当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2013-039343

漏洞标题:亚信联创某两个服务器命令执行漏洞root权限可SHELL

相关厂商:亚信联创

漏洞作者: niliu

提交时间:2013-10-11 11:18

修复时间:2013-11-25 11:19

公开时间:2013-11-25 11:19

漏洞类型:命令执行

危害等级:高

自评Rank:15

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2013-10-11: 积极联系厂商并且等待厂商认领中,细节不对外公开
2013-11-25: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

亚信联创某两个服务器命令执行漏洞root权限可SHELL

详细说明:

亚信联创股份有限公司(Asiainfo-Linkage, Inc.NASDAQ代码:ASIA)于2009年12月6日,由亚信集团股份有限公司和联创科技(南京)有限公司宣布合并而成,是中国最大、全球收入和市值均第二大的电信BSS/OSS提供商。
所以就提交给cncert吧
#1

http://218.94.61.17/OnlineServer/LoginAction.action


0.jpg


struts命令执行

1.jpg


eth0      Link encap:Ethernet  HWaddr 78:2B:CB:15:4A:50  
inet addr:192.168.4.180 Bcast:192.168.4.255 Mask:255.255.255.0
inet6 addr: fe80::7a2b:cbff:fe15:4a50/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:23055939 errors:0 dropped:0 overruns:0 frame:0
TX packets:12862125 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:7166504931 (6.6 GiB) TX bytes:6575029987 (6.1 GiB)
Interrupt:25 Memory:f2000000-f2012800
eth1 Link encap:Ethernet HWaddr 78:2B:CB:15:4A:52
inet addr:192.168.15.21 Bcast:192.168.15.255 Mask:255.255.255.0
inet6 addr: fe80::7a2b:cbff:fe15:4a52/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:510165387 errors:0 dropped:0 overruns:0 frame:0
TX packets:79818823 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:42256120280 (39.3 GiB) TX bytes:1426072352449 (1.2 TiB)
eth2 Link encap:Ethernet HWaddr 78:2B:CB:15:4A:54
inet addr:8.1.1.2 Bcast:8.1.1.3 Mask:255.255.255.252
inet6 addr: fe80::7a2b:cbff:fe15:4a54/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:36 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:4770 (4.6 KiB)
Interrupt:27 Memory:f6000000-f6012800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:66245857 errors:0 dropped:0 overruns:0 frame:0
TX packets:66245857 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:33792352507 (31.4 GiB) TX bytes:33792352507 (31.4 GiB)
peth1 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
UP BROADCAST RUNNING NOARP MTU:1500 Metric:1
RX packets:511416568 errors:0 dropped:34 overruns:0 frame:0
TX packets:997046965 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:44385214962 (41.3 GiB) TX bytes:1490499499805 (1.3 TiB)
Interrupt:26 Memory:f4000000-f4012800
vif0.1 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
UP BROADCAST RUNNING NOARP MTU:1500 Metric:1
RX packets:79818753 errors:0 dropped:0 overruns:0 frame:0
TX packets:510165387 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1426072276395 (1.2 TiB) TX bytes:42256120280 (39.3 GiB)
virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00
inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:3395 (3.3 KiB)
xenbr1 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
UP BROADCAST RUNNING NOARP MTU:1500 Metric:1
RX packets:3984454 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:479625932 (457.4 MiB) TX bytes:0 (0.0 b)


shell地址:

http://218.94.61.17/OnlineServer/3.jsp


2.jpg


#2

http://221.6.15.107:58080/OnlineServer/LoginAction.action


eth0      Link encap:Ethernet  HWaddr 78:2B:CB:3E:31:FC  
inet addr:192.168.5.22 Bcast:192.168.5.255 Mask:255.255.255.128
inet6 addr: fe80::7a2b:cbff:fe3e:31fc/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:16129633 errors:0 dropped:0 overruns:0 frame:0
TX packets:13270364 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:6169142846 (5.7 GiB) TX bytes:5622127345 (5.2 GiB)
Interrupt:98 Memory:f2000000-f2012800
eth1 Link encap:Ethernet HWaddr 78:2B:CB:3E:31:FE
inet addr:192.168.15.10 Bcast:192.168.15.255 Mask:255.255.255.0
inet6 addr: fe80::7a2b:cbff:fe3e:31fe/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7310064 errors:0 dropped:0 overruns:0 frame:0
TX packets:1802263 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4026295622 (3.7 GiB) TX bytes:524288104 (500.0 MiB)
Interrupt:106 Memory:f4000000-f4012800
eth3 Link encap:Ethernet HWaddr 78:2B:CB:3E:32:02
inet addr:192.168.168.11 Bcast:192.168.168.255 Mask:255.255.255.0
inet6 addr: fe80::7a2b:cbff:fe3e:3202/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:59911304 errors:0 dropped:0 overruns:0 frame:0
TX packets:65767494 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:14318383708 (13.3 GiB) TX bytes:70040124583 (65.2 GiB)
Interrupt:122 Memory:f8000000-f8012800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:16438 errors:0 dropped:0 overruns:0 frame:0
TX packets:16438 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:22339747 (21.3 MiB) TX bytes:22339747 (21.3 MiB)


shell地址

http://221.6.15.107:58080/OnlineServer/cd.jsp


3.jpg


漏洞证明:

#shell1

2.jpg


#shell2

3.jpg

修复方案:

升级!

版权声明:转载请注明来源 niliu@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝


漏洞评价:

评论