当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-057230

漏洞标题：搜狐焦点房产某后台敏感信息泄露

相关厂商：搜狐

漏洞作者： 猪猪侠

提交时间：2014-04-15 23:48

修复时间：2014-05-30 23:48

公开时间：2014-05-30 23:48

漏洞类型：敏感信息泄露

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-04-15： 细节已通知厂商并且等待厂商处理中
2014-04-16： 厂商已经确认，细节仅向厂商公开
2014-04-26： 细节向核心白帽子及相关领域专家公开
2014-05-06： 细节向普通白帽子公开
2014-05-16： 细节向实习白帽子公开
2014-05-30： 细节向公众公开

简要描述：

搜狐焦点房产某后台敏感信息泄露，包含ftp信息，数据库连接信息

详细说明：

# 敏感信息泄露
http://admin.tj.focus.cn/.bash_history
http://admin.jn.focus.cn/.bash_history

/usr/local/mysql/bin/mysql -uroot -pcanada house_news
/usr/local/mysql/bin/mysql -uroot -pcanada house_news


ftp 208.226.13.233&
ftp 208.226.13.233&
anonymous
fg
ftp 208.226.13.233
ls
ls >a.txt -l
ls >a.txt -l
ls >a.txt -l
ls >a.txt -l


漏洞证明：

mkdir temp
rm -r temp
cd enhouse
mkdir temp
rm -r temp
exit
pwd
ls
cd ../house
ls
cd jiang3f
ls
ls
ls -l
cd jiang3f
su
cd ./enhouse
ls
cd ..
ls
cd enhouse
ls
ls -l
cd ..
ls -l
ls -l enhouse
ls -l enhouse
ls -l enhouse
su
ls
./create.x
./createtab.x
su
su
su
cd /home/apache/focus/enhouse/include
ls
ls cre*
./createtab.x
su
su
su
su
time
date
./mysql
su
cd include
ls
./create
ftp 208.226.13.233
ls
ls im*.exe -l
ftp 208.226.13.233
ftp 208.226.13.233
ftp 208.226.13.233
ls
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ping www.winwhatwhere.com
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ls -l imtrial.exe
ftp 208.226.13.233
ftp 208.226.13.233&
ftp 208.226.13.233&
anonymous
fg
ftp 208.226.13.233
ls
ls >a.txt -l
ls >a.txt -l
ls >a.txt -l
ls >a.txt -l
ls
ls mitrial.exe
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls mitrial.exe -l
ls &
bg
fg
ls
perl -v
ls
cd /usr/bin
ls -l perl*
cd perl/perldoc
cd perldoc
ls perl*
cd perldoc
cd perl
erl
perldoc
perldoc -f chod
perldoc -f cho*
perldoc -f delete
ls
ls
su
cd /usr/doc
ls |more
cd HOWTO
ls
ls d*
ls D*
ls D* -l
ls
./lala
cd ../apache
ls
cp housemarket.ecgi index.ecgi
cp newscenter.ecgi index.ecgi
cd goodidea
vi buyidea.ecgi 
vi buyidea.ecgi 
vi buyidea.ecgi 
./usr/local/mysql/bin/mysql -uroot -pcanada house_news
/usr/local/mysql/bin/mysql -uroot -pcanada house_news
vi buyidea.ecgi 
vi buyidea.ecgi 
/usr/local/mysql/bin/mysql -uroot -pcanada house_news
vi buyidea.ecgi 
/usr/local/mysql/bin/mysql -uroot -pcanada house_news
vi buyidea.ecgi 
vi buyidea.ecgi 
chmod 774 *
ls
ls -l renthouse.ecgi
cd include
ls
ls
ls house.head.inc.ecgi
vi house.head.inc.ecgi
cd ..
ls -l|more
 cd include
ls
ls -l |more
 whoami
chmod 774 *
ls -l
chmod 777 *
cd ..
chmod 777 *
ls
exit

修复方案：

删除

版权声明：转载请注明来源 猪猪侠@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：20

确认时间：2014-04-16 08:56

厂商回复：

感谢对搜狐安全的支持。

最新状态：

暂无

漏洞评价：

评论

  1. 2014-04-16 00:02 | Mr .LZH ( 普通白帽子 | Rank:583 漏洞数:74 | 非妹子勿扰···)

    这是分布式的节奏吗

  2. 2015-06-06 21:40 | anting ( 普通白帽子 | Rank:105 漏洞数:33 | 活到老，学到老)

    这都可以找到，原来漏洞真的很多啊GOGO