智联招聘DNS区域传送漏洞可导致大量域名指向外漏

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-096103

漏洞标题：智联招聘DNS区域传送漏洞可导致大量域名指向外漏

漏洞作者：小r00to1

提交时间：2015-02-06 21:56

修复时间：2015-03-23 21:58

公开时间：2015-03-23 21:58

漏洞类型：系统/服务运维配置不当

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

2015-02-06：细节已通知厂商并且等待厂商处理中
2015-02-07：厂商已经确认，细节仅向厂商公开
2015-02-17：细节向核心白帽子及相关领域专家公开
2015-02-27：细节向普通白帽子公开
2015-03-09：细节向实习白帽子公开
2015-03-23：细节向公众公开

简要描述：

智联，有意思的事情58同城也来智联招聘。。。

详细说明：

1.智联招聘，你们都用过吧：www.zhaopin.com
2.nslookup信息：
<code>Non-authoritative answer:
zhaopin.com mail exchanger = 10 mx.zhaopin.com.cn.
Authoritative answers can be found from:
zhaopin.com nameserver = dns3.zhaopin.com.
zhaopin.com nameserver = dns2.zhaopin.com.
zhaopin.com nameserver = ns9.zhaopin.com.
zhaopin.com nameserver = dns4.zhaopin.com.
zhaopin.com nameserver = dns1.zhaopin.com.
zhaopin.com nameserver = ns8.zhaopin.com.
ns8.zhaopin.com internet address =

mask 区域

*****15*****

.5.28

mask 区域

*****net address*****
*****et address =*****
*****et address =*****
*****et address =*****
*****ddress = 59.15*****

传送泄露的信息：够庞大吧！！！
<code>
; <<>> DiG 9.8.3-P1 <<>> @ns8.zhaopin.com. axfr zhaopin.com
; (1 server found)
;; global options: +cmd
zhaopin.com. 86400 IN SOA dns1.zhaopin.com. root.dns1.zhaopin.com. 2015020403 28800 14400 3600000 600

mask 区域

*****MX	10 mx.zha*****
*****N	NS	dns1.z*****
*****N	NS	dns2.z*****
*****N	NS	dns3.z*****
*****N	NS	dns4.z*****
*****	IN	NS	ns8*****
*****	IN	NS	ns9*****
*****in.*****

86400 IN TXT "v=spf1 include:zhaopin.com.cn -all"

mask 区域

*****0	IN	A	59*****
*****	1200	IN	A*****
*****00	IN	A	19*****
*****m. 1200	IN	A*****
*****m.	3600	IN*****
*****	3600	IN	A*****
*****om. 3600	IN	*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****opin.com. 120*****
*****m.	3600	IN*****
*****6400	IN	A	*****
*****m.	3600	IN*****
*****6400	IN	A	*****
*****3600	IN	A	*****
*****m.	3600	IN*****
*****m.	1200	IN*****
*****	86400	IN	A*****
*****	3600	IN	A	*****
*****om. 3600	IN	*****
*****	3600	IN	A*****
*****1200	IN	A	*****
*****86400	IN	A	*****
*****1200	IN	A*****
*****	86400	IN	A*****
*****. 86400	IN	A*****
*****3600	IN	A	*****
*****6400	IN	CNAME*****
*****00	IN	NS	lns1*****
*****0	IN	NS	lns1.*****
*****00	IN	A	21*****
*****com. 86400 I*****
*****.com. 86400 *****
*****.	86400	IN	*****
*****.	3600	IN	*****
*****com. 3600	I*****
*****.	3600	IN	A*****
*****	86400	IN	A*****
*****	3600	IN	*****
*****3600	IN	A	*****
*****6400	IN	A	1*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****m.	1200	IN*****
*****	3600	IN	*****
*****	3600	IN	A*****
*****com. 3600 IN*****
*****com. 3600	I*****
*****.com. 3600 I*****
*****n.com.	3600 I*****
*****n.com. 3600 *****
*****in.com. 3600 *****
*****m.	3600	IN	*****
*****.	1200	IN	*****
*****	3600	IN	A*****
*****	1200	IN	A	*****
*****.	3600	IN	*****

mask 区域

*****com. 3600	I*****
*****	3600	IN	A*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****N	CNAME	amwayca*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****com. 3600 IN*****
*****om. 3600	IN*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****.com. 3600 I*****
*****om. 3600	IN*****
*****com. 3600 IN*****
*****.com. 3600 I*****
*****n.com.	3600 I*****
*****in.com. 3600 *****
*****om. 3600	IN*****
*****.com. 3600 I*****
*****.com. 1200 I*****
*****.com. 1200 I*****
*****.com. 86400 *****
*****om. 3600	IN*****
*****com. 3600	I*****
*****n.com. 3600 *****
*****om. 3600	IN*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****.com. 3600 I*****
*****.	3600	IN	*****
*****pin.com. 3600*****
*****pin.com. 3600*****
*****com. 86400 I*****
*****com. 86400 IN*****
*****IN	CNAME	zhaop*****
*****86400	IN	A	*****
*****om. 3600	IN	*****
*****	3600	IN	A*****
*****600	IN	A	1*****
*****3600	IN	A	1*****
*****N	CNAME	wend*****
*****1200	IN	A	1*****
*****m.	3600	IN*****
*****om. 3600	IN	*****
*****n.com.	3600 I*****
*****6400	IN	A	*****
*****.	1200	IN	*****
*****com. 3600	I*****
*****600	IN	A	2*****
*****m.	1200	IN	*****
*****n.com. 3600 *****
*****600	IN	A	5*****
*****3600	IN	A	*****
*****m.	3600	IN*****
*****.	3600	IN	A*****
*****om. 3600	IN	*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****00	IN	MX	10 *****
*****200	IN	A	21*****
*****m.	3600	IN	*****
*****m.	1200	IN	*****
*****400	IN	A	5*****
*****	3600	IN	A	*****
*****	86400	IN	A*****
*****	86400	IN	A*****
*****in.com. 3600 *****
*****00	IN	A	182*****
*****m. 1200	IN	A*****
*****com. 3600	I*****
*****com. 1200	I*****
*****.	3600	IN	A*****
*****200	IN	A	2*****
*****om. 1200	IN	*****
*****m.	3600	IN*****
*****m.	1200	IN*****

mask 区域

*****	86400	IN	A*****
*****	3600	IN	A	*****
*****.com. 86400 *****
*****om. 1200	IN*****
*****m.	3600	IN*****
*****com. 1200 IN*****
*****	IN	CNAME	bei*****
*****.	3600	IN	*****
*****1200	IN	A	*****
*****86400	IN	A	2*****
*****00	IN	A	21*****
*****3600	IN	A*****
*****. 1200	IN	A	*****
*****	3600	IN	*****
*****.	1200	IN	A*****
*****.	86400	IN	*****
*****400	IN	A	5*****
*****	86400	IN	A*****
*****.	3600	IN	*****
*****.	3600	IN	A*****
*****om. 3600	IN*****
*****200	IN	A	5*****
*****om. 3600	IN*****
*****om. 1200	IN*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****86400	IN	A	*****
*****3600	IN	A	*****
*****	3600	IN	*****
*****m.	1200	IN*****
*****3600	IN	A*****
*****	86400	IN	A*****
*****	3600	IN	*****
*****m.	3600	IN	*****
*****com. 3600 IN*****
*****om. 3600	IN	*****
*****200	IN	A	19*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****om. 1200	IN	*****
*****.	1200	IN	A*****
*****200	IN	A	5*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****ME	bluemoon.zhaop*****
*****com. 3600	I*****
*****com. 3600	I*****
*****ME	bms.zhaopin.*****
*****1200	IN	A*****
*****aopin.com.	8640*****
*****.	1200	IN	A*****
*****.	3600	IN	A*****
*****com. 3600	I*****
*****	3600	IN	A*****
*****	3600	IN	A*****
*****86400	IN	A*****
*****3600	IN	A*****
*****. 86400	IN	A*****
*****3600	IN	A*****
*****m.	3600	IN*****
*****200	IN	A	19*****
*****200	IN	A	19*****
*****	1200	IN	*****
*****.	3600	IN	A*****
*****om. 1200	IN*****
*****	3600	IN	A*****
*****400	IN	A	5*****
*****.	86400	IN	*****
*****3600	IN	A*****
*****3600	IN	A*****
*****.	86400	IN	*****
*****m.	3600	IN*****
*****om. 1200	IN*****
*****3600	IN	A	*****
*****.	86400	IN	*****
*****86400	IN	A	*****
*****.	3600	IN	*****
*****	3600	IN	*****
*****	3600	IN	*****
*****	3600	IN	A	*****
*****00	IN	MX	10 *****
*****	1200	IN	A*****
*****com. 86400 IN*****
*****. 86400	IN	A*****
*****com. 86400 IN*****
*****m. 86400	IN	*****
*****n.com. 3600 *****
*****ME	campus1.zhaop*****
*****.com. 86400 I*****
*****com. 86400 IN*****
*****. 86400	IN	A*****
*****in.com. 3600 *****
*****in.com. 1200 *****
*****in.com. 86400*****
*****in.com. 86400*****
*****com. 3600	I*****
*****om. 3600	IN	*****
*****n.com. 3600 *****
*****om. 1200	IN*****
*****com. 3600 IN*****
*****com. 86400 I*****
*****m. 86400	IN	*****
*****pin.com. 86400 *****
*****opin.com. 86400*****
*****	86400	IN	A	*****
*****om. 1200	IN*****
*****com. 1200	I*****
*****	1200	IN	A	*****
*****. 86400	IN	A*****
*****m. 86400	IN	*****
*****om. 86400 IN*****
*****.com. 86400 *****
*****om. 3600	IN*****
*****m. 86400	IN	*****
*****m. 86400	IN	*****
*****m. 1200	IN	A*****
*****m.	1200	IN	*****
*****m. 86400	IN	*****
*****AME	campusresume.zh*****
*****86400	IN	A	2*****
*****com. 3600 IN*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 1200	IN*****
*****.com. 86400 *****
*****AME	canoncampus2015.*****
*****com. 86400 IN*****
*****pin.com. 3600*****
*****in.com. 3600 *****
*****.com. 3600 I*****
*****.com. 1200 I*****
*****m.	3600	IN	*****
*****m.	86400	IN*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****n.com. 3600 *****
*****om. 3600	IN*****

mask 区域

*****.	3600	IN	*****
*****3600	IN	A*****
*****6400	IN	A	*****
*****. 86400	IN	A*****
*****86400	IN	A*****
*****0	IN	A	211*****
*****00	IN	A	192*****
*****com. 1200	I*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****in.com. 3600 *****
*****	86400	IN	A*****
*****	1200	IN	A*****
*****	3600	IN	*****
*****1200	IN	A	*****
*****00	IN	A	192*****
*****3600	IN	A*****
*****	3600	IN	*****
*****.	3600	IN	A*****
*****m.	3600	IN*****
*****.	3600	IN	A*****
*****com. 3600	I*****
*****om. 3600	IN	*****
*****n.com. 3600 *****
*****com. 1200	I*****
*****om. 1200	IN	*****
*****om. 1200	IN	*****
*****n.com. 1200 *****
*****in.com. 1200*****
*****m. 86400	IN	*****
*****om. 86400 IN*****
*****com. 86400 IN*****
*****n.com.	86400 *****
*****pin.com. 86400*****
*****opin.com. 8640*****
*****m. 86400	IN	*****
*****. 86400 IN	A	*****
*****com. 86400 IN*****
*****om. 3600	IN	*****
*****com. 3600 IN*****
*****in.com. 3600*****
*****1200	IN	A*****
*****	86400	IN	A*****
*****	1200	IN	A*****
*****	86400	IN	A	*****
*****86400	IN	A	*****
*****com. 300	IN*****
*****om. 1200	IN	*****
*****.	86400	IN	*****
*****.	3600	IN	*****
*****.	86400	IN	*****
*****3600	IN	A	*****
*****om. 3600	IN*****
*****m. 1200	IN	A*****
*****86400	IN	A	*****
*****1200	IN	A	*****
*****om. 3600	IN*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****1200	IN	A	*****
*****	3600	IN	*****
*****	3600	IN	A*****
*****200	IN	A	2*****
*****	86400	IN	*****
*****	3600	IN	A*****
*****	86400	IN	*****
*****. 86400 IN	A	*****
*****	3600	IN	*****
*****AME	cgbchina.zhao*****
*****com. 3600	I*****
*****AME	cgdc.zhaopi*****
*****86400	IN	A	*****
*****86400	IN	A*****
*****com. 86400 IN*****
*****.	1200	IN	*****
*****. 86400	IN	A*****
*****om. 3600	IN	*****
*****	IN	CNAME	beij*****
*****IN	CNAME	beiji*****
*****	IN	CNAME	beij*****
*****IN	CNAME	beiji*****
*****com. 3600	I*****
*****	IN	CNAME	bei*****
*****.	3600	IN	A*****
*****. 86400	IN	A*****
*****.com. 3600 I*****
*****om. 3600	IN*****
*****	1200	IN	A	*****
*****m.	3600	IN*****
*****	86400	IN	A*****
*****com. 1200 IN*****
*****m. 86400	IN	*****
*****. 86400	IN	A*****
*****om. 3600	IN*****

23
chinamobile-campus.zhaopin.com.

mask 区域

*****	59.1*****
*****com. 3600	I*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****.com. 3600 I*****
*****.com. 3600 I*****
*****.com. 3600 I*****
*****n.com.	3600 I*****
*****CNAME	he.chinamobile2*****
*****n.com. 3600 *****
*****pin.com. 3600*****
*****n.com.	3600 I*****
*****in.com. 3600 *****
*****opin.com. 3600*****
*****n.com.	1200 I*****
*****om. 3600	IN	*****
*****com. 3600 IN*****
*****.com. 3600 I*****
*****m.	3600	IN	*****
*****com. 3600	I*****
*****om. 3600	IN	*****
*****om. 3600	IN	*****
*****om. 3600	IN	*****
*****om. 3600	IN	*****
*****om. 3600	IN	*****
*****om. 86400 IN*****
*****com. 86400 IN*****
*****. 86400 IN	A	*****
*****com. 86400 IN*****
*****.com. 3600 I*****
*****.	3600	IN	*****
*****m.	1200	IN	*****
*****com. 3600	I*****
*****om. 86400 IN*****
*****n.com. 3600 *****
*****n.com. 1200 *****
*****opin.com. 3600*****
*****aopin.com. 360*****
*****haopin.com. 36*****
*****com. 86400 IN*****
*****AME	chinatelecom2015.*****
*****com. 86400 I*****
*****n.com.	3600 I*****
*****. 86400	IN	A*****
*****. 86400	IN	A*****
*****com. 86400 I*****
*****.com. 86400 I*****
*****com. 86400 I*****
*****m. 86400	IN	*****
*****om. 86400 IN*****
*****AME	chinaunicom2015.*****
*****om. 86400 IN*****
*****om. 1200	IN	*****
*****m.	86400	IN*****
*****3600	IN	A*****
*****m.	3600	IN*****
*****3600	IN	A	*****
*****1200	IN	A*****
*****	IN	CNAME	beij*****
*****.	3600	IN	*****
*****	3600	IN	*****
*****3600	IN	A	*****
*****m.	3600	IN*****
*****1200	IN	A	*****
*****.	86400	IN	*****
*****400	IN	A	19*****
*****3600	IN	A*****
*****	3600	IN	*****
*****m.	3600	IN*****
*****.	3600	IN	A*****
*****3600	IN	A	*****
*****m.	3600	IN*****
*****.	3600	IN	A*****
*****com. 3600	I*****
*****.	3600	IN	*****
*****6400	IN	A	2*****
*****	3600	IN	A	2*****
*****600	IN	A	2*****
*****1200	IN	A	*****
*****86400	IN	A	*****
*****. 86400	IN	A*****
*****.	1200	IN	A*****
*****.	86400	IN	*****
*****m.	1200	IN	*****
*****m. 86400	IN	*****
*****.	1200	IN	A*****
*****com. 86400 I*****
*****00	IN	A	19*****
*****00	IN	A	192*****
*****	IN	CNAME	cm*****
*****200	IN	CNAME*****
*****com. 3600 IN	*****
*****400	IN	A	5*****
*****86400	IN	A*****
*****	86400	IN	*****
*****.	86400	IN	*****
*****.com. 1200 I*****
*****. 86400	IN	A*****
*****.	3600	IN	*****
*****. 86400	IN	A*****
*****AME	sd.cmcc2015.zh*****
*****	3600	IN	A*****
*****com. 86400 IN*****
*****	3600	IN	*****
*****	86400	IN	*****
*****86400	IN	A	*****
*****86400	IN	A	*****
*****	3600	IN	*****
*****3600	IN	A	*****
*****.	3600	IN	A*****
*****com. 86400 I*****
*****m.	3600	IN*****
*****00	IN	A	21*****
*****IN	NS	lns1.z*****
*****	3600	IN	*****
*****200	IN	A	2*****
*****00	IN	A	21*****
*****1200	IN	A	2*****
*****.	3600	IN	*****
*****om. 3600	IN	*****
*****com. 3600 IN*****
*****n.com.	3600 I*****
*****m. 3600	IN	A*****
*****n.com. 1200 *****
*****6400	IN	A	*****
*****. 86400	IN	A*****
*****	86400	IN	A*****
*****	3600	IN	*****
*****3600	IN	A	*****
*****AME	company.zhao*****
*****m.	1200	IN	*****
*****m.	3600	IN	*****
*****600	IN	A	21*****
*****	1200	IN	A	1*****
*****.	3600	IN	*****
*****n.com.	86400 *****
*****86400	IN	A	*****
*****00	IN	A	22*****
*****.	1200	IN	*****
*****86400	IN	A	*****
*****400	IN	A	5*****
*****6400	IN	A	*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****m.	3600	IN*****
*****3600	IN	A	*****
*****.	86400	IN	*****
*****	3600	IN	*****
*****AME	job.cr-power.zh*****
*****3600	IN	A*****
*****400	IN	A	5*****
*****00	IN	NS	lns1*****
*****86400	IN	A	*****

mask 区域

*****400	IN	A	5*****
*****00	IN	A	19*****
*****om. 3600	IN*****
*****3600	IN	A	*****
*****400	IN	A	5*****
*****00	IN	A	21*****
*****00	IN	A	21*****
*****.	1200	IN	A*****
*****86400	IN	A	*****
*****.	1200	IN	A*****
*****om. 1200	IN*****
*****m.	3600	IN	*****
*****200	IN	A	21*****
*****.	1200	IN	*****
*****.	3600	IN	*****
*****.	1200	IN	*****
*****.	3600	IN	*****
*****6400	IN	A	*****
*****6400	IN	A	*****
*****m.	3600	IN*****
*****.	3600	IN	A*****
*****com. 3600	I*****
*****3600	IN	A*****
*****3600	IN	A*****
*****.	3600	IN	*****
*****00	IN	A	211*****
*****400	IN	A	21*****
*****400	IN	A	21*****
*****m.	3600	IN*****
*****om. 3600	IN	*****
*****00	IN	A	21*****
*****m.	3600	IN*****
*****	1200	IN	A*****
*****com. 3600 IN*****
*****IN	CNAME	beij*****
*****86400	IN	A	*****
*****IN	CNAME	beij*****
*****	IN	NS	bb1dns1*****
*****	IN	NS	bb1dns2*****
*****com. 1200 IN*****
*****.	3600	IN	A*****
*****400	IN	A	5*****
*****3600	IN	A*****
*****aopin.com. 360*****
*****3600	IN	A*****
*****	1200	IN	*****
*****600	IN	A	1*****
*****ME	deppon.zhaopi*****
*****.	3600	IN	*****
*****om. 3600	IN*****
*****.	1200	IN	A*****
*****600	IN	A	19*****
*****.	3600	IN	A*****
*****86400	IN	A	*****
*****	1200	IN	A	*****
*****	3600	IN	A	*****
*****	3600	IN	*****
*****1200	IN	A*****
*****.	3600	IN	*****
*****	86400	IN	A*****
*****.	1200	IN	*****
*****ME	dilian.zhaopi*****
*****com. 3600	I*****
*****	86400	IN	A*****
*****	3600	IN	*****
*****00	IN	A	21*****
*****600	IN	A	5*****
*****600	IN	A	5*****
*****600	IN	A	5*****
*****600	IN	A	5*****
*****m.	3600	IN	*****
*****IN	CNAME	beiji*****
*****	3600	IN	A*****
*****m.	3600	IN*****
*****00	IN	A	19*****
*****00	IN	A	10*****
*****200	IN	CNAME*****
*****3600	IN	A*****
*****86400	IN	A*****
*****	86400	IN	A*****
*****3600	IN	A*****
*****00	IN	A	21*****
*****600	IN	A	21*****
*****300	IN	A	*****
*****m.	300	IN	A*****
*****	86400	IN	A	*****
*****600	IN	A	19*****
*****3600	IN	A*****
*****	3600	IN	A	*****
*****1200	IN	A*****
*****	1200	IN	A	2*****
*****600	IN	A	1*****
*****	86400	IN	*****
*****86400	IN	A*****
*****3600	IN	A	*****
*****.com. 1200 I*****
*****.com. 1200 I*****
*****400	IN	A	5*****
*****86400	IN	A	*****
*****86400	IN	A	*****
*****86400	IN	A*****
*****.	86400	IN	*****
*****NAME	epics.zhao*****
*****200	IN	A	2*****
*****	3600	IN	A	*****
*****3600	IN	A	*****
*****400	IN	A	1*****
*****00	IN	A	21*****
*****	3600	IN	A*****
*****.	1200	IN	*****
*****00	IN	A	19*****
*****m. 1200	IN	A*****
*****400	IN	A	1*****
*****.	3600	IN	*****
*****m.	86400	IN*****
*****. 86400	IN	A*****
*****. 86400	IN	A*****
*****m. 86400	IN	*****
*****	1200	IN	A*****
*****6400	IN	A	*****
*****.	86400	IN	*****
*****600	IN	A	19*****
*****m.	3600	IN	*****
*****600	IN	A	*****
*****	1200	IN	*****
*****.	3600	IN	*****
*****.	1200	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****com. 3600 IN*****
*****.	1200	IN	*****
*****com. 1200	I*****
*****om. 1200	IN	*****
*****.	1200	IN	A*****
*****	3600	IN	A*****
*****86400	IN	A*****
*****. 86400	IN	A*****
*****	86400	IN	A*****
*****.	86400	IN	*****
*****	86400	IN	*****
*****m.	3600	IN	*****
*****m. 1200	IN	A*****
*****m.	86400	IN*****
*****in.com. 3600*****
*****in.com. 1200*****
*****.com. 86400 I*****
*****86400	IN	A	*****
*****1200	IN	A	1*****
*****86400	IN	A	*****
*****. 86400	IN	A*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****com. 3600 IN*****
*****3600	IN	A	*****
*****	1200	IN	*****
*****1200	IN	A	*****
*****IN	CNAME	beij*****
*****.	3600	IN	*****
*****pin.com. 3600*****
*****3600	IN	A*****
*****pin.com. 1200*****
*****om. 3600	IN	*****
*****. 3600	IN	A	*****
*****om. 3600 IN	A*****
*****00	IN	A	192*****
*****400	IN	A	5*****
*****	86400	IN	A*****
*****	3600	IN	A*****
*****com. 1200 IN*****
*****IN	CNAME	beij*****
*****	86400	IN	*****
*****	3600	IN	*****
*****	86400	IN	A*****
*****	IN	CNAME	bei*****
*****com. 86400 I*****
*****6400	IN	A	*****
*****	86400	IN	*****
*****6400	IN	A	*****
*****.	3600	IN	*****
*****NAME	gdcsg.zhao*****
*****AME	gdlt.zhaopi*****
*****6400	IN	A	21*****
*****6400	IN	A	*****
*****86400	IN	A*****
*****86400	IN	A*****
*****. 86400	IN	A*****
*****.	3600	IN	A*****
*****.	1200	IN	*****
*****3600	IN	A*****
*****200	IN	A	5*****
*****86400	IN	A*****
*****.	3600	IN	*****
*****opin.com. 3600*****
*****.	1200	IN	*****
*****	3600	IN	*****
*****3600	IN	A*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****.com. 3600 I*****
*****200	IN	A	1*****
*****m.	86400	IN*****
*****om. 3600	IN*****
*****	3600	IN	*****
*****86400	IN	A	*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****600	IN	A	5*****
*****86400	IN	A	*****
*****.com. 3600 I*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****com. 3600	I*****
*****	3600	IN	*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****	86400	IN	A*****
*****IN	CNAME	stude*****
*****m.	86400	IN*****
*****3600	IN	A*****

mask 区域

*****om. 86400 IN*****
*****.	86400	IN	*****
*****m.	86400	IN*****
*****.	1200	IN	A*****
*****	1200	IN	*****
*****om. 3600	IN*****
*****	IN	CNAME	beij*****
*****	IN	CNAME	bei*****
*****	86400	IN	*****
*****om. 3600	IN*****
*****600	IN	A	5*****
*****om. 86400 IN*****
*****	3600	IN	A*****
*****00	IN	A	192*****
*****86400	IN	A	*****
*****NAME	gzgdj.zhao*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****m.	3600	IN	*****
*****86400	IN	A	*****
*****	3600	IN	*****
*****1200	IN	A*****
*****.	3600	IN	*****
*****	86400	IN	A*****
*****IN	CNAME	beij*****
*****IN	CNAME	beiji*****
*****	3600	IN	A*****
*****m.	86400	IN*****
*****om. 1200	IN*****
*****.	3600	IN	*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****n.com. 3600 *****
*****IN	CNAME	beij*****
*****. 86400	IN	A*****
*****600	IN	A	5*****
*****	86400	IN	*****
*****m.	86400	IN*****
*****00	IN	A	19*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****. 86400 IN	A	*****
*****6400	IN	A	1*****
*****6400	IN	A	19*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****6400	IN	A	1*****
*****6400	IN	A	*****
*****6400	IN	A	*****
*****86400	IN	A*****
*****400	IN	A	1*****
*****com. 1200	I*****
*****N	CNAME	beiji*****
*****com. 3600	I*****
*****m. 86400	IN	*****
*****m. 86400	IN	*****
*****	86400	IN	*****
*****IN	CNAME	beij*****
*****	3600	IN	A*****
*****3600	IN	A*****
*****	IN	CNAME	c*****
*****m.	86400	IN*****
*****. 86400	IN	A*****
*****m. 86400	IN	*****
*****.	1200	IN	*****
*****	3600	IN	A	*****
*****com. 3600	I*****
*****m. 86400	IN	*****
*****400	IN	A	2*****
*****m.	1200	IN*****
*****	3600	IN	A	*****
*****6400	IN	A	21*****
*****3600	IN	A	*****
*****AME	hnltzp.zhaop*****
*****3600	IN	A	*****
*****	3600	IN	*****
*****.	3600	IN	A*****
*****om. 1200	IN	*****
*****om. 86400 IN*****
*****m.	3600	IN*****
*****6400	IN	A	19*****
*****	3600	IN	*****
*****m. 3600	IN	A*****
*****.com. 3600 I*****
*****200	IN	A	5*****
*****0	IN	A	211*****
*****3600	IN	A	*****
*****.	3600	IN	*****
*****3600	IN	A*****
*****.	1200	IN	A*****
*****3600	IN	A	*****
*****6400	IN	A	*****
*****.com. 3600 I*****
*****m.	1200	IN	*****
*****com. 86400 IN*****
*****com. 86400 IN*****
*****6400	IN	A	*****
*****AME	huaxing.zhao*****
*****.	3600	IN	*****
*****1200	IN	A	*****
*****	IN	CNAME	bei*****
*****	3600	IN	A*****
*****3600	IN	A*****
*****m.	3600	IN	*****
*****m.	3600	IN*****
*****3600	IN	A	*****
*****.	3600	IN	A*****
*****	3600	IN	A*****
*****.	3600	IN	*****
*****m.	3600	IN	*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****.	3600	IN	A*****
*****6400	IN	A	*****
*****3600	IN	A	*****
*****. 86400	IN	A*****
*****.	1200	IN	*****
*****200	IN	A	*****
*****	1200	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****com. 3600 IN*****
*****AME	images.zhao*****
*****.	1200	IN	*****
*****ME	img00.zhaopi*****
*****ME	img01.zhaopi*****
*****ME	img02.zhaopi*****
*****ME	img03.zhaopi*****
*****ME	img04.zhaopi*****
*****ME	img05.zhaopi*****
*****ME	img06.zhaopi*****
*****ME	img07.zhaopi*****
*****ME	img08.zhaopi*****
*****ME	img09.zhaopi*****
*****00	IN	A	211*****
*****00	IN	A	21*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****m.	3600	IN	*****
*****200	IN	A	2*****
*****6400	IN	A	21*****
*****haopin.com. 864*****
*****3600	IN	A	*****
*****	3600	IN	A*****
*****3600	IN	A	*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****	1200	IN	A	*****
*****.	1200	IN	A*****
*****3600	IN	A	21*****
*****	1200	IN	A	*****
*****.	300	IN	A	*****
*****6400	IN	A	2*****
*****om. 3600	IN	*****

invoicetest.zhaopin.com. 3600 IN

mask 区域

*****68.1*****
*****1200	IN	A	*****
*****AME	zhaopin.in*****
*****m.	3600	IN	*****
*****m.	1200	IN	*****
*****1200	IN	A*****
*****86400	IN	A	*****
*****om. 3600	IN	*****
*****m.	3600	IN	*****
*****m.	1200	IN	*****
*****400	IN	A	5*****
*****om. 86400 IN*****
*****400	IN	A	5*****
*****	3600	IN	*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****m.	3600	IN	*****
*****om. 3600	IN*****
*****com. 3600 IN*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****.com. 3600 I*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****om. 3600	IN	*****
*****n.com.	3600 I*****
*****IN	CNAME	beiji*****
*****	IN	CNAME	bei*****
*****3600	IN	A*****
*****.	3600	IN	*****
*****.	1200	IN	*****
*****	IN	CNAME	bei*****
*****N	CNAME	beiji*****
*****N	CNAME	beiji*****
*****1200	IN	A	*****
*****1200	IN	A	*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	86400	IN	*****
*****com. 1200	I*****
*****86400	IN	A	*****
*****	3600	IN	A	*****
*****400	IN	A	21*****
*****86400	IN	A	2*****
*****m.	3600	IN*****
*****400	IN	A	5*****
*****00	IN	A	192*****
*****	3600	IN	A*****
*****6400	IN	A	2*****
*****m.	86400	IN*****
*****m. 1200	IN	A*****
*****0	IN	A	211.*****
*****.	3600	IN	A*****
*****m.	1200	IN*****
*****.	1200	IN	A*****
*****ME	jobsgg.zhaopi*****
*****	3600	IN	A*****
*****.	3600	IN	*****
*****	1200	IN	A*****
*****.	1200	IN	*****
*****86400	IN	A	*****
*****3600	IN	A	*****
*****3600	IN	A	*****
*****. 3600	IN	A	*****
*****	3600	IN	*****
*****	1200	IN	A	*****
*****00	IN	NS	lns1.*****
*****	IN	NS	lns1.z*****
*****0	IN	NS	lns1.*****
*****	3600	IN	A*****
*****6400	IN	A	2*****
*****3600	IN	A*****
*****om. 1200	IN*****
*****6400	IN	A	*****
*****	1200	IN	A*****
*****.	86400	IN	*****
*****1200	IN	A	*****
*****com. 300	IN	*****
*****600	IN	A	19*****
*****1200	IN	A*****
*****3600	IN	A	2*****
*****.	1200	IN	*****
*****400	IN	A	19*****
*****m. 86400	IN	*****
*****com. 3600	I*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****in.com. 3600*****
*****om. 3600	IN*****
*****.com. 3600 I*****
*****	86400	IN	*****
*****NAME	kugou.zhao*****
*****	IN	CNAME	bei*****
*****.	3600	IN	*****
*****	IN	A	211.*****
*****	IN	A	211.*****
*****opin.com. 360*****
*****.	3600	IN	*****
*****	IN	CNAME	bei*****
*****m.	300	IN	*****
*****6400	IN	A	*****
*****6400	IN	A	2*****
*****m.	3600	IN*****
*****. 86400	IN	A*****
*****m.	1200	IN*****
*****	86400	IN	A*****
*****m. 86400	IN	*****
*****om. 86400 IN*****

lenovoadmin.zhaopin.com. 3600 IN A

mask 区域

*****1.5*****
*****	86400	IN	A*****
*****.	86400	IN	*****
*****m. 86400	IN	*****
*****.com. 3600 IN*****
*****	3600	IN	*****
*****m.	3600	IN	*****
*****m.	3600	IN*****
*****6400	IN	A	*****
*****200	IN	A	19*****
*****com. 86400 IN*****
*****com. 1200 IN*****
*****. 86400	IN	A*****
*****	86400	IN	*****
*****com. 3600	I*****
*****.	3600	IN	*****
*****	3600	IN	A*****
*****	IN	MX	10 trac*****
*****N	CNAME	beiji*****
*****0	IN	MX	10 2*****
*****1200	IN	A	*****
*****.	3600	IN	*****
*****	3600	IN	*****
*****m. 86400	IN	*****
*****m. 86400	IN	*****
*****00	IN	A	211*****
*****.	1200	IN	A*****
*****3600	IN	A	*****
*****	IN	NS	lns1.z*****
*****	IN	CNAME	bei*****
*****.	3600	IN	*****
*****m.	1200	IN	*****
*****	3600	IN	*****
*****om. 3600	IN*****
*****6400	IN	A	2*****
*****	3600	IN	*****
*****0	IN	A	211*****
*****86400	IN	A*****
*****N	MX	10 mx.ma*****
*****t;v=spf1 include:z*****
*****pin.com. 8640*****

v=DKIM1\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkk/qsYwWYwx2GAVdNxsdMExTYhUV31k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7FQWrNXYLsqZ9JQasdPl+XuHQVbBy2t8DiTCgAisZy3kmjS9+pD7RmB+6vZ7U0J2xJ/qugyNhVSQIDAQAB"
C350relay.mail.zhaopin.com. 86400

mask 区域

*****168.1*****
*****com. 86400 IN*****
*****com. 86400 I*****
*****. 86400	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****m. 3600	IN	A*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****0	IN	MX	10 2*****
*****00	IN	A	211*****
*****0	IN	MX	10 2*****
*****00	IN	A	211*****
*****IN	MX	10 mx.m*****
*****;v=spf1 include:zha*****
*****1k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****IN	MX	10 mx.m*****
*****;v=spf1 include:zha*****
*****1k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****. 86400 IN	A	*****
*****6400	IN	A	1*****
*****	IN	CNAME	bei*****
*****200	IN	A	21*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****400	IN	A	19*****
*****1200	IN	A	*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****com. 3600 IN*****
*****	IN	CNAME	bei*****
*****86400	IN	A*****
*****m.	3600	IN*****
*****00	IN	A	21*****
*****86400	IN	A	*****
*****IN	CNAME	beiji*****
*****86400	IN	A*****
*****3600	IN	A	*****
*****.	3600	IN	A*****
*****om. 3600	IN	*****
*****	1200	IN	A	*****
*****	86400	IN	A*****
*****m.	86400	IN*****
*****6400	IN	A	1*****
*****com. 3600 IN*****
*****3600	IN	A*****
*****3600	IN	A*****
*****	1200	IN	A	*****
*****om. 1200 IN	A*****
*****6400	IN	A	19*****
*****3600	IN	A*****
*****. 86400	IN	A*****
*****400	IN	A	2*****
*****	3600	IN	*****
*****.	86400	IN	*****
*****86400	IN	A*****
*****400	IN	A	18*****
*****600	IN	A	*****
*****	3600	IN	A*****
*****3600	IN	A	*****
*****m.	3600	IN	*****
*****	3600	IN	A*****
*****3000	IN	A	*****
*****. 86400	IN	A*****
*****	3600	IN	A	*****
*****om. 3600	IN	*****
*****.	3600	IN	A*****
*****IN	CNAME	beiji*****
*****IN	CNAME	beiji*****
*****	IN	CNAME	bei*****
*****	IN	CNAME	bei*****
*****	IN	CNAME	bei*****
*****200	IN	A	5*****
*****	3600	IN	A*****
*****400	IN	A	19*****
*****6400	IN	A	*****
*****00	IN	A	192*****
*****6400	IN	A	*****
*****com. 1200	I*****
*****m.	1200	IN	*****
*****m. 86400	IN	*****
*****	86400	IN	*****
*****3600	IN	A*****
*****IN	CNAME	beij*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****pin.com. 3600*****
*****00	IN	A	192*****
*****200	IN	A	19*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****	1200	IN	A	*****
*****.com. 3600 I*****
*****.	86400	IN	*****
*****com. 86400 I*****
*****3600	IN	A*****
*****3600	IN	A*****
*****	86400	IN	*****
*****	3600	IN	A*****
*****0	IN	A	211*****
*****.	3600	IN	A*****
*****m.	3600	IN	*****
*****com. 3600 IN*****
*****3600	IN	A*****
*****3600	IN	A	*****
*****0	IN	A	211*****
*****.	3600	IN	*****
*****.	3600	IN	*****
*****86400	IN	A	*****
*****86400	IN	A	*****
*****6400	IN	CNAME*****
*****400	IN	A	5*****
*****400	IN	A	21*****
*****86400	IN	A*****
*****300	IN	A	2*****
*****1200	IN	A	*****
*****om. 3600	IN*****
*****com. 3600 IN*****
*****	1200	IN	A*****
*****86400	IN	A*****
*****com. 1200	I*****
*****200	IN	A	2*****
*****1200	IN	A	1*****
*****	86400	IN	A*****
*****00	IN	A	21*****
*****.	1200	IN	*****
*****00	IN	A	211*****
*****.	1200	IN	*****
*****00	IN	A	10*****
*****.	3600	IN	A*****
*****.	86400	IN	*****
*****	3600	IN	A*****
*****3600	IN	A*****
*****	3600	IN	*****
*****.	3600	IN	*****
*****	3600	IN	A*****
*****	3600	IN	A*****
*****	3600	IN	A*****
*****.	3600	IN	A*****
*****86400	IN	A*****
*****om. 3600	IN*****
*****m. 3600	IN	A*****
*****	1800	IN	*****

pop.zhaopin.com. 3600 IN A

mask 区域

*****9.4*****
*****1200	IN	A	*****

powercdn.zhaopin.com. 86400 IN CNAME powercdn-zhaopin-com.powercdn.cn.
powerlong.zhaopin.com.

mask 区域

*****sk>59.1*****
*****3600	IN	A	*****
*****m.	3600	IN*****
*****.	3600	IN	*****
*****m.	3600	IN*****
*****om. 3600	IN*****
*****com. 3600	I*****
*****.com. 3600 I*****
*****m.	1200	IN*****
*****om. 1200	IN	*****
*****m.	1200	IN	*****
*****	86400	IN	A*****
*****om. 86400	I*****

psbc2014sz.zhaopin.com. 86400 IN CNAME psbc2014sz.zhaopin.com.fastcdn.com.
psbc2015.zhaopin.com. 86400 IN A

mask 区域

*****1.5*****
*****. 86400	IN	A*****
*****86400	IN	A	*****
*****86400	IN	A	*****
*****	86400	IN	*****
*****	3600	IN	A	2*****
*****	3600	IN	A*****
*****m. 86400	IN	*****
*****00	IN	A	21*****
*****00	IN	A	19*****
*****	86400	IN	*****
*****	IN	CNAME	bei*****
*****IN	CNAME	beiji*****
*****00	IN	CNAME	be*****
*****m. 3600	IN	A*****
*****	86400	IN	A*****
*****IN	CNAME	beiji*****
*****6400	IN	A	*****
*****86400	IN	A	*****
*****00	IN	A	21*****
*****m.	3600	IN	*****
*****.	3600	IN	*****
*****.	3600	IN	*****
*****.	3600	IN	*****
*****00	IN	A	21*****
*****	3600	IN	A*****
*****	3600	IN	A*****
*****	3600	IN	A*****
*****00	IN	A	19*****
*****	1200	IN	A	*****
*****	3600	IN	A*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****	3600	IN	A	5*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****

m55.relay.zhaopin.com. 3600 IN A

mask 区域

*****.21*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****.	3600	IN	A*****
*****	3600	IN	A	5*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****. 3600	IN	A	*****
*****om. 3600	IN*****

mail2.relay.zhaopin.com. 3600 IN A 5*.**.**.53
mail2.relay.zhaopin.com. 3600 IN A 5*.**.**83

漏洞证明：

mask 区域

**********

3.来几张后台管理图look，look。
手机应用平台：

智联招聘：

厂商招聘地址：

修复方案：

allow-transfer {ipaddress;}; 通过ip限制可进行域传送的服务器
allow-transfer { key transfer; }; 通过key限制可进行域传送的服务器

版权声明：转载请注明来源小r00to1@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：12

确认时间：2015-02-07 21:25

厂商回复：

感谢你对智联招聘安全的关注漏洞已修复。

漏洞评价：

2015-02-06 22:39 | 麻辣烫 ( 路人 | Rank:27 漏洞数:10 | wooyun是一个学习的好地方.)

dig @ns8.zhaopin.com axfr zhaopin.comdig @ns9.zhaopin.com axfr zhaopin.com
2015-02-06 23:20 | 小r00to1 ( 普通白帽子 | Rank:138 漏洞数:42 )

貌似修复了，好快啊。。。
2015-02-06 23:34 | caspar ( 路人 | Rank:7 漏洞数:10 | ^_^)

这次修复的很快嘛
2015-02-07 01:04 | 孤独雪狼 ( 普通白帽子 | Rank:710 漏洞数:145 | 七夕手机被偷，这坑爹的七夕啊。。。。)

求一份IP段
2015-02-07 10:17 | 子非海绵宝宝 ( 核心白帽子 | Rank:1044 漏洞数:106 | 发扬海绵宝宝的精神!你不是海绵宝宝,你怎...)

来一份！！！
2015-02-07 11:11 | 刘海哥 ( 普通白帽子 | Rank:114 漏洞数:28 | 索要联系方式但不送礼物的厂商定义为无良厂...)

速度快成这样！来一份！！！
2015-02-08 18:08 | 路人N ( 路人 | Rank:12 漏洞数:8 )

fierce --dns zhaopin.comFound 73 entries.

WooYun.org

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-096103

漏洞标题：智联招聘DNS区域传送漏洞可导致大量域名指向外漏

相关厂商：智联招聘

漏洞作者：小r00to1

提交时间：2015-02-06 21:56

修复时间：2015-03-23 21:58

公开时间：2015-03-23 21:58

漏洞类型：系统/服务运维配置不当

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源小r00to1@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

漏洞评价：

评论

WooYun.org

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-096103

漏洞标题：智联招聘DNS区域传送漏洞可导致大量域名指向外漏

相关厂商：智联招聘

漏洞作者： 小r00to1

提交时间：2015-02-06 21:56

修复时间：2015-03-23 21:58

公开时间：2015-03-23 21:58

漏洞类型：系统/服务运维配置不当

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

Tags标签： 无

4人收藏 收藏 var token=""; var id="wooyun-2015-096103"; $(".btn-fav").click(function(){ CollectBug(id,token); }); 分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源 小r00to1@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

漏洞评价：

评论

漏洞概要关注数(24) 关注此漏洞

漏洞作者：小r00to1

Tags标签：无

4人收藏收藏
分享漏洞：

版权声明：转载请注明来源小r00to1@乌云