乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-03-28: 细节已通知厂商并且等待厂商处理中 2015-04-01: 厂商已经确认,细节仅向厂商公开 2015-04-11: 细节向核心白帽子及相关领域专家公开 2015-04-21: 细节向普通白帽子公开 2015-05-01: 细节向实习白帽子公开 2015-05-16: 细节向公众公开
ST2-016命令执行
http://202.96.85.177/web/questionnaire/taxSchoolWebQuestionnaireActions!toQuestionnaire.action
Target: http://202.96.85.177/web/taxSchoolWebSecurityActions!jump.actionUseage: S2-016 Whoami: nt authority\systemWebPath: f:\Apache Software Foundation\Tomcat 6.0\webapps\ROOT\
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:1158 0.0.0.0:0 LISTENING TCP 0.0.0.0:1521 0.0.0.0:0 LISTENING TCP 0.0.0.0:2301 0.0.0.0:0 LISTENING TCP 0.0.0.0:2381 0.0.0.0:0 LISTENING TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING TCP 0.0.0.0:5520 0.0.0.0:0 LISTENING TCP 0.0.0.0:5560 0.0.0.0:0 LISTENING TCP 0.0.0.0:5580 0.0.0.0:0 LISTENING TCP 0.0.0.0:8009 0.0.0.0:0 LISTENING TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING TCP 0.0.0.0:47001 0.0.0.0:0 LISTENING TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING TCP 0.0.0.0:49162 0.0.0.0:0 LISTENING TCP 0.0.0.0:49163 0.0.0.0:0 LISTENING TCP 0.0.0.0:49165 0.0.0.0:0 LISTENING TCP 0.0.0.0:49209 0.0.0.0:0 LISTENING TCP 0.0.0.0:49210 0.0.0.0:0 LISTENING TCP 10.105.0.7:80 59.197.10.200:26130 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26132 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26133 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26134 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26159 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26160 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:26226 ESTABLISHED TCP 10.105.0.7:80 59.197.10.200:36931 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:42618 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:44832 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:47662 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:52544 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:57815 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:58973 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:60728 TIME_WAIT TCP 10.105.0.7:80 59.197.10.200:61563 ESTABLISHED TCP 10.105.0.7:139 0.0.0.0:0 LISTENING TCP 10.105.0.7:1521 10.105.0.7:49164 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49166 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49185 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49186 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49187 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49188 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49189 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49190 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49191 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49192 ESTABLISHED TCP 10.105.0.7:1521 10.105.0.7:49193 ESTABLISHED TCP 10.105.0.7:49159 61.138.252.196:2099 ESTABLISHED TCP 10.105.0.7:49164 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49166 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49185 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49186 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49187 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49188 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49189 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49190 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49191 10.105.0.7:1521 ESTABLISHED TCP 10.105.0.7:49192
升级
危害等级:中
漏洞Rank:9
确认时间:2015-04-01 13:40
CNVD确认并复现所述情况,已经转由CNCERT下发给辽宁分中心,由其后续协调网站管理单位处置.
暂无