<div id="readability-page-1" class="page"><div id="mArticle">
				<h2 id="dkBody">티스토리 뷰</h2>
				
				<div>[CVE&nbsp;취약점]&nbsp;OFBIZ_CVE_2020_9496,&nbsp;OFBiz_CVE_2021_26295&nbsp;설명

<a href="https://github.com/yuaneuro/ofbiz-poc">GitHub - yuaneuro/ofbiz-poc: CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp</a>
<figure id="og_1676512505661" contenteditable="false" data-ke-type="opengraph" data-ke-align="alignCenter" data-og-type="object" data-og-title="GitHub - yuaneuro/ofbiz-poc: CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp" data-og-description="CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp. Contribute to yuaneuro/ofbiz-poc development by creating an account on GitHub." data-og-host="github.com" data-og-source-url="https://github.com/yuaneuro/ofbiz-poc" data-og-url="https://github.com/yuaneuro/ofbiz-poc" data-og-image="https://scrap.kakaocdn.net/dn/G19m4/hyRD3X4PCT/ZdvGRaPkryFr3KUaHG4EE1/img.png?width=1200&amp;height=600&amp;face=0_0_1200_600"><a href="https://github.com/yuaneuro/ofbiz-poc" target="_blank" rel="noopener" data-source-url="https://github.com/yuaneuro/ofbiz-poc">

<div>
GitHub - yuaneuro/ofbiz-poc: CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp
CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp. Contribute to yuaneuro/ofbiz-poc development by creating an account on GitHub.
github.com
</div>
</a><img src="https://scrap.kakaocdn.net/dn/G19m4/hyRD3X4PCT/ZdvGRaPkryFr3KUaHG4EE1/img.png?width=1200&amp;height=600&amp;face=0_0_1200_600"></figure>
<div data-ke-size="size14">취약점 설명 Apache&nbsp;OFBiz는&nbsp;기업용&nbsp;응용&nbsp;프로그램을&nbsp;제공하는&nbsp;오픈&nbsp;소스&nbsp;엔터프라이즈&nbsp;리소스&nbsp;플래닝(ERP)&nbsp;시스템이다.&nbsp;Apache&nbsp;OFBiz는&nbsp;CVE-2020-9496&nbsp;및&nbsp;CVE-2021-26295의&nbsp;두&nbsp;가지&nbsp;보안&nbsp;취약점에&nbsp;취약한&nbsp;것으로&nbsp;확인되었습니다. 공격자가&nbsp;이러한&nbsp;취약점을&nbsp;성공적으로&nbsp;이용하면&nbsp;중요한&nbsp;데이터에&nbsp;대한&nbsp;무단&nbsp;액세스&nbsp;권한을&nbsp;얻거나,&nbsp;시스템의&nbsp;가용성을&nbsp;손상시키거나,&nbsp;영향을&nbsp;받는&nbsp;시스템에서&nbsp;임의&nbsp;코드를&nbsp;실행할&nbsp;수&nbsp;있습니다.&nbsp;영향을&nbsp;받는&nbsp;시스템이&nbsp;중요한&nbsp;데이터를&nbsp;저장하는&nbsp;데&nbsp;사용되거나&nbsp;중요한&nbsp;인프라의&nbsp;일부인&nbsp;경우&nbsp;이러한&nbsp;취약점을&nbsp;악용하면&nbsp;심각한&nbsp;결과를&nbsp;초래할&nbsp;수&nbsp;있습니다. OFBIZ_CVE_2020_9496: 이는&nbsp;Apache&nbsp;OFBiz&nbsp;17.12.01&nbsp;이전&nbsp;버전의&nbsp;공격&nbsp;취약점입니다.&nbsp;이&nbsp;취약점을&nbsp;통해&nbsp;인증되지&nbsp;않은&nbsp;공격자가&nbsp;원격으로&nbsp;코드를&nbsp;실행할&nbsp;수&nbsp;있습니다.&nbsp;이&nbsp;취약점은&nbsp;CVSS&nbsp;점수&nbsp;9.8(10점&nbsp;만점)로&nbsp;중요한&nbsp;것으로&nbsp;평가됩니다.&nbsp;이&nbsp;취약점에&nbsp;대한&nbsp;패치는&nbsp;OFBiz&nbsp;버전&nbsp;17.12.01&nbsp;이상의&nbsp;릴리스에&nbsp;포함되어&nbsp;있습니다.&nbsp;따라서&nbsp;이&nbsp;취약점의&nbsp;악용을&nbsp;방지하려면&nbsp;사용자가&nbsp;최신&nbsp;버전의&nbsp;OFBiz로&nbsp;업그레이드하는&nbsp;것이&nbsp;좋습니다. OFBIZ_CVE_2021_26295: 이는&nbsp;Apache&nbsp;OFBiz&nbsp;17.12.01&nbsp;이전&nbsp;버전의&nbsp;XSS(사이트&nbsp;간&nbsp;스크립팅)&nbsp;취약점입니다.&nbsp;이&nbsp;취약점을&nbsp;통해&nbsp;인증되지&nbsp;않은&nbsp;공격자는&nbsp;공격&nbsp;대상자의&nbsp;세션을&nbsp;가로채고&nbsp;CSRF&nbsp;공격을&nbsp;수행할&nbsp;수&nbsp;있습니다.&nbsp;이&nbsp;취약점은&nbsp;CVSS&nbsp;점수가&nbsp;5.3(10점&nbsp;만점)으로&nbsp;중간&nbsp;정도로&nbsp;평가됩니다.&nbsp;이&nbsp;취약점에&nbsp;대한&nbsp;패치는&nbsp;OFBiz&nbsp;버전&nbsp;17.12.01&nbsp;이상의&nbsp;릴리스에&nbsp;포함되어&nbsp;있습니다.&nbsp;따라서&nbsp;이&nbsp;취약점의&nbsp;악용을&nbsp;방지하려면&nbsp;사용자가&nbsp;최신&nbsp;버전의&nbsp;OFBiz로&nbsp;업그레이드하는&nbsp;것이&nbsp;좋습니다. 요약하면&nbsp;두&nbsp;가지&nbsp;취약점&nbsp;모두&nbsp;심각하며&nbsp;공격자가&nbsp;시스템을&nbsp;공격할&nbsp;수&nbsp;있습니다.&nbsp;Apache&nbsp;OFBIZ&nbsp;사용자는&nbsp;이러한&nbsp;취약점과&nbsp;관련된&nbsp;위험을&nbsp;완화하기&nbsp;위해&nbsp;최신&nbsp;패치&nbsp;및&nbsp;업그레이드를&nbsp;설치했는지&nbsp;확인해야&nbsp;합니다 Poc&nbsp; OFBiz_CVE_2021_26295.py&nbsp; ㄴ CVE_2021_26295(target_url) ㄴ&nbsp;CVE_2021_26295_shell(target_url,&nbsp;cmd) CVE_2021_26295(target_url) 대상&nbsp;URL에서&nbsp;선행/후행&nbsp;공백을&nbsp;제거 요청&nbsp;패키지에서&nbsp;disable_warnings()&nbsp;함수를&nbsp;사용하여&nbsp;SSL&nbsp;확인&nbsp;경고를&nbsp;사용하지&nbsp;않도록&nbsp;설정 Content-Type&nbsp;헤더를&nbsp;application/xml로&nbsp;설정 하위&nbsp;프로세스&nbsp;패키지를&nbsp;사용하여&nbsp;URLDNS&nbsp;가젯과&nbsp;DNS&nbsp;로그&nbsp;URL을&nbsp;페이로드로&nbsp;사용하여&nbsp;yoserial.jar&nbsp;도구를&nbsp;실행 SOAP&nbsp;요청이&nbsp;처리될&nbsp;때&nbsp;지정된&nbsp;URL로&nbsp;DNS&nbsp;조회를&nbsp;트리거하는&nbsp;16진수&nbsp;인코딩&nbsp;페이로드&nbsp;생성 16진수&nbsp;인코딩&nbsp;페이로드와&nbsp;clearAllEntityCache&nbsp;액션으로&nbsp;SOAP&nbsp;요청을&nbsp;구성 취약점&nbsp;URL은&nbsp;대상&nbsp;URL(대상&nbsp;URL이&nbsp;해당&nbsp;URL로&nbsp;시작하지&nbsp;않는&nbsp;경우&nbsp;https://&nbsp;추가)&nbsp;및&nbsp;SOAP&nbsp;서비스&nbsp;끝점을&nbsp;기반으로&nbsp;결정 requests.post&nbsp;syslog&nbsp;함수를&nbsp;사용하여&nbsp;SOAP&nbsp;요청을&nbsp;취약점&nbsp;URL로&nbsp;전송 HTTP&nbsp;응답&nbsp;상태&nbsp;코드가&nbsp;200이면&nbsp;2초&nbsp;동안&nbsp;기다린&nbsp;다음&nbsp;DNS&nbsp;로그를&nbsp;확인하여&nbsp;DNS&nbsp;조회가&nbsp;성공했는지&nbsp;확인 DNS 조회가 성공하면 대상 URL이 취약하다는 메시지가 표시됩니다. 그렇지 않으면 공격이 실패했음을 나타내는 메시지가 출력CVE_2021_26295_shell(target_url,&nbsp;cmd)요청&nbsp;패키지에서&nbsp;disable_warnings()&nbsp;함수를&nbsp;사용하여&nbsp;SSL&nbsp;확인&nbsp;경고를&nbsp;사용하지&nbsp;않도록&nbsp;설정 Content-Type&nbsp;헤더를&nbsp;application/xml로&nbsp;설정 하위&nbsp;프로세스&nbsp;패키지를&nbsp;사용하여&nbsp;ROME&nbsp;가젯과&nbsp;명령어를&nbsp;페이로드로&nbsp;사용하여&nbsp;yoserial.jar&nbsp;도구를&nbsp;실행 SOAP&nbsp;요청이&nbsp;처리될&nbsp;때&nbsp;지정된&nbsp;명령을&nbsp;실행하는&nbsp;16진수&nbsp;인코딩&nbsp;페이로드가&nbsp;생성 16진수&nbsp;인코딩&nbsp;페이로드와&nbsp;clearAllEntityCache&nbsp;액션으로&nbsp;SOAP&nbsp;요청을&nbsp;구성 취약점&nbsp;URL은&nbsp;대상&nbsp;URL(대상&nbsp;URL이&nbsp;해당&nbsp;URL로&nbsp;시작하지&nbsp;않는&nbsp;경우&nbsp;https://&nbsp;추가)&nbsp;및&nbsp;SOAP&nbsp;서비스&nbsp;끝점을&nbsp;기반으로&nbsp;결정 requests.post&nbsp;syslog&nbsp;함수를&nbsp;사용하여&nbsp;SOAP&nbsp;요청을&nbsp;취약점&nbsp;URL로&nbsp;전송 HTTP&nbsp;응답&nbsp;상태&nbsp;코드가&nbsp;200이면&nbsp;2초간&nbsp;기다린&nbsp;후&nbsp;명령이&nbsp;성공적으로&nbsp;실행되었음을&nbsp;나타내는&nbsp;메시지를&nbsp;출력 HTTP&nbsp;응답&nbsp;상태&nbsp;코드가&nbsp;200이&nbsp;아니면&nbsp;공격이&nbsp;실패했음을&nbsp;나타내는&nbsp;메시지가&nbsp;출력 요약하면&nbsp;이&nbsp;PoC는&nbsp;DNS&nbsp;조회를&nbsp;제어된&nbsp;도메인으로&nbsp;트리거하는&nbsp;특수하게&nbsp;조작된&nbsp;SOAP&nbsp;요청을&nbsp;전송하여&nbsp;공격자가&nbsp;대상&nbsp;서버에서&nbsp;임의&nbsp;코드를&nbsp;실행할&nbsp;수&nbsp;있도록&nbsp;하여&nbsp;Apache&nbsp;OFBIz&nbsp;취약점을&nbsp;이용합니다.&nbsp;원격&nbsp;코드&nbsp;실행을&nbsp;얻고&nbsp;취약한&nbsp;서버를&nbsp;차지하는&nbsp;데&nbsp;사용할&nbsp;수&nbsp;있습니다.</div></div>
				


				
			</div></div>

정짱의 작은 도서관

[CVE 취약점] OFBIZ_CVE_2020_9496, OFBiz_CVE_2021_26295 설명 GitHub - yuaneuro/ofbiz-poc: CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp GitHub - yuaneuro/ofbiz-poc: CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp CVE-2020-9496和CVE-2021-26295利用dnslog批量验证..

[CVE 취약점] Apache OFBIZ 취약점 (OFBIZ CVE-2020-9496, OFBiz CVE-2021-26295)

댓글