136.223.238
www.yichang A 61.136.223.238
www.yichun A 59.52.97.231
www.yichun A 202.97.236.157
yinchuan A 202.100.100.29
www.yingtan A 59.52.97.231
www.yn A 61.159.214.200
www.yulin A 61.134.60.18
www.yulin A 124.226.234.24
www.yulin A 202.103.246.197
zaozhuang A 218.56.153.36
www.zaozhuang A 218.56.153.36
www.zhangzhou A 218.66.36.227
zhengzhou CNAME www.zz-police.com
www.zhengzhou A 202.111.153.27
www.zhoukou A 61.158.228.185
www.zhoukou A 61.163.127.53
zhoushan A 61.153.213.66
www.zhoushan A 61.153.213.66
www.zhumadian A 218.28.100.11
www.zhumadian A 218.29.231.30
zibo A 219.146.145.235
www.zibo A 219.146.145.235
www.zj A 202.75.222.28
www.zj A 211.155.233.248
cyberpolice.cn. SOA dns1.datadragon.net lichao.bj.datadragon.net. (2012053103 86400 7200 86400 3600)
>


http://www.2cto.com/Article/201202/118349.html详细科普下

修复方案:

http://tech.huweishen.com/loudong/971.html 参见,或者找专业人员~

版权声明:转载请注明来源 _Evil@乌云


漏洞回应

厂商回应:

危害等级:低

漏洞Rank:4

确认时间:2012-06-26 16:01

厂商回复:

CNVD确认漏洞情况,转由CNCERT国家中心直接协调网站主管部门处置。
参照以往DNS域传送漏洞的评分情况,rank 4。

最新状态:

暂无


漏洞评价:

评论

  1. 2012-06-24 18:09 | 店小弎 ( 实习白帽子 | Rank:93 漏洞数:13 | 关注web安全)

    这是个什么漏洞 求科普

  2. 2012-06-24 22:04 | 斯文的鸡蛋 ( 普通白帽子 | Rank:173 漏洞数:41 | 我在这头,你在那头~)

    难不成是今天下午在群里说的那个?