当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2013-025572

漏洞标题:中国海洋石油总公司DNS域传送漏洞

相关厂商:中国海洋石油总公司

漏洞作者: Alcar

提交时间:2013-06-13 18:53

修复时间:2013-07-28 18:53

公开时间:2013-07-28 18:53

漏洞类型:网络敏感信息泄漏

危害等级:低

自评Rank:5

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2013-06-13: 细节已通知厂商并且等待厂商处理中
2013-06-17: 厂商已经确认,细节仅向厂商公开
2013-06-27: 细节向核心白帽子及相关领域专家公开
2013-07-07: 细节向普通白帽子公开
2013-07-17: 细节向实习白帽子公开
2013-07-28: 细节向公众公开

简要描述:

中国海洋石油总公司DNS服务器配置不当,导致域传送漏洞。
问题服务器:ns01.cnooc.com.cn ns02.cnooc.com.cn

详细说明:

root@kali:~# dnsenum cnooc.com.cn
dnsenum.pl VERSION:1.2.2
----- cnooc.com.cn -----
Host's addresses:
__________________
Name Servers:
______________
ns01.cnooc.com.cn 1800 IN A 202.108.65.1
ns02.cnooc.com.cn 1800 IN A 219.142.76.1
Mail (MX) Servers:
___________________
mail.cnooc.com.cn 1649 IN A 222.222.75.1
mail.cnooc.com.cn 1649 IN A 219.142.76.13
mailout.cnooc.com.cn 1649 IN A 222.222.75.4
mailout.cnooc.com.cn 1649 IN A 219.142.76.7
mailout.cnooc.com.cn 1649 IN A 219.142.76.165
Trying Zone Transfers and getting Bind Versions:
_________________________________________________
Trying Zone Transfer for cnooc.com.cn on ns01.cnooc.com.cn ...
cnooc.com.cn 1800 IN SOA
cnooc.com.cn 1800 IN NS
cnooc.com.cn 1800 IN NS
cnooc.com.cn 1800 IN NS
cnooc.com.cn 1800 IN MX
cnooc.com.cn 1800 IN MX
_sip._tls.cnooc.com.cn 1800 IN SRV
autodiscover.cnooc.com.cn 1800 IN A 202.108.65.105
avedge.cnooc.com.cn 1800 IN A 202.108.65.195
big5.cnooc.com.cn 1800 IN A 202.108.65.182
buy.cnooc.com.cn 1800 IN A 202.108.65.152
bzh.cnooc.com.cn 1800 IN A 202.108.65.187
cas.cnooc.com.cn 1800 IN A 202.108.65.38
cnoocfin.cnooc.com.cn 1800 IN A 202.108.65.223
coitsz.cnooc.com.cn 1800 IN A 219.133.73.186
dialin.cnooc.com.cn 1800 IN A 202.108.65.104
elearning.cnooc.com.cn 1800 IN A 202.108.65.180
email.cnooc.com.cn 1800 IN A 202.108.65.105
emass01.cnooc.com.cn 1800 IN A 202.108.65.149
emassbh.cnooc.com.cn 1800 IN A 61.181.245.94
emassbj.cnooc.com.cn 1800 IN A 202.108.65.147
emassbj01.cnooc.com.cn 1800 IN A 202.108.65.118
emasssz.cnooc.com.cn 1800 IN A 219.133.73.185
emasszj.cnooc.com.cn 1800 IN A 221.4.249.81
en.cnooc.com.cn 1800 IN A 202.108.65.182
ftp.cnooc.com.cn 1800 IN A 202.108.65.239
hb.cnooc.com.cn 1800 IN A 202.108.65.123
cnoocfin.hk.cnooc.com.cn 1800 IN A 203.222.195.108
hy.cnooc.com.cn 1800 IN A 202.108.65.140
imss02.cnooc.com.cn 1800 IN A 202.108.65.13
inotes.cnooc.com.cn 1800 IN A 202.108.65.6
itp.cnooc.com.cn 1800 IN A 202.108.65.99
jjbj.cnooc.com.cn 1800 IN A 202.108.65.151
jjsh.cnooc.com.cn 1800 IN A 222.66.23.6
jjsz.cnooc.com.cn 1800 IN A 219.133.73.188
jjtj.cnooc.com.cn 1800 IN A 218.69.249.235
job.cnooc.com.cn 1800 IN A 202.108.65.179
livevideo.cnooc.com.cn 1800 IN A 202.108.65.168
localhost.cnooc.com.cn 1800 IN A 127.0.0.1
lyncaccess.cnooc.com.cn 1800 IN A 202.108.65.106
lyncaccess.cnooc.com.cn 1800 IN A 202.108.65.107
lyncdiscover.cnooc.com.cn 1800 IN A 202.108.65.104
lyncexternal.cnooc.com.cn 1800 IN A 202.108.65.104
mail.cnooc.com.cn 1800 IN A 202.108.65.13
mail.cnooc.com.cn 1800 IN A 222.222.75.1
mailout.cnooc.com.cn 1800 IN A 202.108.65.7
mailout.cnooc.com.cn 1800 IN A 202.108.65.165
mailout.cnooc.com.cn 1800 IN A 222.222.75.4
mailsyandby.cnooc.com.cn 1800 IN A 222.222.75.6
mdp.cnooc.com.cn 1800 IN A 202.108.65.133
meet.cnooc.com.cn 1800 IN A 202.108.65.104
mobile.cnooc.com.cn 1800 IN A 202.108.65.162
mobiletest.cnooc.com.cn 1800 IN A 202.108.65.163
newtest.cnooc.com.cn 1800 IN A 202.108.65.181
ns01.cnooc.com.cn 1800 IN A 202.108.65.1
ns02.cnooc.com.cn 1800 IN A 219.142.76.1
ocs.cnooc.com.cn 1800 IN A 202.108.65.214
qhserm.cnooc.com.cn 1800 IN A 202.108.65.185
qsr.cnooc.com.cn 1800 IN A 202.108.65.120
qsrm.cnooc.com.cn 1800 IN A 202.108.65.148
report.cnooc.com.cn 1800 IN A 202.108.65.186
scvpnbj.cnooc.com.cn 1800 IN A 202.108.65.90
sip.cnooc.com.cn 1800 IN A 202.108.65.106
sip.cnooc.com.cn 1800 IN A 202.108.65.107
sms.cnooc.com.cn 1800 IN A 202.108.65.161
sr.cnooc.com.cn 1800 IN A 202.108.65.122
srm.cnooc.com.cn 1800 IN A 202.108.65.152
sts.cnooc.com.cn 1800 IN A 202.108.65.166
test.cnooc.com.cn 1800 IN A 202.108.65.156
traveler.cnooc.com.cn 1800 IN A 202.108.65.164
tvs.cnooc.com.cn 1800 IN A 202.108.65.135
view01.cnooc.com.cn 1800 IN A 202.108.65.132
vpn.cnooc.com.cn 1800 IN A 202.108.65.239
vpnbj.cnooc.com.cn 1800 IN A 202.108.65.90
vpnsk.cnooc.com.cn 1800 IN A 219.134.60.33
vpnyj.cnooc.com.cn 1800 IN A 222.222.78.235
webconf.cnooc.com.cn 1800 IN A 202.108.65.194
www.cnooc.com.cn 1800 IN A 202.108.65.182
wzsh.cnooc.com.cn 1800 IN A 222.222.75.5
yang-text.cnooc.com.cn 1800 IN A 202.106.0.19
zgs-ca-bj1.cnooc.com.cn 1800 IN A 202.108.65.104
zgs-lyncapp-bj1.cnooc.com.cn 1800 IN A 202.108.65.104
zgs-rms-bj3.cnooc.com.cn 1800 IN A 202.108.65.105
zhaopin.cnooc.com.cn 1800 IN A 202.108.65.137
ns01.cnooc.com.cn Bind Version:9.3.6-P1
Trying Zone Transfer for cnooc.com.cn on ns03.cnooc.com.cn ...
AXFR record query failed: query timed out
Unable to obtain Server Version for ns03.cnooc.com.cn : query timed out
Trying Zone Transfer for cnooc.com.cn on ns02.cnooc.com.cn ...
cnooc.com.cn 1800 IN SOA
cnooc.com.cn 1800 IN MX
cnooc.com.cn 1800 IN MX
cnooc.com.cn 1800 IN NS
cnooc.com.cn 1800 IN NS
cnooc.com.cn 1800 IN NS
_sip._tls.cnooc.com.cn 1800 IN SRV
autodiscover.cnooc.com.cn 1800 IN A 202.108.65.105
avedge.cnooc.com.cn 1800 IN A 202.108.65.195
big5.cnooc.com.cn 1800 IN A 202.108.65.182
buy.cnooc.com.cn 1800 IN A 202.108.65.152
bzh.cnooc.com.cn 1800 IN A 202.108.65.187
cas.cnooc.com.cn 1800 IN A 202.108.65.38
cnoocfin.cnooc.com.cn 1800 IN A 202.108.65.223
coitsz.cnooc.com.cn 1800 IN A 219.133.73.186
dialin.cnooc.com.cn 1800 IN A 202.108.65.104
elearning.cnooc.com.cn 1800 IN A 202.108.65.180
email.cnooc.com.cn 1800 IN A 202.108.65.105
emass01.cnooc.com.cn 1800 IN A 202.108.65.149
emassbh.cnooc.com.cn 1800 IN A 61.181.245.94
emassbj.cnooc.com.cn 1800 IN A 202.108.65.147
emassbj01.cnooc.com.cn 1800 IN A 202.108.65.118
emasssz.cnooc.com.cn 1800 IN A 219.133.73.185
emasszj.cnooc.com.cn 1800 IN A 221.4.249.81
en.cnooc.com.cn 1800 IN A 202.108.65.182
ftp.cnooc.com.cn 1800 IN A 202.108.65.239
hb.cnooc.com.cn 1800 IN A 202.108.65.123
cnoocfin.hk.cnooc.com.cn 1800 IN A 203.222.195.108
hy.cnooc.com.cn 1800 IN A 202.108.65.140
imss02.cnooc.com.cn 1800 IN A 202.108.65.13
inotes.cnooc.com.cn 1800 IN A 202.108.65.6
itp.cnooc.com.cn 1800 IN A 202.108.65.99
jjbj.cnooc.com.cn 1800 IN A 202.108.65.151
jjsh.cnooc.com.cn 1800 IN A 222.66.23.6
jjsz.cnooc.com.cn 1800 IN A 219.133.73.188
jjtj.cnooc.com.cn 1800 IN A 218.69.249.235
job.cnooc.com.cn 1800 IN A 202.108.65.179
livevideo.cnooc.com.cn 1800 IN A 202.108.65.168
localhost.cnooc.com.cn 1800 IN A 127.0.0.1
lyncaccess.cnooc.com.cn 1800 IN A 202.108.65.106
lyncaccess.cnooc.com.cn 1800 IN A 202.108.65.107
lyncdiscover.cnooc.com.cn 1800 IN A 202.108.65.104
lyncexternal.cnooc.com.cn 1800 IN A 202.108.65.104
mail.cnooc.com.cn 1800 IN A 202.108.65.13
mail.cnooc.com.cn 1800 IN A 222.222.75.1
mailout.cnooc.com.cn 1800 IN A 202.108.65.7
mailout.cnooc.com.cn 1800 IN A 202.108.65.165
mailout.cnooc.com.cn 1800 IN A 222.222.75.4
mailsyandby.cnooc.com.cn 1800 IN A 222.222.75.6
mdp.cnooc.com.cn 1800 IN A 202.108.65.133
meet.cnooc.com.cn 1800 IN A 202.108.65.104
mobile.cnooc.com.cn 1800 IN A 202.108.65.162
mobiletest.cnooc.com.cn 1800 IN A 202.108.65.163
newtest.cnooc.com.cn 1800 IN A 202.108.65.181
ns01.cnooc.com.cn 1800 IN A 202.108.65.1
ns02.cnooc.com.cn 1800 IN A 219.142.76.1
ocs.cnooc.com.cn 1800 IN A 202.108.65.214
qhserm.cnooc.com.cn 1800 IN A 202.108.65.185
qsr.cnooc.com.cn 1800 IN A 202.108.65.120
qsrm.cnooc.com.cn 1800 IN A 202.108.65.148
report.cnooc.com.cn 1800 IN A 202.108.65.186
scvpnbj.cnooc.com.cn 1800 IN A 202.108.65.90
sip.cnooc.com.cn 1800 IN A 202.108.65.106
sip.cnooc.com.cn 1800 IN A 202.108.65.107
sms.cnooc.com.cn 1800 IN A 202.108.65.161
sr.cnooc.com.cn 1800 IN A 202.108.65.122
srm.cnooc.com.cn 1800 IN A 202.108.65.152
sts.cnooc.com.cn 1800 IN A 202.108.65.166
test.cnooc.com.cn 1800 IN A 202.108.65.156
traveler.cnooc.com.cn 1800 IN A 202.108.65.164
tvs.cnooc.com.cn 1800 IN A 202.108.65.135
view01.cnooc.com.cn 1800 IN A 202.108.65.132
vpn.cnooc.com.cn 1800 IN A 202.108.65.239
vpnbj.cnooc.com.cn 1800 IN A 202.108.65.90
vpnsk.cnooc.com.cn 1800 IN A 219.134.60.33
vpnyj.cnooc.com.cn 1800 IN A 222.222.78.235
webconf.cnooc.com.cn 1800 IN A 202.108.65.194
www.cnooc.com.cn 1800 IN A 202.108.65.182
wzsh.cnooc.com.cn 1800 IN A 222.222.75.5
yang-text.cnooc.com.cn 1800 IN A 202.106.0.19
zgs-ca-bj1.cnooc.com.cn 1800 IN A 202.108.65.104
zgs-lyncapp-bj1.cnooc.com.cn 1800 IN A 202.108.65.104
zgs-rms-bj3.cnooc.com.cn 1800 IN A 202.108.65.105
zhaopin.cnooc.com.cn 1800 IN A 202.108.65.137
ns02.cnooc.com.cn Bind Version:9.3.6-P1
brute force file not specified, bay.

漏洞证明:

asd.png


asd.png

修复方案:

改配置

版权声明:转载请注明来源 Alcar@乌云


漏洞回应

厂商回应:

危害等级:低

漏洞Rank:4

确认时间:2013-06-17 22:33

厂商回复:

最新状态:

暂无


漏洞评价:

评论