当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-074410

漏洞标题：电信某平台影响手机用户及getshell内网

相关厂商：189.cn

漏洞作者： Moogong

提交时间：2014-08-31 00:08

修复时间：2014-10-15 00:10

公开时间：2014-10-15 00:10

漏洞类型：网络未授权访问

危害等级：高

自评Rank：18

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-08-31： 细节已通知厂商并且等待厂商处理中
2014-09-04： 厂商已经确认，细节仅向厂商公开
2014-09-14： 细节向核心白帽子及相关领域专家公开
2014-09-24： 细节向普通白帽子公开
2014-10-04： 细节向实习白帽子公开
2014-10-15： 细节向公众公开

简要描述：

电信某平台管理影响手机用户影响内网
数据库有硬防，果断被墙

详细说明：

http://118.85.207.74:8080/Login.jsp
(密码已经被修改修复)
但是依旧存在着未授权访问！！！
http://118.85.207.74:8080/zipbeforeAdd.do
（调用某公开源码的上传插件）
http://118.85.207.74:8080/toZipList.do
打开一看 蛋蛋的忧伤

漏洞证明：

Linux client49 2.6.18-194.el5 #1 SMP Tue Mar 16 21:52:39 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux


Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 172.16.50.49:9004           172.16.50.95:nbt-pc         SYN_RECV    
tcp        0      0 172.16.50.49:52585          10.235.196.229:ftp          ESTABLISHED 
tcp        0      0 172.16.50.49:10050          172.16.50.103:37493         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:40564         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:40568         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42362         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:39266         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:36688         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:41817         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:43352         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38721         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38977         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:36673         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:43072         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42053         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37704         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:36913         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38449         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:40502         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:fairview      TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42810         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37667         TIME_WAIT   
tcp        0      0 172.16.50.49:39771          10.235.196.229:ftp          ESTABLISHED 
tcp        0      0 172.16.50.49:10050          172.16.50.103:41519         TIME_WAIT   
tcp        0      0 172.16.50.49:44216          10.235.196.229:ftp          ESTABLISHED 
tcp        0      0 172.16.50.49:43125          10.235.196.229:ftp          ESTABLISHED 
tcp        0      0 172.16.50.49:10050          172.16.50.103:43294         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37406         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42497         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:41476         TIME_WAIT   
tcp        0      0 172.16.50.49:47991          10.235.196.229:ftp          ESTABLISHED 
tcp        0      0 172.16.50.49:10050          172.16.50.103:40206         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42739         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38386         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42997         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:43260         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42196         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:36820         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:39124         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:41943         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:39362         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38854         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37065         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37836         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38065         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:42421         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37822         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:37282         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38562         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:40351         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:40094         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:36995         TIME_WAIT   
tcp        0      0 172.16.50.49:10050          172.16.50.103:38024         TIME_WAIT   
tcp        0      0 172.16.50.49:nfs            172.16.50.182:1016          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:padl2sim          ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:49784             TIME_WAIT   
tcp        0 529393 [UNKNOWN]:9003              [UNKNOWN]:eims-admin        FIN_WAIT1   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:ida-discover1     TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:10832             TIME_WAIT   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:39272             TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:45124             TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:agcat             TIME_WAIT   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:5964              TIME_WAIT   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:4211              TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:appleugcontrol    TIME_WAIT   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:44549             TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:7664              TIME_WAIT   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:6645              TIME_WAIT   
tcp        0      0 [UNKNOWN]:54538             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54532             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54530             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54528             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54559             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54557             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54568             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54566             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:54526             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49502             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49497             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49499             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49525             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49534             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49528             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49530             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49508             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49506             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49519             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:49513             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:38622             TIME_WAIT   
tcp        0      0 [UNKNOWN]:50872             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:50854             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:50862             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:17382             TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:6124              TIME_WAIT   
tcp        0      0 [UNKNOWN]:52627             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:52631             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:52629             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:52618             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:52640             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:7123              ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:14574             TIME_WAIT   
tcp        0      1 [UNKNOWN]:etlservicemgr     [UNKNOWN]:5079              FIN_WAIT1   
tcp        0      0 [UNKNOWN]:58276             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60978             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60962             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60974             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60970             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60995             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59171             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59179             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59177             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59181             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59160             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:59151             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:4298              TIME_WAIT   
tcp        0      0 [UNKNOWN]:60011             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60007             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:38897             TIME_WAIT   
tcp        0      0 [UNKNOWN]:60921             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60923             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60914             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60919             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:6385              TIME_WAIT   
tcp        0      0 [UNKNOWN]:60936             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:60934             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39242             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39260             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39256             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39258             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39254             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39248             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39250             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39278             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:39269             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:6329              TIME_WAIT   
tcp        0      0 [UNKNOWN]:40668             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:40683             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:40674             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:40678             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:40676             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:igateway          TIME_WAIT   
tcp        0      0 [UNKNOWN]:33503             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:33522             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:33510             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:index-net         TIME_WAIT   
tcp        0      0 [UNKNOWN]:36242             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:36225             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:36229             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:36220             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:37292             TIME_WAIT   
tcp        0      0 [UNKNOWN]:48769             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:48771             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:48776             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:48758             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47558             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47560             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47576             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:46675             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:46654             [UNKNOWN]:ncube-lm          TIME_WAIT   
tcp        0      0 [UNKNOWN]:47530             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47528             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47524             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47520             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47498             [UNKNOWN]:ncube-lm          TIME_WAIT   
tcp        0      0 [UNKNOWN]:47514             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47511             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:47507             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        1      0 [UNKNOWN]:36544             [UNKNOWN]:dynamid           CLOSE_WAIT  
tcp        0      0 [UNKNOWN]:44892             [UNKNOWN]:ncube-lm          TIME_WAIT   
tcp        1      0 [UNKNOWN]:36149             [UNKNOWN]:etlservicemgr     CLOSE_WAIT  
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:15747             TIME_WAIT   
tcp        0      0 [UNKNOWN]:44304             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:5764              TIME_WAIT   
tcp        0      0 [UNKNOWN]:43123             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43134             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43117             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43095             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43097             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:netobjects1       TIME_WAIT   
tcp        0      0 [UNKNOWN]:43536             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43539             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:43524             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44113             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44115             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44118             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44097             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44103             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44084             [UNKNOWN]:ncube-lm          TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:52364             TIME_WAIT   
tcp        0      0 [UNKNOWN]:44626             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:44621             [UNKNOWN]:ncube-lm          ESTABLISHED 
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:48989             TIME_WAIT   
tcp        0      0 [UNKNOWN]:32813             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32812             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32815             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32814             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32809             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32811             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32810             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32817             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32816             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      0 [UNKNOWN]:32818             [UNKNOWN]:11225             ESTABLISHED 
tcp        0      1 [UNKNOWN]:9003              [UNKNOWN]:15402             FIN_WAIT1   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:8471              TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:8476              TIME_WAIT   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:hpoms-dps-lstn    TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:29952             TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:6656              TIME_WAIT   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:14084             TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:29682             ESTABLISHED 
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:8951              TIME_WAIT   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:5373              TIME_WAIT   
tcp        0      0 [UNKNOWN]:irdmi             [UNKNOWN]:47044             TIME_WAIT   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:6886              ESTABLISHED 
tcp        0      0 [UNKNOWN]:irdmi             [UNKNOWN]:47053             TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:6125              TIME_WAIT   
tcp        0      0 [UNKNOWN]:irdmi             [UNKNOWN]:47090             ESTABLISHED 
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:28867             TIME_WAIT   
tcp        0      0 [UNKNOWN]:9004              [UNKNOWN]:47819             TIME_WAIT   
tcp        0      0 [UNKNOWN]:irdmi             [UNKNOWN]:47081             TIME_WAIT   
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:5040              TIME_WAIT   
tcp        0 505473 [UNKNOWN]:9003              [UNKNOWN]:5556              FIN_WAIT1   
tcp        0      0 [UNKNOWN]:9003              [UNKNOWN]:34233             TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:11450             TIME_WAIT   
tcp        0      1 [UNKNOWN]:dynamid           [UNKNOWN]:9128              FIN_WAIT1   
tcp        0      0 [UNKNOWN]:46236             [UNKNOWN]:11224             ESTABLISHED 
tcp        0      0 [UNKNOWN]:46234             [UNKNOWN]:11224             ESTABLISHED 
tcp        0      0 [UNKNOWN]:46235             [UNKNOWN]:11224             ESTABLISHED 
tcp        0      0 [UNKNOWN]:46232             [UNKNOWN]:11224             ESTABLISHED 
tcp        0      0 [UNKNOWN]:46233             [UNKNOWN]:11224             ESTABLISHED 
tcp        0      0 [UNKNOWN]:dynamid           [UNKNOWN]:5268              TIME_WAIT   
tcp        0      0 [UNKNOWN]:etlservicemgr     [UNKNOWN]:4992              TIME_WAIT


root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
avahi-autoipd:x:100:101:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
gdm:x:42:42::/var/gdm:/sbin/nologin
sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin
oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
patrol:x:891:890::/opt/bmc:/bin/sh
shadm1:x:892:892::/home/shadm1:/bin/bash
was:x:893:893::/home/was:/bin/bash
java:x:894:894::/home/java:/bin/bash
zabbix:x:101:104:Zabbix Monitoring System:/var/lib/zabbix:/sbin/nologin


QQ截图20140830073455.jpg

修复方案：

只求礼物

版权声明：转载请注明来源 Moogong@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：15

确认时间：2014-09-04 22:32

厂商回复：

CNVD确认并复现所述情况，已经转由CNCERT通报给中国电信集团公司处置。

最新状态：

暂无

漏洞评价：

评论

  1. 2014-09-03 21:21 | Moogong ( 实习白帽子 | Rank:33 漏洞数:8 | 伪法医)

    @xsser 都几天了还不确定

  2. 2014-10-15 15:27 | expl0 ( 路人 | Rank:21 漏洞数:3 | 一枚小菜鸟，初入江湖，低调求发展)

    贴的太多，漏的太多了。。