乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-07-22: 细节已通知厂商并且等待厂商处理中 2015-07-26: 厂商已经确认,细节仅向厂商公开 2015-08-05: 细节向核心白帽子及相关领域专家公开 2015-08-15: 细节向普通白帽子公开 2015-08-25: 细节向实习白帽子公开 2015-09-09: 细节向公众公开
地址http://sp.cncico.com:8093/kingeeanc/fileDownloadAction.action存在命令执行漏洞
netstat -ano
活动连接 协议 本地地址 外部地址 状态 PID TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 696 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING 1856 TCP 0.0.0.0:8009 0.0.0.0:0 LISTENING 7964 TCP 0.0.0.0:8065 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:8093 0.0.0.0:0 LISTENING 7964 TCP 0.0.0.0:8123 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:47001 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 416 TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 784 TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 832 TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 520 TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING 512 TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING 1956 TCP 10.100.2.34:139 0.0.0.0:0 LISTENING 4 TCP 10.100.2.34:2030 0.0.0.0:0 LISTENING 1396 TCP 10.100.2.34:8093 171.111.45.253:18259 ESTABLISHED 7964 TCP 10.100.2.34:8093 202.107.237.218:55598 FIN_WAIT_2 7964 TCP 10.100.2.34:8093 202.107.237.218:55599 FIN_WAIT_2 7964 TCP 10.100.2.34:8093 202.107.237.218:55600 FIN_WAIT_2 7964 TCP 10.100.2.34:52346 10.100.1.118:1521 ESTABLISHED 984 TCP 10.100.2.34:53234 220.181.132.86:80 ESTABLISHED 2696 TCP 10.100.2.34:60712 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:60715 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:60716 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:60718 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:60731 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:60738 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:60809 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:60898 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:61089 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:61206 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:61287 10.100.1.119:1521 ESTABLISHED 2968 TCP 10.100.2.34:61299 10.100.1.118:1521 ESTABLISHED 7964 TCP 10.100.2.34:61300 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:61301 10.100.1.119:1521 ESTABLISHED 7964 TCP 10.100.2.34:62927 106.120.166.87:80 ESTABLISHED 2696 TCP 127.0.0.1:8005 0.0.0.0:0 LISTENING 7964 TCP [::]:135 [::]:0 LISTENING 696 TCP [::]:445 [::]:0 LISTENING 4 TCP [::]:3389 [::]:0 LISTENING 1856 TCP [::]:8065 [::]:0 LISTENING 4 TCP [::]:8123 [::]:0 LISTENING 4 TCP [::]:47001 [::]:0 LISTENING 4 TCP [::]:49152 [::]:0 LISTENING 416 TCP [::]:49153 [::]:0 LISTENING 784 TCP [::]:49154 [::]:0 LISTENING 832 TCP [::]:49155 [::]:0 LISTENING 520 TCP [::]:49156 [::]:0 LISTENING 512 TCP [::]:49157 [::]:0 LISTENING 1956 TCP [fe80::28d7:9180:31e:791%11]:2030 [::]:0 LISTENING 1396 UDP 0.0.0.0:500 *:* 832 UDP 0.0.0.0:3600 *:*
whoami
yueqingwang\administrator
加强安全意识
危害等级:中
漏洞Rank:7
确认时间:2015-07-26 22:05
CNVD确认并复现所述情况,已经转由CNCERT下发给浙江分中心,由其后续协调网站管理单位处置。按通用软件漏洞案例评分,rank 7
暂无