{"id":2131,"date":"2021-12-23T15:07:12","date_gmt":"2021-12-23T07:07:12","guid":{"rendered":"https:\/\/199604.com\/?p=2131"},"modified":"2022-01-24T11:42:13","modified_gmt":"2022-01-24T03:42:13","slug":"%e5%85%b3%e4%ba%8eapache-log4j2-rce%e6%bc%8f%e6%b4%9e%e5%90%8e%e5%87%ba%e7%8e%b0%e7%9a%84cve-2021-4104-cve-2021-45046","status":"publish","type":"post","link":"https:\/\/199604.com\/2131","title":{"rendered":"\u5173\u4e8eapache Log4j2 RCE\u6f0f\u6d1e\u540e\u51fa\u73b0\u7684CVE-2021-4104\/CVE-2021-45046"},"content":{"rendered":"

\u5173\u4e8eApache Log4j2 RCE\u6f0f\u6d1e\u540e\u51fa\u73b0\u7684CVE-2021-4104\/CVE-2021-45046<\/h1>\n

1.Apache Log4j JMSAppender\u53cd\u5e8f\u5217\u5316\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CVE-2021-4104\uff09\u4e34\u65f6\u9632\u62a4\uff1a<\/h2>\n

1.\u6ce8\u91ca\u6389\u6216\u5220\u9664 Log4j \u914d\u7f6e\u4e2d\u7684 JMSAppender\u3002<\/p>\n

2.\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\uff0c\u4ecelog4j jar\u5305\u4e2d\u5220\u9664 JMSAppender \u7c7b\u6587\u4ef6\uff1a<\/p>\n

zip -q -d log4j-*.jar org\/apache\/log4j\/net\/JMSAppender.class<\/code><\/p>\n

3.\u9650\u5236\u7cfb\u7edf\u7528\u6237\u5bf9\u5e94\u7528\u7a0b\u5e8f\u5e73\u53f0\u7684\u8bbf\u95ee\uff0c\u4ee5\u9632\u6b62\u653b\u51fb\u8005\u4fee\u6539 Log4j \u7684\u914d\u7f6e\u3002<\/p>\n

2.Apache Log4j DoS\u6f0f\u6d1e\uff08CVE-2021-45046\uff09\u4e34\u65f6\u9632\u62a4<\/h2>\n

\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\uff0c\u79fb\u9664log4j-core\u5305\u4e2d\u7684JndiLookup \u7c7b\u6587\u4ef6\uff1a<\/p>\n

zip -q -d log4j-core-*.jar org\/apache\/logging\/log4j\/core\/lookup\/JndiLookup.class<\/code><\/p>\n

\u8be6\u60c5:http:\/\/blog.nsfocus.net\/apache-log4j-3\/<\/p>\n

APACHE LOG4J\u53cd\u5e8f\u5217\u5316\u4e0eSQL\u6ce8\u5165\u6f0f\u6d1e\uff08CVE-2022-23302\/CVE-2022-23305\/CVE-2022-23307\uff09<\/h1>\n

Apache log4j JMSSink\u53cd\u5e8f\u5217\u5316\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CVE-2022-23302\uff09\u4e34\u65f6\u9632\u62a4\uff1a<\/strong><\/p>\n

1\uff09\u6ce8\u91ca\u6389\u6216\u5220\u9664 Log4j \u914d\u7f6e\u4e2d\u7684 JMSSink\u3002<\/p>\n

2\uff09\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\uff0c\u4ecelog4j jar\u5305\u4e2d\u5220\u9664 JMSSink \u7c7b\u6587\u4ef6\uff1a<\/p>\n

zip -q -d log4j-*.jar org\/apache\/log4j\/net\/JMSSink.class<\/code><\/p>\n

3\uff09\u9650\u5236\u7cfb\u7edf\u7528\u6237\u5bf9\u5e94\u7528\u7a0b\u5e8f\u5e73\u53f0\u7684\u8bbf\u95ee\uff0c\u4ee5\u9632\u6b62\u653b\u51fb\u8005\u4fee\u6539 Log4j \u7684\u914d\u7f6e\u3002<\/p>\n

\u5904\u7406\u811a\u672c:<\/p>\n

#!\/bin\/bash\nfor i in $(find \/home -name log4j-1*.jar -type f)\ndo\necho $i\ncp $i $i.bak\nzip -q -d $i org\/apache\/log4j\/net\/JMSAppender.class\nzip -q -d $i org\/apache\/log4j\/net\/JMSSink.class\ndone\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u5173\u4e8eApache Log4j2 RCE\u6f0f\u6d1e\u540e\u51fa\u73b0\u7684CVE-2021-4104\/CVE-2021-45046 1 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[292],"tags":[359,129],"class_list":["post-2131","post","type-post","status-publish","format-standard","hentry","category-java","tag-apache","tag-java"],"_links":{"self":[{"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/posts\/2131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/comments?post=2131"}],"version-history":[{"count":2,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/posts\/2131\/revisions"}],"predecessor-version":[{"id":2172,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/posts\/2131\/revisions\/2172"}],"wp:attachment":[{"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/media?parent=2131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/categories?post=2131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/199604.com\/wp-json\/wp\/v2\/tags?post=2131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}