ITPub博客
首页 博客 专栏 学院 社区 IT新媒体评选
发博

首页 > 应用开发 > IT综合 > Weblogic WLS组件REC漏洞（CVE-2017-10271）测试与修复方案

Weblogic WLS组件REC漏洞（CVE-2017-10271）测试与修复方案

原创 IT综合 作者：neverinit 时间：2018-01-05 16:30:54 16 删除 编辑

本文对“挖矿”漏洞的处理思路是（前提是未被攻击）：

1. 下载工具，测试确认漏洞存在（从Github上下载相关程序）

2. 从MOS上下载weblogic 补丁修复漏洞

3. 使用工具再次测试漏洞是否存在


第一步，搭建python环境

1.首先访问http://www.python.org/download/去下载windows版的python，这里下载2.7.14。

 
2.下载python2.7安装包。

3.安装python

 

点击Next

 

点击Next，这里可以记一下“C:\Python27\”，后面配置系统环境变量

 

点击“Next”

 

等待安装完成

点击Finish完成安装

4. 配置python环境变量，为PATH变量添加参数“C:\Python27\”

 

5.测试python是否安装成功，打开cmd命令输入python

 

执行python命令：print 'Hello World!' 

 

Python环境配置完毕。

第二步，使用工具测试漏洞

1.首先访问https://github.com/，登陆代码托管平台Github，直接搜索关键字“CVE-2017-10271”

 2.下载hanc00l/weblogic_wls_wsat_rce项目，解压至F盘（可以测试Linux版本）

 3. 查看README的内容

  1. weblogic_wls_wsat_rce
  2. Weblogic wls-wsat组件反序列化漏洞(CVE-2017-10271)利用脚本，参考https://github.com/s3xy/CVE-2017-10271修改。
  • 命令执行并回显
  • 直接上传shell
  • 在linux下weblogic 10.3.6.0测试OK
  1. 使用方法及参数
  2. python weblogic_wls_wsat_exp.py -t 172.16.80.131:7001
  3. usage: weblogic_wls_wsat_exp.py [-h] -t TARGET [-c CMD] [-o OUTPUT] [-s SHELL]

  5. optional arguments:
  6.   -h, --help show this help message and exit
  7.   -t TARGET, --target TARGET
  8.                         weblogic ip and port(eg -> 172.16.80.131:7001)
  9.   -c CMD, --cmd CMD command to execute,default is "id"
  10.   -o OUTPUT, --output OUTPUT
  11.                         output file name,default is output.txt
  12.   -s SHELL, --shell SHELL
  13.                         local jsp file name to upload,and set -o xxx.jsp
 4.执行命令测试：python weblogic_wls_wsat_exp.py -t targetip:port
  1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls
  2. Traceback (most recent call last):
  3.   File "F:\CVE-2017-10271-master\weblogic_wls_wsat_exp.py", line 3, in <module>
  4.     import requests
  5. ImportError: No module named requests

根据错误信息，需要安装requests模块，使用easy_install工具执行命令安装模块：C:\Python27\Scripts\easy_install.exe requests

  1. F:\weblogic_wls_wsat_rce-master>C:\Python27\Scripts\easy_install.exe requests
  2. Searching for requests
  3. Reading https://pypi.python.org/simple/requests/
  4. Downloading https://pypi.python.org/packages/b0/e1/eab4fc3752e3d240468a8c0b28460
  5. 7899d2fbfb236a56b7377a329aa8d09/requests-2.18.4.tar.gz#md5=081412b2ef79bdc482298
  6. 91af13f4d82
  7. Best match: requests 2.18.4
  8. Processing requests-2.18.4.tar.gz
  9. Writing

  11. ……

  13. Installing chardetect-script.py script to c:\python27\Scripts
  14. Installing chardetect.exe script to c:\python27\Scripts
  15. Installing chardetect.exe.manifest script to c:\python27\Scripts

  17. Installed c:\python27\lib\site-packages\chardet-3.0.4-py2.7.egg
  18. Finished processing dependencies for requests

  20. 再次执行命令
  21. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls
  22. autodeploy
  23. bin
  24. config
  25. console-ext
  26. dev=null

显然，命令执行成功。

第三步，更新补丁修复漏洞

1. 在https://support.oracle.com上用关键字CVE-2017-10271搜索，找到2017年10月份的补丁文件并下载。【p26519424_1036_Generic.zip】

2. 执行打补丁操作（注意：不同的环境和本文的路径会有所不同）

  1. cams@SCT-APP:~>cd /home/cams/bea/middleware/wlserver_10.3/server/bin/
  2. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin>ls
  3. international setWLSEnv.sh startNodeManager.sh

  4.
  5. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> . ./setWLSEnv.sh
  6. CLASSPATH=/home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/cams/bea/middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/java/jdk1.6.0_45/lib/tools.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic_sp.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic.jar:/home/cams/bea/middleware/modules/features/weblogic.server.modules_10.3.6.0.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/webservices.jar:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/home/cams/bea/middleware/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:.:/usr/java/jdk1.6.0_45/lib/dt.jar:/usr/java/jdk1.6.0_45/lib/tools.jar

  8. PATH=/home/cams/bea/middleware/wlserver_10.3/server/bin:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/bin:/usr/java/jdk1.6.0_45/jre/bin:/usr/java/jdk1.6.0_45/bin:/usr/java/jdk1.6.0_45/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:

  10. Your environment has been set.

  11.
  12. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> java weblogic.version

  14. WebLogic Server Temporary Patch for BUG22248372 Tue Nov 24 00:35:04 MST 2015
  15. WebLogic Server 10.3.6.0.12 PSU Patch for BUG20780171 THU JUN 18 15:54:42 IST 2015
  16. WebLogic Server 10.3.6.0 Tue Nov 15 08:52:36 PST 2011 1441050

  18. Use 'weblogic.version -verbose' to get subsystem information

  20. Use 'weblogic.utils.Versions' to get version information for all modules
  21. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> cd /home/cams/bea/middleware/utils/bsu
  22. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view
  23. ProductName: WebLogic Server
  24. ProductVersion: 10.3 MP6
  25. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
  26.                    nistration Console,WebLogic Server/Configuration Wizard and
  27.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
  28.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
  29.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
  30.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
  31.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
  32.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code
  33.                    Completion Support
  34. BEAHome: /home/cams/bea/middleware
  35. ProductHome: /home/cams/bea/middleware/wlserver_10.3
  36. PatchSystemDir: /home/cams/bea/middleware/utils/bsu
  37. PatchDir: /home/cams/bea/middleware/patch_wls1036
  38. Profile: Default
  39. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir
  40. JavaVersion: 1.6.0_29
  41. JavaVendor: Sun


  44. Patch ID: EJUW
  45. PatchContainer: EJUW.jar
  46. Checksum: 1554039558
  47. Severity: optional
  48. Category: General
  49. CR/BUG: 20780171
  50. Restart: true
  51. Description: WLS PATCH SET UPDATE 10.3.6.0.12
  52. WLS PATCH SET UPDATE 10.3.
  53.                    6.0.12

  55. Patch ID: ZLNA
  56. PatchContainer: ZLNA.jar
  57. Checksum: -894774340
  58. Severity: optional
  59. Category: Security
  60. CR/BUG: 22248372
  61. Restart: true
  62. Description: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015
  63.                    )
  64. WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 20
  65.                    15)


  68. 上传p26519424_1036_Generic.zip至DownloadDir:/home/cams/bea/middleware/utils/bsu/cache_dir路径下，并解压

  70. cams@SCT-APP:~/bea/middleware/utils/bsu> cd cache_dir/
  71. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> unzip p26519424_1036_Generic.zip
  72. Archive: p26519424_1036_Generic.zip
  73.  extracting: FMJJ.jar
  74.   inflating: patch-catalog_25504.xml
  75. replace README.txt? [y]es, [n]o, [A]ll, [N]one, [r]ename: r
  76. new name: README2.txt
  77.   inflating: README2.txt
  78.   
  79. 如果不知道如何打补丁，参考文章http://blog.itpub.net/31394774/viewspace-2142526/
  80.             
  81. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> cd ../
  82. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
  83. 检查冲突.....
  84. 检测到冲突 - 解决冲突情形并重新执行补丁程序安装
  85. 下面是冲突情形详细资料:
  86. 补丁程序 FMJJ 与以下补丁程序互相排斥且不能共存: EJUW,ZLNA


  89. 此时，需要将EJUW,ZLNA补丁卸载，使用-remove命令进行卸载。
  90. 【注意：需先卸载ZLNA，后卸载EJUW】

  92. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
  93. 检查冲突......
  94. 检测到冲突 - 解决冲突情形并重新执行补丁程序删除过程
  95. 下面是冲突情形详细资料:
  96. 必须先删除下列补丁程序, 才能删除所选补丁程序: ZLNA

  98. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=ZLNA -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
  99. 检查冲突.......
  100. 未检测到冲突

  102. 开始删除补丁程序 ID: ZLNA
  103. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  104. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG22248372_1036.jar
  105. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
  106. 旧清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
  107. 新清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
  108. 结果: 成功

  110. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
  111. 检查冲突.......
  112. 未检测到冲突

  114. 开始删除补丁程序 ID: EJUW
  115. 删除 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar
  116. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt
  117. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar
  118. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar
  119. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/20780171-WLS-10.3.6.0.12_PSU_WebServices-ClientSide-Configuration-README.txt
  120. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar
  121. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  122. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  123. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  124. 还原 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  125. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  126. 还原 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  127. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  128. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils.full_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  129. 还原 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  130. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  131. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  132. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  133. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  134. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  135. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  136. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  137. 还原 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  138. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  139. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  140. 还原 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  141. 还原 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  142. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  143. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  144. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  145. 还原 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  146. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  147. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  148. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  149. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  150. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  151. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  152. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  153. 还原 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  154. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  155. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  156. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  157. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  158. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG20780171_1036012.jar
  159. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar
  160. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar
  161. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar
  162. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar
  163. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar
  164. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
  165. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
  166. 旧清单值: Class-Path= ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
  167. 新清单值: Class-Path=
  168. 结果: 成功

  170. 再次安装FMJJ补丁


  173. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
  174. 检查冲突.....
  175. 未检测到冲突

  177. 开始安装补丁程序 ID: FMJJ
  178. 安装 /home/cams/bea/middleware/utils/bsu/cache_dir/FMJJ.jar
  179. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG26519424_10360171017.jar
  180. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar
  181. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar
  182. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar
  183. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar
  184. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar
  185. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
  186. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar
  187. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar
  188. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
  189. 旧清单值: Class-Path=
  190. 新清单值: Class-Path=../../../patch_jars/BUG26519424_10360171017.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar ../../../patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar ../../../patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar
  191. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  192. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  193. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  194. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  195. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  196. 备份 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  197. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  198. 备份 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  199. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  200. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  201. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  202. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  203. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  204. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  205. 备份 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  206. 备份 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  207. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  208. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  209. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  210. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  211. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  212. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  213. 备份 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  214. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  215. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  216. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  217. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  218. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  219. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  220. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  221. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift
  222. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear
  223. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar
  224. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar
  225. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar
  226. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift
  227. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh
  228. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/26519424-WLS-10.3.6.0.171017_PSU_WebServices-ClientSide-Configuration-README.txt
  229. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt
  230. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar
  231. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar
  232. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar
  233. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar
  234. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar
  235. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_1-2-15.jar
  236. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar
  237. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.0.0.0_2-0.jar
  238. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar
  239. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war
  240. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar
  241. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar
  242. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar
  243. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar
  244. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerUpdate_62.ldift
  245. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar
  246. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war
  247. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar
  248. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar
  249. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.stax2_2.0.0.0_3-0-3.jar
  250. 解压缩 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar
  251. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_2-0-4.jar
  252. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar
  253. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar
  254. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war
  255. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerUpdate_62.ldift
  256. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar
  257. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar
  258. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar
  259. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml
  260. 备份 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  261. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  262. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  263. 备份 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  264. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  265. 备份 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  266. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  267. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  268. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  269. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  270. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  271. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  272. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  273. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  274. 备份 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  275. 备份 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  276. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  277. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  278. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  279. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
  280. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp
  281. 合并 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar
  282. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp
  283. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar
  284. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp
  285. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar
  286. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp
  287. 合并 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar
  288. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp
  289. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip
  290. 解压缩 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp
  291. 合并 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp 与 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar
  292. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp
  293. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war
  294. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp
  295. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar
  296. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp
  297. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar
  298. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp
  299. 合并 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar
  300. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp
  301. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar
  302. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp
  303. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar
  304. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp
  305. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar
  306. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp
  307. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar
  308. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp
  309. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar
  310. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp
  311. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar
  312. 解压缩 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp
  313. 合并 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp 与 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar
  314. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp
  315. 合并 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar
  316. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp
  317. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar
  318. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp
  319. 合并 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar
  320. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp
  321. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar
  322. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp
  323. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar
  324. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp
  325. 更新 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp 到 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar
  326. 结果: 成功
3. 查看最新的补丁信息


  1. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view
  2. ProductName: WebLogic Server
  3. ProductVersion: 10.3 MP6
  4. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
  5.                    nistration Console,WebLogic Server/Configuration Wizard and
  6.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
  7.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
  8.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
  9.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
  10.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
  11.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code
  12.                    Completion Support
  13. BEAHome: /home/cams/bea/middleware
  14. ProductHome: /home/cams/bea/middleware/wlserver_10.3
  15. PatchSystemDir: /home/cams/bea/middleware/utils/bsu
  16. PatchDir: /home/cams/bea/middleware/patch_wls1036
  17. Profile: Default
  18. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir
  19. JavaVersion: 1.6.0_29
  20. JavaVendor: Sun


  23. Patch ID: FMJJ
  24. PatchContainer: FMJJ.jar
  25. Checksum: 591477727
  26. Severity: optional
  27. Category: General
  28. CR/BUG: 26519424
  29. Restart: true
  30. Description: WLS PATCH SET UPDATE 10.3.6.0.171017
  31. WLS PATCH SET UPDATE 10
  32.                    .3.6.0.171017


第四步，使用工具复测漏洞

1. 启动一个weblogic域

  1. cams@SCT-APP:~/bea/middleware/utils/bsu> cd /home/cams/bea/middleware/user_projects/domains/cams_wf/
  2. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> nohup ./startWebLogic.sh >/dev/null 2>&1 &
  3. [1] 17849
  4. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> netstat -nlp | grep 7006
  5. (Not all processes could be identified, non-owned process info
  6.  will not be shown, you would have to be root to see it all.)
  7. tcp 0 0 10.6.3.226:7006 0.0.0.0:* LISTEN 17902/java
  8. tcp 0 0 127.0.0.1:7006 0.0.0.0:* LISTEN 17902/java
2.测试RCE漏洞
  1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.226:70
  2. 06 -c ls
  3. [-]FAIL:404 no output
从测试返回结果“FAIL:404 no output”，显然漏洞已经修复。
3.最后，由于之前操作卸载了反序列化漏洞的补丁，还需使用测试“Java反序列化漏洞”是否存在。经过测试，反序列化漏洞也已经修复。（具体测试工具也可从Github上下载）


来自 “ ITPUB博客 ” ，链接：https://blog.itpub.net/31394774/viewspace-2149752/ ，如需转载，请注明出处，否则将追究法律责任。

0
0
上一篇： 【转】java日志 -logback的使用和logback.xml详解
下一篇： 数据泵expdp导出遇到ORA-01555和ORA-22924问题的分析和处理
请登录后发表评论 登录
全部评论
neverinit
专家姓名：姜俊
技术爱好者，自学Oracle并拿下OCM，参与某金融系统的需求、开发、测试、上线、运维全流程，在此学习技术，分享知识。微信公众号“IT技术佳肴”，有干货，有扯皮……

注册时间：2016-09-15

  • 博文量
    68
  • 访问量
    303702

最新文章

支持我们 作者招募 用户协议 FAQ Contact Us

北京盛拓优讯信息技术有限公司. 版权所有  京ICP备16024965号-8 北京市公安局海淀分局网监中心备案编号：11010802021510 niuxiaotong@pcpop.com 17352615567 未成年人举报专区

广播电视节目制作经营许可证(京) 字第1234号 中国互联网协会会员

违法和不良信息举报电话:18101376593