当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2016-0190339

漏洞标题:伊仕利官网商城getshell

相关厂商:www.easily-china.com

漏洞作者: 朱元璋

提交时间:2016-03-29 16:48

修复时间:2016-05-13 16:50

公开时间:2016-05-13 16:50

漏洞类型:系统/服务补丁不及时

危害等级:高

自评Rank:15

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2016-03-29: 积极联系厂商并且等待厂商认领中,细节不对外公开
2016-05-13: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

详细说明:

打开官网http://www.easily-china.com/,图中链接存在漏洞

0.png


地址http://14.29.84.51:8080/system/login.action;jsessionid=E2EF2635C60A1F1C132038537D772C3A存在命令执行漏洞

1.png


直接上传木马到服务器中

2.png


全是客户订单资料

3.png

4.png

漏洞证明:

[*] 磁盘列表 [ C:D:E: ]
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> whoami
win-8fkisj99lms\yslgl
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> net user
\\WIN-8FKISJ99LMS 的用户帐户
-------------------------------------------------------------------------------
Administrator Guest ysl
yslgl
命令成功完成。
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> net share
共享名 资源 注解
-------------------------------------------------------------------------------
C$ C:\ 默认共享
D$ D:\ 默认共享
E$ E:\ 默认共享
IPC$ 远程 IPC
ADMIN$ C:\Windows 远程管理
命令成功完成。
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> net view
服务器名称 注解
-------------------------------------------------------------------------------
\\CPSERVER
\\FKM
\\GDGX001 GDGX001
\\GJTSERVER GJTserver
\\NINE
\\USER-F040IRHVC8
\\WIN-0NEGK5VQVJ2
\\WIN-205OO9NNNK6
\\WIN-42V56MUHLCC
\\WIN-E2V6698C2C4
\\WIN-ERNOHIJJQEF
\\WIN-HD6V9PI5SMJ
命令成功完成。
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> net start
已经启动以下 Windows 服务:
Application Experience
Application Information
Application Layer Gateway Service
Base Filtering Engine
Certificate Propagation
COM+ Event System
Cryptographic Services
DbSecuritySpt
DCOM Server Process Launcher
Desktop Window Manager Session Manager
DHCP Client
Diagnostic Policy Service
Distributed Link Tracking Client
Distributed Transaction Coordinator
DNS Client
Group Policy Client
Human Interface Device Access
IKE and AuthIP IPsec Keying Modules
IP Helper
IPsec Policy Agent
MySQL
Network Connections
Network List Service
Network Location Awareness
Network Store Interface Service
Plug and Play
Power
Print Spooler
QQPCMgr RTP Service
Remote Access Connection Manager
Remote Desktop Configuration
Remote Desktop Services
Remote Desktop Services UserMode Port Redirector
Remote Procedure Call (RPC)
Remote Registry
Routing and Remote Access
RPC Endpoint Mapper
Secure Socket Tunneling Protocol Service
Security Accounts Manager
Server
Shell Hardware Detection
Special Administration Console Helper
System Event Notification Service
Task Scheduler
TCP/IP NetBIOS Helper
Telephony
TxQBService
User Profile Service
Windows Event Log
Windows Firewall
Windows Font Cache Service
Windows Management Instrumentation
Windows Modules Installer
Windows Remote Management (WS-Management)
Windows Time
Windows Update
Workstation
命令成功完成。
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> netstat -ano
活动连接
协议 本地地址 外部地址 状态 PID
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 760
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:1723 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:3306 0.0.0.0:0 LISTENING 9064
TCP 0.0.0.0:8009 0.0.0.0:0 LISTENING 244908
TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING 244908
TCP 0.0.0.0:8090 0.0.0.0:0 LISTENING 241452
TCP 0.0.0.0:8099 0.0.0.0:0 LISTENING 241452
TCP 0.0.0.0:36789 0.0.0.0:0 LISTENING 1968
TCP 0.0.0.0:47001 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 480
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 852
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 900
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 576
TCP 0.0.0.0:49159 0.0.0.0:0 LISTENING 568
TCP 14.29.84.51:139 0.0.0.0:0 LISTENING 4
TCP 14.29.84.51:1723 112.124.50.60:60518 CLOSE_WAIT 4
TCP 14.29.84.51:1723 123.151.42.61:23245 CLOSE_WAIT 4
TCP 14.29.84.51:1723 124.193.229.203:56026 CLOSE_WAIT 4
TCP 14.29.84.51:1723 124.193.229.203:59849 CLOSE_WAIT 4
TCP 14.29.84.51:8080 14.18.203.131:5281 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:9857 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:10785 TIME_WAIT 0
TCP 14.29.84.51:8080 14.18.203.131:18785 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:18817 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:18851 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:19745 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:26177 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:31969 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:35265 ESTABLISHED 244908
TCP 14.29.84.51:8080 14.18.203.131:36450 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:39457 ESTABLISHED 244908
TCP 14.29.84.51:8080 14.18.203.131:49954 ESTABLISHED 244908
TCP 14.29.84.51:8080 14.18.203.131:53666 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:60545 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.18.203.131:60993 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.23.10.21:51082 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 14.23.10.21:51085 FIN_WAIT_2 244908
TCP 14.29.84.51:8080 171.111.41.191:30897 TIME_WAIT 0
TCP 14.29.84.51:8080 171.111.41.191:30906 TIME_WAIT 0
TCP 14.29.84.51:8080 171.111.41.191:30914 ESTABLISHED 244908
TCP 14.29.84.51:8090 14.18.203.131:2433 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:3521 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:5377 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:8737 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:10913 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:13057 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:19041 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:23650 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:23905 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:24674 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:24833 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:29089 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:29121 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:31457 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:32545 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:36866 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:39107 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:40769 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:43233 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:44641 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:44769 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:45666 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:50305 ESTABLISHED 241452
TCP 14.29.84.51:8090 14.18.203.131:52641 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:53345 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:59073 FIN_WAIT_2 241452
TCP 14.29.84.51:8090 14.18.203.131:59553 TIME_WAIT 0
TCP 14.29.84.51:8090 14.18.203.131:63970 TIME_WAIT 0
TCP 14.29.84.51:8090 101.226.66.21:41080 TIME_WAIT 0
TCP 14.29.84.51:53801 14.215.139.219:80 CLOSE_WAIT 183764
TCP 14.29.84.51:53848 92.222.201.247:7777 ESTABLISHED 1472
TCP 14.29.84.51:53885 23.234.41.214:12080 SYN_SENT 1076
TCP 14.29.84.51:53886 14.29.84.35:139 TIME_WAIT 0
TCP 14.29.84.51:53887 23.234.41.214:12080 SYN_SENT 1076
TCP 14.29.84.51:53888 23.234.41.214:12080 SYN_SENT 1076
TCP 14.29.84.51:53889 23.234.41.214:12080 SYN_SENT 1076
TCP 122.13.81.193:60908 0.0.0.0:0 LISTENING 67368
TCP 122.13.81.193:60910 0.0.0.0:0 LISTENING 47868
TCP 122.13.81.193:60914 0.0.0.0:0 LISTENING 51616
TCP 122.13.81.193:60918 0.0.0.0:0 LISTENING 68288
TCP 127.0.0.1:3306 127.0.0.1:49942 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:49943 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:50516 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:50534 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:52902 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:53229 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:54942 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:60239 ESTABLISHED 9064
TCP 127.0.0.1:3306 127.0.0.1:62067 ESTABLISHED 9064
TCP 127.0.0.1:8005 0.0.0.0:0 LISTENING 244908
TCP 127.0.0.1:8006 0.0.0.0:0 LISTENING 241452
TCP 127.0.0.1:49942 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:49943 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:50516 127.0.0.1:3306 ESTABLISHED 244908
TCP 127.0.0.1:50534 127.0.0.1:3306 ESTABLISHED 244908
TCP 127.0.0.1:52902 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:53229 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:54942 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:60239 127.0.0.1:3306 ESTABLISHED 241452
TCP 127.0.0.1:62067 127.0.0.1:3306 ESTABLISHED 241452
TCP [::]:135 [::]:0 LISTENING 760
TCP [::]:443 [::]:0 LISTENING 4
TCP [::]:445 [::]:0 LISTENING 4
TCP [::]:3306 [::]:0 LISTENING 9064
TCP [::]:8009 [::]:0 LISTENING 244908
TCP [::]:8080 [::]:0 LISTENING 244908
TCP [::]:8090 [::]:0 LISTENING 241452
TCP [::]:8099 [::]:0 LISTENING 241452
TCP [::]:36789 [::]:0 LISTENING 1968
TCP [::]:47001 [::]:0 LISTENING 4
TCP [::]:49152 [::]:0 LISTENING 480
TCP [::]:49153 [::]:0 LISTENING 852
TCP [::]:49154 [::]:0 LISTENING 900
TCP [::]:49155 [::]:0 LISTENING 576
TCP [::]:49159 [::]:0 LISTENING 568
UDP 0.0.0.0:123 *:* 948
UDP 0.0.0.0:500 *:* 900
UDP 0.0.0.0:4500 *:* 900
UDP 0.0.0.0:5355 *:* 240
UDP 0.0.0.0:49182 *:* 900
UDP 0.0.0.0:49691 *:* 12
UDP 0.0.0.0:54772 *:* 14768
UDP 0.0.0.0:56256 *:* 12
UDP 0.0.0.0:59369 *:* 205244
UDP 0.0.0.0:59370 *:* 209396
UDP 0.0.0.0:59972 *:* 218380
UDP 0.0.0.0:64598 *:* 2928
UDP 14.29.84.51:137 *:* 4
UDP 14.29.84.51:138 *:* 4
UDP 127.0.0.1:50325 *:* 67368
UDP 127.0.0.1:50327 *:* 47868
UDP 127.0.0.1:51376 *:* 51616
UDP 127.0.0.1:51378 *:* 68288
UDP [::]:123 *:* 948
UDP [::]:500 *:* 900
UDP [::]:4500 *:* 900
UDP [::]:5355 *:* 240
UDP [::1]:49180 *:* 900
UDP [::1]:49181 *:* 900
UDP [::1]:50326 *:* 67368
UDP [::1]:50328 *:* 47868
UDP [::1]:51377 *:* 51616
UDP [::1]:51379 *:* 68288
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> tasklist /svc
映像名称 PID 服务
========================= ======== ============================================
System Idle Process 0 暂缺
System 4 暂缺
smss.exe 340 暂缺
csrss.exe 420 暂缺
csrss.exe 472 暂缺
wininit.exe 480 暂缺
winlogon.exe 520 暂缺
services.exe 568 暂缺
lsass.exe 576 SamSs
lsm.exe 584 暂缺
svchost.exe 680 DcomLaunch, PlugPlay, Power
svchost.exe 760 RpcEptMapper, RpcSs
svchost.exe 852 Dhcp, eventlog, lmhosts
LogonUI.exe 860 暂缺
svchost.exe 900 AeLookupSvc, Appinfo, CertPropSvc, gpsvc,
IKEEXT, iphlpsvc, LanmanServer, ProfSvc,
RasMan, RemoteAccess, sacsvr, Schedule,
SENS, SessionEnv, ShellHWDetection,
Winmgmt, wuauserv
svchost.exe 948 EventSystem, netprofm, nsi, SstpSvc, W32Tim
svchost.exe 996 hidserv, Netman, TrkWks, UmRdpService, UxSm
svchost.exe 240 CryptSvc, Dnscache, LanmanWorkstation,
NlaSvc, WinRM
svchost.exe 432 BFE, DPS, MpsSvc
spoolsv.exe 1040 Spooler
DbSecuritySpt.exe 1076 DbSecuritySpt
svchost.exe 1248 RemoteRegistry
svchost.exe 1472 暂缺
conhost.exe 1504 暂缺
svchost.exe 1968 TermService
svchost.exe 2012 PolicyAgent
svchost.exe 2468 FontCache
msdtc.exe 2496 MSDTC
svchost.exe 2568 TapiSrv
alg.exe 2768 ALG
iashost.exe 2804 暂缺
csrss.exe 3052 暂缺
winlogon.exe 2752 暂缺
taskhost.exe 2352 暂缺
rdpclip.exe 2356 暂缺
dwm.exe 2032 暂缺
explorer.exe 12 暂缺
csrss.exe 3796 暂缺
winlogon.exe 3820 暂缺
taskhost.exe 4040 暂缺
rdpclip.exe 1536 暂缺
dwm.exe 1144 暂缺
explorer.exe 2928 暂缺
csrss.exe 3256 暂缺
winlogon.exe 3692 暂缺
taskhost.exe 3720 暂缺
rdpclip.exe 1284 暂缺
dwm.exe 3788 暂缺
consent.exe 392 暂缺
consent.exe 4144 暂缺
explorer.exe 218380 暂缺
cmd.exe 44152 暂缺
conhost.exe 51220 暂缺
ftp.exe 67368 暂缺
cmd.exe 67076 暂缺
conhost.exe 59068 暂缺
ftp.exe 47868 暂缺
cmd.exe 23180 暂缺
conhost.exe 48004 暂缺
ftp.exe 51616 暂缺
cmd.exe 67500 暂缺
conhost.exe 66192 暂缺
ftp.exe 68288 暂缺
IE9-Windows7-x64-chs.exe 183456 暂缺
ienrcore.exe 182472 暂缺
TrustedInstaller.exe 130356 TrustedInstaller
consent.exe 2780 暂缺
mysqld.exe 9064 MySQL
TsService.exe 183764 TxQBService
QQPCRTP.exe 205244 QQPCRTP
QQPCTray.exe 209396 暂缺
QQPCNetFlow.exe 216780 暂缺
QQPCRealTimeSpeedup.exe 214672 暂缺
QQPCTray.exe 14768 暂缺
QQPCNetFlow.exe 17168 暂缺
QQPCRealTimeSpeedup.exe 217208 暂缺
java.exe 241452 暂缺
conhost.exe 240816 暂缺
java.exe 244908 暂缺
conhost.exe 243128 暂缺
QQPCSoftTrayTips.exe 238888 暂缺
cmd.exe 43424 暂缺
conhost.exe 67928 暂缺
tasklist.exe 206952 暂缺
WmiPrvSE.exe 45040 暂缺
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> ipconfig /all
Windows IP 配置
主机名 . . . . . . . . . . . . . : WIN-8FKISJ99LMS
主 DNS 后缀 . . . . . . . . . . . :
节点类型 . . . . . . . . . . . . : 混合
IP 路由已启用 . . . . . . . . . . : 是
WINS 代理已启用 . . . . . . . . . : 否
以太网适配器 本地连接 2:
媒体状态 . . . . . . . . . . . . : 媒体已断开
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Intel(R) 82576 Gigabit Dual Port Network Connection #2
物理地址. . . . . . . . . . . . . : 00-A0-D1-EB-AC-F1
DHCP 已启用 . . . . . . . . . . . : 是
自动配置已启用. . . . . . . . . . : 是
以太网适配器 本地连接:
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Intel(R) 82576 Gigabit Dual Port Network Connection
物理地址. . . . . . . . . . . . . : 00-A0-D1-EB-AC-F0
DHCP 已启用 . . . . . . . . . . . : 否
自动配置已启用. . . . . . . . . . : 是
本地链接 IPv6 地址. . . . . . . . : fe80::cce:7885:28fb:6b52%11(首选)
IPv4 地址 . . . . . . . . . . . . : 14.29.84.51(首选)
子网掩码 . . . . . . . . . . . . : 255.255.255.192
IPv4 地址 . . . . . . . . . . . . : 122.13.81.193(首选)
子网掩码 . . . . . . . . . . . . : 255.255.255.128
默认网关. . . . . . . . . . . . . : 14.29.84.1
DHCPv6 IAID . . . . . . . . . . . : 234922193
DHCPv6 客户端 DUID . . . . . . . : 00-01-00-01-1C-41-02-86-00-A0-D1-EB-AC-F0
DNS 服务器 . . . . . . . . . . . : 202.96.128.143
202.96.128.166
TCPIP 上的 NetBIOS . . . . . . . : 已启用
隧道适配器 isatap.{EB1AC189-7E32-4405-B03D-B53A6B1E52DF}:
媒体状态 . . . . . . . . . . . . : 媒体已断开
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Microsoft ISATAP Adapter
物理地址. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP 已启用 . . . . . . . . . . . : 否
自动配置已启用. . . . . . . . . . : 是
隧道适配器 isatap.{B6B04110-CEEF-4A2B-9046-64C5450F63DB}:
媒体状态 . . . . . . . . . . . . : 媒体已断开
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Microsoft ISATAP Adapter #2
物理地址. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP 已启用 . . . . . . . . . . . : 否
自动配置已启用. . . . . . . . . . : 是
隧道适配器 6TO4 Adapter:
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Microsoft 6to4 Adapter
物理地址. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP 已启用 . . . . . . . . . . . : 否
自动配置已启用. . . . . . . . . . : 是
IPv6 地址 . . . . . . . . . . . . : 2002:e1d:5433::e1d:5433(首选)
IPv6 地址 . . . . . . . . . . . . : 2002:7a0d:51c1::7a0d:51c1(首选)
默认网关. . . . . . . . . . . . . : 2002:c058:6301::c058:6301
DNS 服务器 . . . . . . . . . . . : 202.96.128.143
202.96.128.166
TCPIP 上的 NetBIOS . . . . . . . : 已禁用
隧道适配器 Teredo Tunneling Pseudo-Interface:
媒体状态 . . . . . . . . . . . . : 媒体已断开
连接特定的 DNS 后缀 . . . . . . . :
描述. . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
物理地址. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP 已启用 . . . . . . . . . . . : 否
自动配置已启用. . . . . . . . . . : 是
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\> systeminfo
主机名: WIN-8FKISJ99LMS
OS 名称: Microsoft Windows Server 2008 R2 Enterprise
OS 版本: 6.1.7601 Service Pack 1 Build 7601
OS 制造商: Microsoft Corporation
OS 配置: 独立服务器
OS 构件类型: Multiprocessor Free
注册的所有人: Windows 用户
注册的组织:
产品 ID: 00486-OEM-8400691-20006
初始安装日期: 2015/1/9, 11:29:59
系统启动时间: 2015/10/15, 12:37:55
系统制造商: Dell
系统型号: XS23-TY3
系统类型: x64-based PC
处理器: 安装了 2 个处理器。
[01]: Intel64 Family 6 Model 26 Stepping 5 GenuineIntel ~2266 Mhz
[02]: Intel64 Family 6 Model 26 Stepping 5 GenuineIntel ~2266 Mhz
BIOS 版本: InventecESC 1.04, 2009/9/11
Windows 目录: C:\Windows
系统目录: C:\Windows\system32
启动设备: \Device\HarddiskVolume1
系统区域设置: zh-cn;中文(中国)
输入法区域设置: zh-cn;中文(中国)
时区: (UTC+08:00)北京,重庆,香港特别行政区,乌鲁木齐
物理内存总量: 16,375 MB
可用的物理内存: 8,536 MB
虚拟内存: 最大值: 32,748 MB
虚拟内存: 可用: 23,169 MB
虚拟内存: 使用中: 9,579 MB
页面文件位置: C:\pagefile.sys
域: WORKGROUP
登录服务器: \\WIN-8FKISJ99LMS
修补程序: 安装了 3 个修补程序。
[01]: KB982861
[02]: 982861
[03]: KB976902
网卡: 安装了 2 个 NIC。
[01]: Intel(R) 82576 Gigabit Dual Port Network Connection
连接名: 本地连接
启用 DHCP: 否
IP 地址
[01]: 122.13.81.193
[02]: 14.29.84.51
[03]: fe80::cce:7885:28fb:6b52
[02]: Intel(R) 82576 Gigabit Dual Port Network Connection
连接名: 本地连接 2
状态: 媒体连接已中断
D:\apache-tomcat-7.0.34\hgwebapps\orderdc\>

修复方案:

加强安全意识

版权声明:转载请注明来源 朱元璋@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝

漏洞Rank:15 (WooYun评价)


漏洞评价:

评价

  1. 2016-05-13 16:54 | dragon110 ( 路人 | Rank:2 漏洞数:1 | 谨言、慎行、多思。)

    洞主能给一下工具么?