行业资讯

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么

发布时间：2021-12-29 19:17:01 作者：柒染
来源：亿速云 阅读：137

本篇文章为大家展示了Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么，内容简明扼要并且容易理解，绝对能使你眼前一亮，通过这篇文章的详细介绍希望你能有所收获。

第一步，搭建python环境

1.首先访问http://www.python.org/download/去下载windows版的python，这里下载2.7.14。

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 
2.下载python2.7安装包。

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么

3.安装python

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

点击Next

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

点击Next，这里可以记一下“C:\Python27\”，后面配置系统环境变量

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

点击“Next”

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

等待安装完成

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么

点击Finish完成安装

4. 配置python环境变量，为PATH变量添加参数“C:\Python27\”

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

5.测试python是否安装成功，打开cmd命令输入python

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

执行python命令：print 'Hello World!' 

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 

Python环境配置完毕。

第二步，使用工具测试漏洞

1.首先访问https://github.com/，登陆代码托管平台Github，直接搜索关键字“CVE-2017-10271”

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 2.下载hanc00l/weblogic_wls_wsat_rce项目，解压至F盘（可以测试Linux版本）

Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么 3. 查看README的内容

  1. weblogic_wls_wsat_rce

  2. Weblogic wls-wsat组件反序列化漏洞(CVE-2017-10271)利用脚本，参考https://github.com/s3xy/CVE-2017-10271修改。

  1. 使用方法及参数

  2. python weblogic_wls_wsat_exp.py -t 172.16.80.131:7001

  3. usage: weblogic_wls_wsat_exp.py [-h] -t TARGET [-c CMD] [-o OUTPUT] [-s SHELL]


  5. optional arguments:

  6.   -h, --help            show this help message and exit

  7.   -t TARGET, --target TARGET

  8.                         weblogic ip and port(eg -> 172.16.80.131:7001)

  9.   -c CMD, --cmd CMD     command to execute,default is "id"

  10.   -o OUTPUT, --output OUTPUT

  11.                         output file name,default is output.txt

  12.   -s SHELL, --shell SHELL

  13.                         local jsp file name to upload,and set -o xxx.jsp

 4.执行命令测试：python weblogic_wls_wsat_exp.py -t targetip:port

  1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls

  2. Traceback (most recent call last):

  3.   File "F:\CVE-2017-10271-master\weblogic_wls_wsat_exp.py", line 3, in <module>

  4.     import requests

  5. ImportError: No module named requests

根据错误信息，需要安装requests模块，使用easy_install工具执行命令安装模块：C:\Python27\Scripts\easy_install.exe requests

  1. F:\weblogic_wls_wsat_rce-master>C:\Python27\Scripts\easy_install.exe requests

  2. Searching for requests

  3. Reading https://pypi.python.org/simple/requests/

  4. Downloading https://pypi.python.org/packages/b0/e1/eab4fc3752e3d240468a8c0b28460

  5. 7899d2fbfb236a56b7377a329aa8d09/requests-2.18.4.tar.gz#md5=081412b2ef79bdc482298

  6. 91af13f4d82

  7. Best match: requests 2.18.4

  8. Processing requests-2.18.4.tar.gz

  9. Writing


  11. ……


  13. Installing chardetect-script.py script to c:\python27\Scripts

  14. Installing chardetect.exe script to c:\python27\Scripts

  15. Installing chardetect.exe.manifest script to c:\python27\Scripts


  17. Installed c:\python27\lib\site-packages\chardet-3.0.4-py2.7.egg

  18. Finished processing dependencies for requests


  20. 再次执行命令

  21. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls

  22. autodeploy

  23. bin

  24. config

  25. console-ext

  26. dev=null

显然，命令执行成功。

第三步，更新补丁修复漏洞

1. 在https://support.oracle.com上用关键字CVE-2017-10271搜索，找到2017年10月份的补丁文件并下载。【p26519424_1036_Generic.zip】

2. 执行打补丁操作（注意：不同的环境和本文的路径会有所不同）

  1. cams@SCT-APP:~>cd /home/cams/bea/middleware/wlserver_10.3/server/bin/

  2. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin>ls

  3. international  setWLSEnv.sh  startNodeManager.sh


  5. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> . ./setWLSEnv.sh

  6. CLASSPATH=/home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/cams/bea/middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/java/jdk1.6.0_45/lib/tools.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic_sp.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic.jar:/home/cams/bea/middleware/modules/features/weblogic.server.modules_10.3.6.0.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/webservices.jar:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/home/cams/bea/middleware/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:.:/usr/java/jdk1.6.0_45/lib/dt.jar:/usr/java/jdk1.6.0_45/lib/tools.jar


  8. PATH=/home/cams/bea/middleware/wlserver_10.3/server/bin:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/bin:/usr/java/jdk1.6.0_45/jre/bin:/usr/java/jdk1.6.0_45/bin:/usr/java/jdk1.6.0_45/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:


  10. Your environment has been set.


  12. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> java weblogic.version


  14. WebLogic Server Temporary Patch for BUG22248372 Tue Nov 24 00:35:04 MST 2015

  15. WebLogic Server 10.3.6.0.12 PSU Patch for BUG20780171 THU JUN 18 15:54:42 IST 2015

  16. WebLogic Server 10.3.6.0  Tue Nov 15 08:52:36 PST 2011 1441050


  18. Use 'weblogic.version -verbose' to get subsystem information


  20. Use 'weblogic.utils.Versions' to get version information for all modules

  21. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> cd /home/cams/bea/middleware/utils/bsu

  22. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view

  23. ProductName: WebLogic Server

  24. ProductVersion: 10.3 MP6

  25. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi

  26.                    nistration Console,WebLogic Server/Configuration Wizard and

  27.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve

  28.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC

  29.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S

  30.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S

  31.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog

  32.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code

  33.                    Completion Support

  34. BEAHome: /home/cams/bea/middleware

  35. ProductHome: /home/cams/bea/middleware/wlserver_10.3

  36. PatchSystemDir: /home/cams/bea/middleware/utils/bsu

  37. PatchDir: /home/cams/bea/middleware/patch_wls1036

  38. Profile: Default

  39. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir

  40. JavaVersion: 1.6.0_29

  41. JavaVendor: Sun



  44. Patch ID: EJUW

  45. PatchContainer: EJUW.jar

  46. Checksum: 1554039558

  47. Severity: optional

  48. Category: General

  49. CR/BUG: 20780171

  50. Restart: true

  51. Description: WLS PATCH SET UPDATE 10.3.6.0.12

  52. WLS PATCH SET UPDATE 10.3.

  53.                    6.0.12


  55. Patch ID: ZLNA

  56. PatchContainer: ZLNA.jar

  57. Checksum: -894774340

  58. Severity: optional

  59. Category: Security

  60. CR/BUG: 22248372

  61. Restart: true

  62. Description: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015

  63.                    )

  64. WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 20

  65.                    15)



  68. 上传p26519424_1036_Generic.zip至DownloadDir:/home/cams/bea/middleware/utils/bsu/cache_dir路径下，并解压


  70. cams@SCT-APP:~/bea/middleware/utils/bsu> cd cache_dir/

  71. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> unzip p26519424_1036_Generic.zip

  72. Archive: p26519424_1036_Generic.zip

  73.  extracting: FMJJ.jar

  74.   inflating: patch-catalog_25504.xml

  75. replace README.txt? [y]es, [n]o, [A]ll, [N]one, [r]ename: r

  76. new name: README2.txt

  77.   inflating: README2.txt

  78.   

  79. 如果不知道如何打补丁，参考文章http://blog.itpub.net/31394774/viewspace-2142526/

  80.             

  81. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> cd ../

  82. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose

  83. 检查冲突.....

  84. 检测到冲突 - 解决冲突情形并重新执行补丁程序安装

  85. 下面是冲突情形详细资料:

  86. 补丁程序 FMJJ 与以下补丁程序互相排斥且不能共存: EJUW,ZLNA



  89. 此时，需要将EJUW,ZLNA补丁卸载，使用-remove命令进行卸载。

  90. 【注意：需先卸载ZLNA，后卸载EJUW】


  92. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose

  93. 检查冲突......

  94. 检测到冲突 - 解决冲突情形并重新执行补丁程序删除过程

  95. 下面是冲突情形详细资料:

  96. 必须先删除下列补丁程序, 才能删除所选补丁程序: ZLNA


  98. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=ZLNA -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose

  99. 检查冲突.......

  100. 未检测到冲突


  102. 开始删除补丁程序 ID: ZLNA

  103. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  104. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG22248372_1036.jar

  105. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar

  106. 旧清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar

  107. 新清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar

  108. 结果: 成功


  110. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose

  111. 检查冲突.......

  112. 未检测到冲突


  114. 开始删除补丁程序 ID: EJUW

  115. 删除 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar

  116. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt

  117. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar

  118. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar

  119. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/20780171-WLS-10.3.6.0.12_PSU_WebServices-ClientSide-Configuration-README.txt

  120. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar

  121. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  122. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  123. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  124. 还原 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  125. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  126. 还原 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  127. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  128. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils.full_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  129. 还原 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  130. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  131. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  132. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  133. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  134. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  135. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  136. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  137. 还原 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  138. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  139. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  140. 还原 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  141. 还原 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  142. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  143. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  144. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  145. 还原 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  146. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  147. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  148. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  149. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  150. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  151. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  152. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  153. 还原 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  154. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  155. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  156. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  157. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  158. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG20780171_1036012.jar

  159. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar

  160. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar

  161. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar

  162. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar

  163. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar

  164. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar

  165. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar

  166. 旧清单值: Class-Path= ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar

  167. 新清单值: Class-Path=

  168. 结果: 成功


  170. 再次安装FMJJ补丁



  173. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose

  174. 检查冲突.....

  175. 未检测到冲突


  177. 开始安装补丁程序 ID: FMJJ

  178. 安装 /home/cams/bea/middleware/utils/bsu/cache_dir/FMJJ.jar

  179. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG26519424_10360171017.jar

  180. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar

  181. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar

  182. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar

  183. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar

  184. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar

  185. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar

  186. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar

  187. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar

  188. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar

  189. 旧清单值: Class-Path=

  190. 新清单值: Class-Path=../../../patch_jars/BUG26519424_10360171017.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar ../../../patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar ../../../patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar

  191. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  192. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  193. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  194. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  195. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  196. 备份 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  197. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  198. 备份 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  199. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  200. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  201. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  202. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  203. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  204. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  205. 备份 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  206. 备份 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  207. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  208. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  209. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  210. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  211. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  212. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  213. 备份 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  214. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  215. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  216. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  217. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  218. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  219. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  220. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  221. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift

  222. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear

  223. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar

  224. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar

  225. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar

  226. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift

  227. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh

  228. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/26519424-WLS-10.3.6.0.171017_PSU_WebServices-ClientSide-Configuration-README.txt

  229. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt

  230. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar

  231. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar

  232. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar

  233. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar

  234. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar

  235. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_1-2-15.jar

  236. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar

  237. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.0.0.0_2-0.jar

  238. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar

  239. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war

  240. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar

  241. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar

  242. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar

  243. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar

  244. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerUpdate_62.ldift

  245. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar

  246. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war

  247. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar

  248. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar

  249. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.stax2_2.0.0.0_3-0-3.jar

  250. 解压缩 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar

  251. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_2-0-4.jar

  252. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar

  253. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar

  254. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war

  255. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerUpdate_62.ldift

  256. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar

  257. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar

  258. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar

  259. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml

  260. 备份 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  261. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  262. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  263. 备份 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  264. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  265. 备份 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  266. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  267. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  268. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  269. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  270. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  271. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  272. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  273. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  274. 备份 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  275. 备份 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  276. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  277. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  278. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  279. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar

  280. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp

  281. 合并 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar

  282. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp

  283. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar

  284. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp

  285. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar

  286. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp

  287. 合并 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar

  288. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp

  289. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip

  290. 解压缩 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp

  291. 合并 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp 与 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar

  292. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp

  293. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war

  294. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp

  295. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar

  296. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp

  297. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar

  298. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp

  299. 合并 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar

  300. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp

  301. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar

  302. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp

  303. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar

  304. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp

  305. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar

  306. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp

  307. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar

  308. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp

  309. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar

  310. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp

  311. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar

  312. 解压缩 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp

  313. 合并 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp 与 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar

  314. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp

  315. 合并 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar

  316. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp

  317. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar

  318. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp

  319. 合并 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar

  320. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp

  321. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar

  322. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp

  323. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar

  324. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp

  325. 更新 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp 到 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar

  326. 结果: 成功

3. 查看最新的补丁信息

  1. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view

  2. ProductName: WebLogic Server

  3. ProductVersion: 10.3 MP6

  4. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi

  5.                    nistration Console,WebLogic Server/Configuration Wizard and

  6.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve

  7.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC

  8.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S

  9.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S

  10.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog

  11.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code

  12.                    Completion Support

  13. BEAHome: /home/cams/bea/middleware

  14. ProductHome: /home/cams/bea/middleware/wlserver_10.3

  15. PatchSystemDir: /home/cams/bea/middleware/utils/bsu

  16. PatchDir: /home/cams/bea/middleware/patch_wls1036

  17. Profile: Default

  18. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir

  19. JavaVersion: 1.6.0_29

  20. JavaVendor: Sun



  23. Patch ID: FMJJ

  24. PatchContainer: FMJJ.jar

  25. Checksum: 591477727

  26. Severity: optional

  27. Category: General

  28. CR/BUG: 26519424

  29. Restart: true

  30. Description: WLS PATCH SET UPDATE 10.3.6.0.171017

  31. WLS PATCH SET UPDATE 10

  32.                    .3.6.0.171017

第四步，使用工具复测漏洞

1. 启动一个weblogic域

  1. cams@SCT-APP:~/bea/middleware/utils/bsu> cd /home/cams/bea/middleware/user_projects/domains/cams_wf/

  2. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> nohup ./startWebLogic.sh >/dev/null 2>&1 &

  3. [1] 17849

  4. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> netstat -nlp | grep 7006

  5. (Not all processes could be identified, non-owned process info

  6.  will not be shown, you would have to be root to see it all.)

  7. tcp        0      0 10.6.3.226:7006         0.0.0.0:* LISTEN      17902/java

  8. tcp        0      0 127.0.0.1:7006          0.0.0.0:* LISTEN      17902/java

2.测试RCE漏洞

  1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.226:70

  2. 06 -c ls

  3. [-]FAIL:404 no output

从测试返回结果“FAIL:404 no output”，显然漏洞已经修复。
3.最后，由于之前操作卸载了反序列化漏洞的补丁，还需使用测试“Java反序列化漏洞”是否存在。经过测试，反序列化漏洞也已经修复。（具体测试工具也可从Github上下载）

上述内容就是Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么，你们学到知识或技能了吗？如果还想学到更多技能或者丰富自己的知识储备，欢迎关注亿速云行业资讯频道。

推荐阅读：
  1. 怎么实现WebLogic RCECVE-2019-2725漏洞分析
  2. 怎么捡漏weblogic及反馈给weblogic补丁

免责声明：本站发布的内容（图片、视频和文字）以原创、转载和分享为主，文章观点不代表本网站立场，如果涉及侵权请联系站长邮箱：is@yisu.com进行举报，并提供相关证据，一经查实，将立刻删除涉嫌侵权内容。

weblogic wls

上一篇：怎么实现WebLogic RCECVE-2019-2725漏洞分析

下一篇：git config RCE CVE-2019-11229的示例分析

相关阅读

您好，登录后才能下订单哦！

密码登录
登录注册
获取短信验证码
其他方式登录
点击 登录注册 即表示同意《亿速云用户服务条款》
产品服务
地区划分
帮助支持
关于我们
行业资讯-文章归档 问答-问答归档
广州亿速云计算有限公司

7*24小时在线电话：400-100-2938

7*24小时在线QQ：800811969

Copyright © Yisu Cloud Ltd. All Rights Reserved. 2018 版权所有
粤ICP备17096448号-1 粤公网安备 44010402001142号