当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2013-025572

漏洞标题：中国海洋石油总公司DNS域传送漏洞

相关厂商：中国海洋石油总公司

漏洞作者： Alcar

提交时间：2013-06-13 18:53

修复时间：2013-07-28 18:53

公开时间：2013-07-28 18:53

漏洞类型：网络敏感信息泄漏

危害等级：低

自评Rank：5

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2013-06-13： 细节已通知厂商并且等待厂商处理中
2013-06-17： 厂商已经确认，细节仅向厂商公开
2013-06-27： 细节向核心白帽子及相关领域专家公开
2013-07-07： 细节向普通白帽子公开
2013-07-17： 细节向实习白帽子公开
2013-07-28： 细节向公众公开

简要描述：

中国海洋石油总公司DNS服务器配置不当，导致域传送漏洞。
问题服务器：ns01.cnooc.com.cn ns02.cnooc.com.cn

详细说明：

root@kali:~# dnsenum cnooc.com.cn
dnsenum.pl VERSION:1.2.2
-----   cnooc.com.cn   -----
Host's addresses:
__________________
Name Servers:
______________
ns01.cnooc.com.cn                        1800     IN    A        202.108.65.1
ns02.cnooc.com.cn                        1800     IN    A        219.142.76.1
Mail (MX) Servers:
___________________
mail.cnooc.com.cn                        1649     IN    A        222.222.75.1
mail.cnooc.com.cn                        1649     IN    A        219.142.76.13
mailout.cnooc.com.cn                     1649     IN    A        222.222.75.4
mailout.cnooc.com.cn                     1649     IN    A        219.142.76.7
mailout.cnooc.com.cn                     1649     IN    A        219.142.76.165
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for cnooc.com.cn on ns01.cnooc.com.cn ... 
cnooc.com.cn                             1800     IN    SOA                
cnooc.com.cn                             1800     IN    NS                 
cnooc.com.cn                             1800     IN    NS                 
cnooc.com.cn                             1800     IN    NS                 
cnooc.com.cn                             1800     IN    MX                 
cnooc.com.cn                             1800     IN    MX                 
_sip._tls.cnooc.com.cn                   1800     IN    SRV                
autodiscover.cnooc.com.cn                1800     IN    A        202.108.65.105
avedge.cnooc.com.cn                      1800     IN    A        202.108.65.195
big5.cnooc.com.cn                        1800     IN    A        202.108.65.182
buy.cnooc.com.cn                         1800     IN    A        202.108.65.152
bzh.cnooc.com.cn                         1800     IN    A        202.108.65.187
cas.cnooc.com.cn                         1800     IN    A        202.108.65.38
cnoocfin.cnooc.com.cn                    1800     IN    A        202.108.65.223
coitsz.cnooc.com.cn                      1800     IN    A        219.133.73.186
dialin.cnooc.com.cn                      1800     IN    A        202.108.65.104
elearning.cnooc.com.cn                   1800     IN    A        202.108.65.180
email.cnooc.com.cn                       1800     IN    A        202.108.65.105
emass01.cnooc.com.cn                     1800     IN    A        202.108.65.149
emassbh.cnooc.com.cn                     1800     IN    A        61.181.245.94
emassbj.cnooc.com.cn                     1800     IN    A        202.108.65.147
emassbj01.cnooc.com.cn                   1800     IN    A        202.108.65.118
emasssz.cnooc.com.cn                     1800     IN    A        219.133.73.185
emasszj.cnooc.com.cn                     1800     IN    A        221.4.249.81
en.cnooc.com.cn                          1800     IN    A        202.108.65.182
ftp.cnooc.com.cn                         1800     IN    A        202.108.65.239
hb.cnooc.com.cn                          1800     IN    A        202.108.65.123
cnoocfin.hk.cnooc.com.cn                 1800     IN    A        203.222.195.108
hy.cnooc.com.cn                          1800     IN    A        202.108.65.140
imss02.cnooc.com.cn                      1800     IN    A        202.108.65.13
inotes.cnooc.com.cn                      1800     IN    A        202.108.65.6
itp.cnooc.com.cn                         1800     IN    A        202.108.65.99
jjbj.cnooc.com.cn                        1800     IN    A        202.108.65.151
jjsh.cnooc.com.cn                        1800     IN    A        222.66.23.6
jjsz.cnooc.com.cn                        1800     IN    A        219.133.73.188
jjtj.cnooc.com.cn                        1800     IN    A        218.69.249.235
job.cnooc.com.cn                         1800     IN    A        202.108.65.179
livevideo.cnooc.com.cn                   1800     IN    A        202.108.65.168
localhost.cnooc.com.cn                   1800     IN    A         127.0.0.1
lyncaccess.cnooc.com.cn                  1800     IN    A        202.108.65.106
lyncaccess.cnooc.com.cn                  1800     IN    A        202.108.65.107
lyncdiscover.cnooc.com.cn                1800     IN    A        202.108.65.104
lyncexternal.cnooc.com.cn                1800     IN    A        202.108.65.104
mail.cnooc.com.cn                        1800     IN    A        202.108.65.13
mail.cnooc.com.cn                        1800     IN    A        222.222.75.1
mailout.cnooc.com.cn                     1800     IN    A        202.108.65.7
mailout.cnooc.com.cn                     1800     IN    A        202.108.65.165
mailout.cnooc.com.cn                     1800     IN    A        222.222.75.4
mailsyandby.cnooc.com.cn                 1800     IN    A        222.222.75.6
mdp.cnooc.com.cn                         1800     IN    A        202.108.65.133
meet.cnooc.com.cn                        1800     IN    A        202.108.65.104
mobile.cnooc.com.cn                      1800     IN    A        202.108.65.162
mobiletest.cnooc.com.cn                  1800     IN    A        202.108.65.163
newtest.cnooc.com.cn                     1800     IN    A        202.108.65.181
ns01.cnooc.com.cn                        1800     IN    A        202.108.65.1
ns02.cnooc.com.cn                        1800     IN    A        219.142.76.1
ocs.cnooc.com.cn                         1800     IN    A        202.108.65.214
qhserm.cnooc.com.cn                      1800     IN    A        202.108.65.185
qsr.cnooc.com.cn                         1800     IN    A        202.108.65.120
qsrm.cnooc.com.cn                        1800     IN    A        202.108.65.148
report.cnooc.com.cn                      1800     IN    A        202.108.65.186
scvpnbj.cnooc.com.cn                     1800     IN    A        202.108.65.90
sip.cnooc.com.cn                         1800     IN    A        202.108.65.106
sip.cnooc.com.cn                         1800     IN    A        202.108.65.107
sms.cnooc.com.cn                         1800     IN    A        202.108.65.161
sr.cnooc.com.cn                          1800     IN    A        202.108.65.122
srm.cnooc.com.cn                         1800     IN    A        202.108.65.152
sts.cnooc.com.cn                         1800     IN    A        202.108.65.166
test.cnooc.com.cn                        1800     IN    A        202.108.65.156
traveler.cnooc.com.cn                    1800     IN    A        202.108.65.164
tvs.cnooc.com.cn                         1800     IN    A        202.108.65.135
view01.cnooc.com.cn                      1800     IN    A        202.108.65.132
vpn.cnooc.com.cn                         1800     IN    A        202.108.65.239
vpnbj.cnooc.com.cn                       1800     IN    A        202.108.65.90
vpnsk.cnooc.com.cn                       1800     IN    A        219.134.60.33
vpnyj.cnooc.com.cn                       1800     IN    A        222.222.78.235
webconf.cnooc.com.cn                     1800     IN    A        202.108.65.194
www.cnooc.com.cn                         1800     IN    A        202.108.65.182
wzsh.cnooc.com.cn                        1800     IN    A        222.222.75.5
yang-text.cnooc.com.cn                   1800     IN    A        202.106.0.19
zgs-ca-bj1.cnooc.com.cn                  1800     IN    A        202.108.65.104
zgs-lyncapp-bj1.cnooc.com.cn             1800     IN    A        202.108.65.104
zgs-rms-bj3.cnooc.com.cn                 1800     IN    A        202.108.65.105
zhaopin.cnooc.com.cn                     1800     IN    A        202.108.65.137
ns01.cnooc.com.cn Bind Version:9.3.6-P1
Trying Zone Transfer for cnooc.com.cn on ns03.cnooc.com.cn ... 
AXFR record query failed: query timed out
Unable to obtain Server Version for ns03.cnooc.com.cn : query timed out
Trying Zone Transfer for cnooc.com.cn on ns02.cnooc.com.cn ... 
cnooc.com.cn                             1800     IN    SOA                
cnooc.com.cn                             1800     IN    MX                 
cnooc.com.cn                             1800     IN    MX                 
cnooc.com.cn                             1800     IN    NS                 
cnooc.com.cn                             1800     IN    NS                 
cnooc.com.cn                             1800     IN    NS                 
_sip._tls.cnooc.com.cn                   1800     IN    SRV                
autodiscover.cnooc.com.cn                1800     IN    A        202.108.65.105
avedge.cnooc.com.cn                      1800     IN    A        202.108.65.195
big5.cnooc.com.cn                        1800     IN    A        202.108.65.182
buy.cnooc.com.cn                         1800     IN    A        202.108.65.152
bzh.cnooc.com.cn                         1800     IN    A        202.108.65.187
cas.cnooc.com.cn                         1800     IN    A        202.108.65.38
cnoocfin.cnooc.com.cn                    1800     IN    A        202.108.65.223
coitsz.cnooc.com.cn                      1800     IN    A        219.133.73.186
dialin.cnooc.com.cn                      1800     IN    A        202.108.65.104
elearning.cnooc.com.cn                   1800     IN    A        202.108.65.180
email.cnooc.com.cn                       1800     IN    A        202.108.65.105
emass01.cnooc.com.cn                     1800     IN    A        202.108.65.149
emassbh.cnooc.com.cn                     1800     IN    A        61.181.245.94
emassbj.cnooc.com.cn                     1800     IN    A        202.108.65.147
emassbj01.cnooc.com.cn                   1800     IN    A        202.108.65.118
emasssz.cnooc.com.cn                     1800     IN    A        219.133.73.185
emasszj.cnooc.com.cn                     1800     IN    A        221.4.249.81
en.cnooc.com.cn                          1800     IN    A        202.108.65.182
ftp.cnooc.com.cn                         1800     IN    A        202.108.65.239
hb.cnooc.com.cn                          1800     IN    A        202.108.65.123
cnoocfin.hk.cnooc.com.cn                 1800     IN    A        203.222.195.108
hy.cnooc.com.cn                          1800     IN    A        202.108.65.140
imss02.cnooc.com.cn                      1800     IN    A        202.108.65.13
inotes.cnooc.com.cn                      1800     IN    A        202.108.65.6
itp.cnooc.com.cn                         1800     IN    A        202.108.65.99
jjbj.cnooc.com.cn                        1800     IN    A        202.108.65.151
jjsh.cnooc.com.cn                        1800     IN    A        222.66.23.6
jjsz.cnooc.com.cn                        1800     IN    A        219.133.73.188
jjtj.cnooc.com.cn                        1800     IN    A        218.69.249.235
job.cnooc.com.cn                         1800     IN    A        202.108.65.179
livevideo.cnooc.com.cn                   1800     IN    A        202.108.65.168
localhost.cnooc.com.cn                   1800     IN    A         127.0.0.1
lyncaccess.cnooc.com.cn                  1800     IN    A        202.108.65.106
lyncaccess.cnooc.com.cn                  1800     IN    A        202.108.65.107
lyncdiscover.cnooc.com.cn                1800     IN    A        202.108.65.104
lyncexternal.cnooc.com.cn                1800     IN    A        202.108.65.104
mail.cnooc.com.cn                        1800     IN    A        202.108.65.13
mail.cnooc.com.cn                        1800     IN    A        222.222.75.1
mailout.cnooc.com.cn                     1800     IN    A        202.108.65.7
mailout.cnooc.com.cn                     1800     IN    A        202.108.65.165
mailout.cnooc.com.cn                     1800     IN    A        222.222.75.4
mailsyandby.cnooc.com.cn                 1800     IN    A        222.222.75.6
mdp.cnooc.com.cn                         1800     IN    A        202.108.65.133
meet.cnooc.com.cn                        1800     IN    A        202.108.65.104
mobile.cnooc.com.cn                      1800     IN    A        202.108.65.162
mobiletest.cnooc.com.cn                  1800     IN    A        202.108.65.163
newtest.cnooc.com.cn                     1800     IN    A        202.108.65.181
ns01.cnooc.com.cn                        1800     IN    A        202.108.65.1
ns02.cnooc.com.cn                        1800     IN    A        219.142.76.1
ocs.cnooc.com.cn                         1800     IN    A        202.108.65.214
qhserm.cnooc.com.cn                      1800     IN    A        202.108.65.185
qsr.cnooc.com.cn                         1800     IN    A        202.108.65.120
qsrm.cnooc.com.cn                        1800     IN    A        202.108.65.148
report.cnooc.com.cn                      1800     IN    A        202.108.65.186
scvpnbj.cnooc.com.cn                     1800     IN    A        202.108.65.90
sip.cnooc.com.cn                         1800     IN    A        202.108.65.106
sip.cnooc.com.cn                         1800     IN    A        202.108.65.107
sms.cnooc.com.cn                         1800     IN    A        202.108.65.161
sr.cnooc.com.cn                          1800     IN    A        202.108.65.122
srm.cnooc.com.cn                         1800     IN    A        202.108.65.152
sts.cnooc.com.cn                         1800     IN    A        202.108.65.166
test.cnooc.com.cn                        1800     IN    A        202.108.65.156
traveler.cnooc.com.cn                    1800     IN    A        202.108.65.164
tvs.cnooc.com.cn                         1800     IN    A        202.108.65.135
view01.cnooc.com.cn                      1800     IN    A        202.108.65.132
vpn.cnooc.com.cn                         1800     IN    A        202.108.65.239
vpnbj.cnooc.com.cn                       1800     IN    A        202.108.65.90
vpnsk.cnooc.com.cn                       1800     IN    A        219.134.60.33
vpnyj.cnooc.com.cn                       1800     IN    A        222.222.78.235
webconf.cnooc.com.cn                     1800     IN    A        202.108.65.194
www.cnooc.com.cn                         1800     IN    A        202.108.65.182
wzsh.cnooc.com.cn                        1800     IN    A        222.222.75.5
yang-text.cnooc.com.cn                   1800     IN    A        202.106.0.19
zgs-ca-bj1.cnooc.com.cn                  1800     IN    A        202.108.65.104
zgs-lyncapp-bj1.cnooc.com.cn             1800     IN    A        202.108.65.104
zgs-rms-bj3.cnooc.com.cn                 1800     IN    A        202.108.65.105
zhaopin.cnooc.com.cn                     1800     IN    A        202.108.65.137
ns02.cnooc.com.cn Bind Version:9.3.6-P1
brute force file not specified, bay.

漏洞证明：

asd.png


asd.png

修复方案：

改配置

版权声明：转载请注明来源 Alcar@乌云

漏洞回应

厂商回应：

危害等级：低

漏洞Rank：4

确认时间：2013-06-17 22:33

厂商回复：

最新状态：

暂无

漏洞评价：

评论