¾ÅÓÎÀϸç

¾ÅÓÎÀϸç

¾ÅÓÎÀÏ¸ç¿Æ¼¼

  • »ù´¡ÉèÊ©Çå¾²

    »ù´¡ÉèÊ©Çå¾²
  • Êý¾ÝÇå¾²

    Êý¾ÝÇå¾²
  • ÔÆÅÌËãÇå¾²

    ÔÆÅÌËãÇå¾²
  • ¹¤Òµ»¥ÁªÍøÇå¾²

    ¹¤Òµ»¥ÁªÍøÇå¾²
  • ÎïÁªÍøÇå¾²

    ÎïÁªÍøÇå¾²
  • ÐÅÏ¢ÊÖÒÕÓ¦ÓÃÁ¢Òì

    ÐÅÏ¢ÊÖÒÕÓ¦ÓÃÁ¢Òì
  • ËùÓвúÆ·

    ËùÓвúÆ·
  • ËùÓнâ¾ö¼Æ»®

    ËùÓнâ¾ö¼Æ»®

»ù´¡ÉèÊ©Çå¾²


  • Õþ¸®

    Õþ¸®
  • ÔËÓªÉÌ

    ÔËÓªÉÌ
  • ½ðÈÚ

    ½ðÈÚ
  • ÄÜÔ´

    ÄÜÔ´
  • ½»Í¨

    ½»Í¨
  • ÆóÒµ

    ÆóÒµ
  • ¿Æ½ÌÎÄÎÀ

    ¿Æ½ÌÎÄÎÀ

  • ¾ÅÓÎÀϸçÔÆ ¾ÅÓÎÀϸçÔÆ
  • ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI
  • TechWorldÊÖÒÕ¼ÎÄ껪 TechWorldÊÖÒÕ¼ÎÄ껪
  • ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á
  • ÊÖÒÕ²©¿Í ÊÖÒÕ²©¿Í
  • Àֳɰ¸Àý Àֳɰ¸Àý

ÏàÖúͬ°éÉó²é¸ü¶à >

ÏàÖúͬ°é¶¯Ì¬

³ÉΪÏàÖúͬ°é

  • ¾ÅÓÎÀϸçÔÆ ¾ÅÓÎÀϸçÔÆ
  • ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI
  • TechWorldÊÖÒÕ¼ÎÄ껪 TechWorldÊÖÒÕ¼ÎÄ껪
  • ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á
  • ÊÖÒÕ²©¿Í ÊÖÒÕ²©¿Í
  • Àֳɰ¸Àý Àֳɰ¸Àý

ÊÖÒÕÖ§³ÖÉó²é¸ü¶à >

²úÆ·Ö§³Ö

  • ¾ÅÓÎÀϸçÔÆ ¾ÅÓÎÀϸçÔÆ
  • ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI ¾ÅÓÎÀϸçÍþвÇ鱨ÖÐÐÄNTI
  • TechWorldÊÖÒÕ¼ÎÄ껪 TechWorldÊÖÒÕ¼ÎÄ껪
  • ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á ±±¾©¾ÅÓÎÀÏ¸ç¹«Òæ»ù½ð»á
  • ÊÖÒÕ²©¿Í ÊÖÒÕ²©¿Í
  • Àֳɰ¸Àý Àֳɰ¸Àý

·µ»ØÁбí

WordPress Ô¶³Ì´úÂëÖ´ÐÐ/·ÇÊÚÈ¨ÖØÖÃÃÜÂë

2017-05-04

Ðû²¼Õߣº¾ÅÓÎÀÏ¸ç¿Æ¼¼

ÍâµØÊ±¼ä5ÔÂ3ÈÕ£¨±±¾©Ê±¼ä5ÔÂ4ÈÕÆÆÏþ£© £¬WordPress±»ÆØ³ö±£´æÑÏÖØµÄÇå¾²Òþ»¼ ¡£

Ò»Ôò¹ØÓÚÎó²îCVE-2016-10033µÄÐÂPOC±»±¬³ö ¡£ÕâÊÇÒ»¸öPHPMailerµÄÎó²î £¬WordPress 4.6ʹÓÃÁ˱£´æ¸ÃÎó²îµÄPHPMailer £¬³öÓÚÇ徲˼Á¿ £¬WordPress¹Ù·½ÔÚ4.7.1ÖиüÐÂÁËPHPMailer £¬½â¾öÁËÕâ¸öÎÊÌâ ¡£µ«PHPMailerÎó²îµÄÔ­×÷Õß £¬ÓÖ·¢Ã÷ÁËÒ»¸öÕë¶ÔPHPMailerÔÚʹÓÃexim4 MTAʱµÄʹÓÃÒªÁì ¡£ÐÂPOCµÄÆØ³öÒ²ÌåÏÖ×ÅWordPress 4.6°æ±¾¾ùÊÜÓ°Ïì ¡£

Ò»¸öеÄÎó²î£¨CVE-2017-8295£©±»·¢Ã÷±£´æÓÚËùÓÐWordPress°æ±¾ÖÐ ¡£¸ÃÎó²îÔ´ÓÚWordPressÔÚ½¨ÉèÃÜÂëÖØÖõĵç×ÓÓʼþʱ £¬»áʹÓÿͻ§¶Ë·¢Ë͵ÄSERVER_NAME±äÁ¿µÄÄÚÈÝÀ´×é³É·¢ËÍÕßµÄÓʼþµØµã ¡£¹¥»÷ÕßÈôÊÇÖªµÀÖÎÀíÔ±»òí§ÒâÄ¿µÄÓû§µÄÓÊÏ䵨µã £¬¿ÉÒÔÊ×ÏÈͨ¹ý·¢ËÍ´ó×ÚÓʼþµÈÒªÁìʹµÃÄ¿µÄÓÊÏäÎÞ·¨Õý³£ÊÕÐÅ £¬È»ºóαÔìÒ»¸ö·¢¼þÓÊÏäÀ´ÏòÄ¿µÄÓÊÏäÌá³«ÖØÖÃÃÜÂëµÄÇëÇó £¬¸ÃÓʼþ»áÓÉÓÚÄ¿µÄÓÊÏäÎÞ·¨Õý³£ÊÕÐŶøÍ˻ع¥»÷Õß¿ØÖƵķ¢¼þÓÊÏä £¬¹¥»÷Õ߾ͿÉÒÔÔÚÍËÐÅÓʼþÖлñÈ¡ÖØÖÃÃÜÂëµÄÁ´½Ó £¬´Ó¶øÖØÖÃí§ÒâÓû§µÄÕË»§ÃÜÂë ¡£¸ÃÎó²îWordPress¹Ù·½ÉÐδÓÐÈκÎÐÞ¸´¸üР¡£

Ïà¹ØÁ´½Ó£º

https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html

https://exploitbox.io/vuln/WordPress-Exploit-4-7-Unauth-Password-Reset-0day-CVE-2017-8295.html


WordPress

WordPressÊÇÒ»¸öÃâ·ÑµÄ»ùÓÚPHPºÍMySQLµÄ¿ªÔ´ÄÚÈÝÖÎÀíϵͳ£¨CMS£© ¡£×èÖ¹2017Äê2Ô £¬ÅÅÃûǰ1000ÍòµÄÍøÕ¾ÖÐÓÐÁè¼Ý27.5%µÄÍøÕ¾Ê¹ÓÃWordPress¾Ý±¨µÀWordPressÊÇ×îÊܽӴýµÄÍøÕ¾ÖÎÀí»ò²©¿Íϵͳ £¬Ö§³Ö6000¶àÍò¸öÍøÕ¾ ¡£


ÊÜÓ°ÏìµÄ°æ±¾

CVE-2016-10033Îó²î£º
 ? WordPress Version 4.6
CVE-2017-8295Îó²î£º
 ? WordPress Version <= 4.7.4


²»ÊÜÓ°ÏìµÄ°æ±¾

 ? CVE-2016-10033Îó²î£º
WordPress Version >= 4.7.1
 ? CVE-2017-8295Îó²î£º

ÎÞ

×¢£ºÏÖÔÚËùÓÐWordPress°æ±¾£¨°üÀ¨×îеÄ4.7.4°æ±¾£©¾ùÊÜÓ°Ïì ¡£


ÔÝʱ·À»¤¼Æ»®

 ? CVE-2016-10033Îó²îÐÞ²¹·À»¤¼Æ»®£º

Õâ¸öÎó²îÒѾ­ÓÚWordPress 4.7.1°æ±¾Öб»ÐÞ¸´ £¬µ«½¨ÒéÓû§Éý¼¶µ½×îеÄ4.7.4°æ±¾ ÓÉÓÚÉÐÓÐÆäËûÇå¾²Îó²î±»ÐÞ¸´ ¡£

ÏÂÔØÁ´½Ó£ºhttps://wordpress.org/download/

 ? CVE-2017-8295Îó²î¹æ±Ü¼Æ»®£º

ÏÖÔÚWordPress¹Ù·½Ã»ÓÐÏà¹ØÐÞ¸´Óë¸üР£¬Óû§¿ÉÒÔ½ÓÄÉÒÔÏÂÔÝʱ·À»¤¼Æ»®£º

Óû§¿ÉÒÔ¿ªÆôUseCanonicalNameÀ´Ç¿ÖÆÊ¹Óþ²Ì¬SERVER_NAMEÖµ ¡£

²Î¿¼Á´½Ó£ºhttps://httpd.apache.org/docs/2.4/mod/core.html#usecanonicalname


Éù Ã÷

±¾Ç徲ͨ¸æ½öÓÃÀ´ÐÎò¿ÉÄܱ£´æµÄÇå¾²ÎÊÌâ £¬¾ÅÓÎÀÏ¸ç¿Æ¼¼²»Îª´ËÇ徲ͨ¸æÌṩÈκΰü¹Ü»òÔÊÐí ¡£ÓÉÓÚÈö²¥¡¢Ê¹ÓôËÇ徲ͨ¸æËùÌṩµÄÐÅÏ¢¶øÔì³ÉµÄÈκÎÖ±½Ó»òÕß¼ä½ÓµÄЧ¹û¼°Ëðʧ £¬¾ùÓÉʹÓÃÕß×Ô¼ºÈÏÕæ £¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÒÔ¼°Ç徲ͨ¸æ×÷Õß²»Îª´Ë¼ç¸ºÈκÎÔðÈÎ ¡£¾ÅÓÎÀÏ¸ç¿Æ¼¼ÓµÓжԴËÇ徲ͨ¸æµÄÐÞ¸ÄÏ¢ÕùÊÍȨ ¡£ÈçÓû×ªÔØ»òÈö²¥´ËÇ徲ͨ¸æ £¬±ØÐè°ü¹Ü´ËÇ徲ͨ¸æµÄÍêÕûÐÔ £¬°üÀ¨°æÈ¨ÉùÃ÷µÈËùÓÐÄÚÈÝ ¡£Î´¾­¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÊÐí £¬²»µÃí§ÒâÐ޸ĻòÕßÔö¼õ´ËÇ徲ͨ¸æÄÚÈÝ £¬²»µÃÒÔÈκη½·¨½«ÆäÓÃÓÚÉÌҵĿµÄ ¡£


?

ÄúµÄÁªÏµ·½·¨

*ÐÕÃû
*µ¥Î»Ãû³Æ
*ÁªÏµ·½·¨
*ÑéÖ¤Âë ¾ÅÓÎÀϸ硤(Öйú)¾ãÀÖ²¿¹Ù·½ÍøÕ¾
Ìá½»µ½ÓÊÏä

¹ºÖÃÈÈÏß

  • ¹ºÖÃ×Éѯ:

    400-818-6868-1

Ìá½»ÏîÄ¿ÐèÇó

½Ó´ý¼ÓÈë¾ÅÓÎÀÏ¸ç¿Æ¼¼ £¬³ÉΪÎÒÃǵÄÏàÖúͬ°é£¡
  • *ÇëÐÎòÄúµÄÐèÇó
  • *×îÖÕ¿Í»§Ãû³Æ
  • *ÏîÄ¿Ãû³Æ
  • Äú¸ÐÐËȤµÄ²úÆ·
  • ÏîĿԤËã
ÄúµÄÁªÏµ·½·¨
  • *ÐÕÃû
  • *ÁªÏµµç»°
  • *ÓÊÏä
  • *Ö°Îñ
  • *¹«Ë¾
  • *¶¼»á
  • *ÐÐÒµ
  • *ÑéÖ¤Âë ¾ÅÓÎÀϸ硤(Öйú)¾ãÀÖ²¿¹Ù·½ÍøÕ¾
  • Ìá½»µ½ÓÊÏä
¾ÅÓÎÀϸ硤(Öйú)¾ãÀÖ²¿¹Ù·½ÍøÕ¾
¾ÅÓÎÀϸ硤(Öйú)¾ãÀÖ²¿¹Ù·½ÍøÕ¾

·þÎñÖ§³Ö

ÖÇÄܿͷþ
ÖÇÄܿͷþ
¹ºÖÃ/ÊÛºóÊÖÒÕÎÊÌâ
Ã˹ܼÒ-ÊÛºó·þÎñϵͳ
Ã˹ܼÒ-ÊÛºó·þÎñϵͳ
ÔÚÏßÌáµ¥|ÖÇÄÜÎÊ´ð|֪ʶ¿â
Ö§³ÖÈÈÏß
Ö§³ÖÈÈÏß
400-818-6868
¾ÅÓÎÀÏ¸ç¿Æ¼¼ÉçÇø
¾ÅÓÎÀÏ¸ç¿Æ¼¼ÉçÇø
×ÊÁÏÏÂÔØ|ÔÚÏßÎÊ´ð|ÊÖÒÕ½»Á÷

? 2025 NSFOCUS ¾ÅÓÎÀÏ¸ç¿Æ¼¼ www.nsfocus.com All Rights Reserved . ¾©¹«Íø°²±¸ 11010802021605ºÅ ¾©ICP±¸14004349ºÅ ¾©ICPÖ¤110355ºÅ

ÍøÕ¾µØÍ¼