乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-06-01: 细节已通知厂商并且等待厂商处理中 2015-06-05: 厂商已经确认,细节仅向厂商公开 2015-06-15: 细节向核心白帽子及相关领域专家公开 2015-06-25: 细节向普通白帽子公开 2015-07-05: 细节向实习白帽子公开 2015-07-20: 细节向公众公开
地址http://218.20.201.91/pyjf/rygl/register.action存在命令执行漏洞
连接马儿看内网情况
地址http://218.20.201.91/pyjf/2.jsp密码tomnetstat -an
Active Internet connections (servers and established)Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:3310 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN tcp 0 0 172.25.101.91:22 119.145.114.146:16385 ESTABLISHED tcp 0 0 172.25.101.91:80 14.150.215.245:35583 ESTABLISHED tcp 0 0 172.25.101.91:80 14.23.233.187:1900 TIME_WAIT tcp 0 0 172.25.101.91:80 112.96.164.57:48227 ESTABLISHED tcp 0 0 172.25.101.91:80 14.152.69.86:26284 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1781 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1780 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.105:21205 TIME_WAIT tcp 0 0 172.25.101.91:80 14.152.69.86:26318 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.116:2161 TIME_WAIT tcp 129940 0 172.25.101.91:15530 157.7.239.254:80 ESTABLISHED tcp 0 0 172.25.101.91:80 112.96.164.57:48223 ESTABLISHED tcp 0 0 172.25.101.91:80 14.152.69.86:26316 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1768 TIME_WAIT tcp 0 0 172.25.101.91:80 121.33.51.185:13488 ESTABLISHED tcp 0 0 172.25.101.91:80 119.130.92.221:1771 TIME_WAIT tcp 0 0 172.25.101.91:80 113.66.190.179:28186 ESTABLISHED tcp 0 0 172.25.101.91:80 119.130.92.221:1783 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1763 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1786 TIME_WAIT tcp 0 0 172.25.101.91:22 119.145.114.146:55009 ESTABLISHED tcp 80301 0 172.25.101.91:42970 157.7.239.254:80 CLOSE_WAIT tcp 0 0 172.25.101.91:80 14.152.69.86:26323 TIME_WAIT tcp 0 0 172.25.101.91:80 14.152.69.86:26290 TIME_WAIT tcp 0 0 172.25.101.91:80 14.152.69.86:26287 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.116:2092 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.105:21242 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.105:21357 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1759 TIME_WAIT tcp 0 0 172.25.101.91:22 120.197.46.179:56193 ESTABLISHED tcp 0 0 172.25.101.91:80 112.96.164.57:48226 ESTABLISHED tcp 0 0 172.25.101.91:80 113.66.148.79:5792 ESTABLISHED tcp 0 0 172.25.101.91:80 182.88.216.160:58942 TIME_WAIT tcp 0 0 172.25.101.91:80 180.153.206.20:36482 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.116:2044 TIME_WAIT tcp 0 0 172.25.101.91:80 119.130.92.221:1769 TIME_WAIT tcp 0 0 172.25.101.91:80 61.242.59.116:2758 TIME_WAIT tcp 0 0 172.25.101.91:80 14.29.100.182:25306 ESTABLISHED tcp 0 0 172.25.101.91:80 14.152.69.86:26306 TIME_WAIT tcp 0 0 172.25.101.91:80 14.23.233.187:1863 TIME_WAIT tcp 0 0 172.25.101.91:80
加强安全意识
危害等级:高
漏洞Rank:11
确认时间:2015-06-05 14:50
CNVD确认所述情况,已经转由CNCERT下发给广东分中心,由其后续协调网站管理单位处置。
暂无