Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么

本篇文章为大家展示了Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么，内容简明扼要并且容易理解，绝对能使你眼前一亮，通过这篇文章的详细介绍希望你能有所收获。

第一步，搭建python环境

首先访问http://www.python.org/download/去下载windows版的python，这里下载2.7.14。

 
2.下载python2.7安装包。

安装python

点击Next

点击Next，这里可以记一下“C:\Python27\”，后面配置系统环境变量

点击“Next”

等待安装完成

点击Finish完成安装

 配置python环境变量，为PATH变量添加参数“C:\Python27\”

测试python是否安装成功，打开cmd命令输入python

执行python命令：print 'Hello World!' 

Python环境配置完毕。

第二步，使用工具测试漏洞

首先访问https://github.com/，登陆代码托管平台Github，直接搜索关键字“CVE-2017-10271”

 2.下载hanc00l/weblogic_wls_wsat_rce项目，解压至F盘（可以测试Linux版本）

 3. 查看README的内容

1. weblogic_wls_wsat_rce
   

2. Weblogic wls-wsat组件反序列化漏洞(CVE-2017-10271)利用脚本，参考https://github.com/s3xy/CVE-2017-10271修改。
   

• 命令执行并回显

• 直接上传shell

• 在linux下weblogic 10.3.6.0测试OK

1. 使用方法及参数
   

2. python weblogic_wls_wsat_exp.py -t 172.16.80.131:7001
   

3. usage: weblogic_wls_wsat_exp.py [-h] -t TARGET [-c CMD] [-o OUTPUT] [-s SHELL]
   

5. optional arguments:
   

6.   -h, --help            show this help message and exit
   

7.   -t TARGET, --target TARGET
   

8.                         weblogic ip and port(eg -> 172.16.80.131:7001)
   

9.   -c CMD, --cmd CMD     command to execute,default is "id"
   

10.   -o OUTPUT, --output OUTPUT
    

11.                         output file name,default is output.txt
    

12.   -s SHELL, --shell SHELL
    

13.                         local jsp file name to upload,and set -o xxx.jsp

 4.执行命令测试：python weblogic_wls_wsat_exp.py -t targetip:port

1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls
   

2. Traceback (most recent call last):
   

3.   File "F:\CVE-2017-10271-master\weblogic_wls_wsat_exp.py", line 3, in <module>
   

4.     import requests
   

5. ImportError: No module named requests

根据错误信息，需要安装requests模块，使用easy_install工具执行命令安装模块：C:\Python27\Scripts\easy_install.exe requests

1. F:\weblogic_wls_wsat_rce-master>C:\Python27\Scripts\easy_install.exe requests
   

2. Searching for requests
   

3. Reading https://pypi.python.org/simple/requests/
   

4. Downloading https://pypi.python.org/packages/b0/e1/eab4fc3752e3d240468a8c0b28460
   

5. 7899d2fbfb236a56b7377a329aa8d09/requests-2.18.4.tar.gz#md5=081412b2ef79bdc482298
   

6. 91af13f4d82
   

7. Best match: requests 2.18.4
   

8. Processing requests-2.18.4.tar.gz
   

9. Writing
   

11. ……
    

13. Installing chardetect-script.py script to c:\python27\Scripts
    

14. Installing chardetect.exe script to c:\python27\Scripts
    

15. Installing chardetect.exe.manifest script to c:\python27\Scripts
    

17. Installed c:\python27\lib\site-packages\chardet-3.0.4-py2.7.egg
    

18. Finished processing dependencies for requests
    

20. 再次执行命令
    

21. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.240:7002 -c ls
    

22. autodeploy
    

23. bin
    

24. config
    

25. console-ext
    

26. dev=null

显然，命令执行成功。

第三步，更新补丁修复漏洞

 在https://support.oracle.com上用关键字CVE-2017-10271搜索，找到2017年10月份的补丁文件并下载。【p26519424_1036_Generic.zip】

 执行打补丁操作（注意：不同的环境和本文的路径会有所不同）

1. cams@SCT-APP:~>cd /home/cams/bea/middleware/wlserver_10.3/server/bin/

2. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin>ls

3. international  setWLSEnv.sh  startNodeManager.sh
   

5. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> . ./setWLSEnv.sh

6. CLASSPATH=/home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/cams/bea/middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/java/jdk1.6.0_45/lib/tools.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic_sp.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/weblogic.jar:/home/cams/bea/middleware/modules/features/weblogic.server.modules_10.3.6.0.jar:/home/cams/bea/middleware/wlserver_10.3/server/lib/webservices.jar:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/home/cams/bea/middleware/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:.:/usr/java/jdk1.6.0_45/lib/dt.jar:/usr/java/jdk1.6.0_45/lib/tools.jar
   

8. PATH=/home/cams/bea/middleware/wlserver_10.3/server/bin:/home/cams/bea/middleware/modules/org.apache.ant_1.7.1/bin:/usr/java/jdk1.6.0_45/jre/bin:/usr/java/jdk1.6.0_45/bin:/usr/java/jdk1.6.0_45/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:
   

10. Your environment has been set.
    

12. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> java weblogic.version
    

14. WebLogic Server Temporary Patch for BUG22248372 Tue Nov 24 00:35:04 MST 2015
    

15. WebLogic Server 10.3.6.0.12 PSU Patch for BUG20780171 THU JUN 18 15:54:42 IST 2015
    

16. WebLogic Server 10.3.6.0  Tue Nov 15 08:52:36 PST 2011 1441050
    

18. Use 'weblogic.version -verbose' to get subsystem information
    

20. Use 'weblogic.utils.Versions' to get version information for all modules
    

21. cams@SCT-APP:~/bea/middleware/wlserver_10.3/server/bin> cd /home/cams/bea/middleware/utils/bsu
    

22. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view
    

23. ProductName: WebLogic Server
    

24. ProductVersion: 10.3 MP6
    

25. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
    

26.                    nistration Console,WebLogic Server/Configuration Wizard and
    

27.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
    

28.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
    

29.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
    

30.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
    

31.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
    

32.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code
    

33.                    Completion Support
    

34. BEAHome: /home/cams/bea/middleware
    

35. ProductHome: /home/cams/bea/middleware/wlserver_10.3
    

36. PatchSystemDir: /home/cams/bea/middleware/utils/bsu
    

37. PatchDir: /home/cams/bea/middleware/patch_wls1036
    

38. Profile: Default
    

39. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir
    

40. JavaVersion: 1.6.0_29
    

41. JavaVendor: Sun
    

44. Patch ID: EJUW
    

45. PatchContainer: EJUW.jar
    

46. Checksum: 1554039558
    

47. Severity: optional
    

48. Category: General
    

49. CR/BUG: 20780171
    

50. Restart: true
    

51. Description: WLS PATCH SET UPDATE 10.3.6.0.12
    

52. WLS PATCH SET UPDATE 10.3.
    

53.                    6.0.12
    

55. Patch ID: ZLNA
    

56. PatchContainer: ZLNA.jar
    

57. Checksum: -894774340
    

58. Severity: optional
    

59. Category: Security
    

60. CR/BUG: 22248372
    

61. Restart: true
    

62. Description: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015
    

63.                    )
    

64. WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 20
    

65.                    15)
    

68. 上传p26519424_1036_Generic.zip至DownloadDir:/home/cams/bea/middleware/utils/bsu/cache_dir路径下，并解压
    

70. cams@SCT-APP:~/bea/middleware/utils/bsu> cd cache_dir/
    

71. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> unzip p26519424_1036_Generic.zip
    

72. Archive: p26519424_1036_Generic.zip
    

73.  extracting: FMJJ.jar
    

74.   inflating: patch-catalog_25504.xml
    

75. replace README.txt? [y]es, [n]o, [A]ll, [N]one, [r]ename: r
    

76. new name: README2.txt
    

77.   inflating: README2.txt
    

78.   
    

79. 如果不知道如何打补丁，参考文章http://blog.itpub.net/31394774/viewspace-2142526/
    

80.             
    

81. cams@SCT-APP:~/bea/middleware/utils/bsu/cache_dir> cd ../

82. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
    

83. 检查冲突.....
    

84. 检测到冲突 - 解决冲突情形并重新执行补丁程序安装
    

85. 下面是冲突情形详细资料:
    

86. 补丁程序 FMJJ 与以下补丁程序互相排斥且不能共存: EJUW,ZLNA
    

89. 此时，需要将EJUW,ZLNA补丁卸载，使用-remove命令进行卸载。
    

90. 【注意：需先卸载ZLNA，后卸载EJUW】
    

92. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
    

93. 检查冲突......
    

94. 检测到冲突 - 解决冲突情形并重新执行补丁程序删除过程
    

95. 下面是冲突情形详细资料:
    

96. 必须先删除下列补丁程序, 才能删除所选补丁程序: ZLNA
    

98. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=ZLNA -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
    

99. 检查冲突.......
    

100. 未检测到冲突
     

102. 开始删除补丁程序 ID: ZLNA
     

103. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

104. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG22248372_1036.jar
     

105. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
     

106. 旧清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
     

107. 新清单值: Class-Path= ../../../patch_jars/BUG22248372_1036.jar ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
     

108. 结果: 成功
     

110. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -remove -patchlist=EJUW -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
     

111. 检查冲突.......
     

112. 未检测到冲突
     

114. 开始删除补丁程序 ID: EJUW
     

115. 删除 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar
     

116. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt
     

117. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar
     

118. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar
     

119. 删除 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/20780171-WLS-10.3.6.0.12_PSU_WebServices-ClientSide-Configuration-README.txt
     

120. 删除 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar
     

121. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

122. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

123. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

124. 还原 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

125. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

126. 还原 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

127. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

128. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils.full_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

129. 还原 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

130. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

131. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

132. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

133. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

134. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

135. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

136. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

137. 还原 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

138. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

139. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

140. 还原 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

141. 还原 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

142. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

143. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

144. 还原 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

145. 还原 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

146. 还原 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

147. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

148. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

149. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

150. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

151. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

152. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

153. 还原 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

154. 还原 /home/cams/bea/middleware/modules/com.bea.core.utils_1.10.0.0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

155. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

156. 还原 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

157. 还原 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 从 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

158. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG20780171_1036012.jar
     

159. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar
     

160. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar
     

161. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar
     

162. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar
     

163. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar
     

164. 删除 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
     

165. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
     

166. 旧清单值: Class-Path= ../../../patch_jars/BUG20780171_1036012.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
     

167. 新清单值: Class-Path=
     

168. 结果: 成功
     

170. 再次安装FMJJ补丁
     

173. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -install -patch_download_dir=/home/cams/bea/middleware/utils/bsu/cache_dir/ -patchlist=FMJJ -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -verbose
     

174. 检查冲突.....
     

175. 未检测到冲突
     

177. 开始安装补丁程序 ID: FMJJ
     

178. 安装 /home/cams/bea/middleware/utils/bsu/cache_dir/FMJJ.jar
     

179. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/BUG26519424_10360171017.jar
     

180. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar
     

181. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar
     

182. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar
     

183. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar
     

184. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxp_1.4.5.0.jar
     

185. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar
     

186. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar
     

187. 解压缩 /home/cams/bea/middleware/patch_wls1036/patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar
     

188. 更新 /home/cams/bea/middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar
     

189. 旧清单值: Class-Path=
     

190. 新清单值: Class-Path=../../../patch_jars/BUG26519424_10360171017.jar ../../../patch_jars/com.bea.core.apache.commons.fileupload_1.0.0.0_1-3-1.jar ../../../patch_jars/com.bea.core.stax2_2.0.0.0_3-0-3.jar ../../../patch_jars/glassfish.jaxb.xjc_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxb_1.2.0.0_2-1-14.jar ../../../patch_jars/glassfish.jaxp_1.4.5.0.jar ../../../patch_jars/glassfish.jaxws.mimepull_1.1.0.0_1-3-8.jar ../../../patch_jars/glassfish.jaxws.rt_1.4.0.0_2-1-5.jar ../../../patch_jars/glassfish.jaxws.saaj.impl_1.0.0.0_2-1-5.jar
     

191. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

192. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

193. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

194. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

195. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

196. 备份 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

197. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

198. 备份 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

199. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

200. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

201. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

202. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

203. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

204. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

205. 备份 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

206. 备份 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

207. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

208. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

209. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

210. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

211. 备份 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

212. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

213. 备份 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

214. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

215. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

216. 备份 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

217. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

218. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

219. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

220. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

221. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerInit.ldift
     

222. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlstestclient.ear
     

223. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-notran-adp.rar
     

224. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls-schema_10.3.6.0.jar
     

225. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-io-2.4.jar
     

226. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerInit.ldift
     

227. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/bin/wlsifconfig.sh
     

228. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/26519424-WLS-10.3.6.0.171017_PSU_WebServices-ClientSide-Configuration-README.txt
     

229. 解压缩 /home/cams/bea/middleware/wlserver_10.3/bugsfixed/WLS-PSU-bugsfixed.txt
     

230. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl_1.4.0.0.jar
     

231. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.1.0.0_1-2.jar
     

232. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/schema/weblogic-domain-binding.jar
     

233. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.io_1.0.0.0_1-4.jar
     

234. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xalan_2.7.0.jar
     

235. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_1-2-15.jar
     

236. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/webapp/WEB-INF/lib/console.jar
     

237. 解压缩 /home/cams/bea/middleware/modules/javax.jsf_1.0.0.0_2-0.jar
     

238. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.binding_1.4.0.0.jar
     

239. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jstl-1.2.war
     

240. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/templates/domains/wls.jar
     

241. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/wlst/modules/jython-modules.jar
     

242. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/consoleapp/APP-INF/lib/commons-fileupload.jar
     

243. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlthint3client.jar
     

244. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/XACMLAuthorizerUpdate_62.ldift
     

245. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.commons.collections_3.2.0.jar
     

246. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-1.2.war
     

247. 解压缩 /home/cams/bea/middleware/modules/com.oracle.cie.config-wls_7.2.0.0.jar
     

248. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlclient.jar
     

249. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.stax2_2.0.0.0_3-0-3.jar
     

250. 解压缩 /home/cams/bea/middleware/modules/glassfish.jstl_1.2.0.1.jar
     

251. 解压缩 /home/cams/bea/middleware/modules/glassfish.jsf_1.0.0.0_2-0-4.jar
     

252. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.jar
     

253. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor.wl.ja_1.4.0.0.jar
     

254. 解压缩 /home/cams/bea/middleware/wlserver_10.3/common/deployable-libraries/jsf-2.0.war
     

255. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/DefaultAuthorizerUpdate_62.ldift
     

256. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient+ssl.jar
     

257. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache.xml.serializer_2.7.0.jar
     

258. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jms-xa-adp.rar
     

259. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/jdbcdrivers.xml
     

260. 备份 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

261. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

262. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

263. 备份 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

264. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

265. 备份 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

266. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

267. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

268. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

269. 备份 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

270. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

271. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

272. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

273. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

274. 备份 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

275. 备份 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

276. 备份 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

277. 备份 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

278. 备份 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

279. 备份 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar 至 /home/cams/bea/middleware/patch_wls1036/backup/backup.jar
     

280. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp
     

281. 合并 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar52609.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.coherence.integration_1.2.0.0.jar
     

282. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp
     

283. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar22088.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wls-api.jar
     

284. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp
     

285. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar46334.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.impl_1.0.0.0_6-2-0-0.jar
     

286. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp
     

287. 合并 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar57180.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.weblogic.security.wls_1.0.0.0_6-2-0-0.jar
     

288. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp
     

289. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip61185.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wseeclient.zip
     

290. 解压缩 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp
     

291. 合并 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar30164.tmp 与 /home/cams/bea/middleware/modules/ws.databinding_1.3.0.0.jar
     

292. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp
     

293. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war61491.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/uddiexplorer.war
     

294. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp
     

295. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar25254.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/webserviceclient.jar
     

296. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp
     

297. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar35800.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsafclient.jar
     

298. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp
     

299. 合并 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar63015.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.apache_1.3.0.1.jar
     

300. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp
     

301. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar1609.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml_1.0.0.0_6-2-0-0.jar
     

302. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp
     

303. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar33270.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3client.jar
     

304. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp
     

305. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar15576.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlw-langx.jar
     

306. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp
     

307. 更新 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar29013.tmp 到 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlt3jmsclient.jar
     

308. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp
     

309. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar43506.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmxclient.jar
     

310. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp
     

311. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar43891.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wlsaft3client.jar
     

312. 解压缩 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp
     

313. 合并 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar16566.tmp 与 /home/cams/bea/middleware/modules/ws.databinding.plugins_1.3.0.0.jar
     

314. 解压缩 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp
     

315. 合并 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar32086.tmp 与 /home/cams/bea/middleware/modules/com.oracle.core.weblogic.msgcat_1.2.0.0.jar
     

316. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp
     

317. 合并 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar34414.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.bea.opensaml2_1.0.0.0_6-2-0-0.jar
     

318. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp
     

319. 合并 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar20553.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.descriptor_1.10.0.0.jar
     

320. 解压缩 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp
     

321. 合并 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar52216.tmp 与 /home/cams/bea/middleware/wlserver_10.3/server/lib/wljmsclient.jar
     

322. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp
     

323. 合并 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar55023.tmp 与 /home/cams/bea/middleware/modules/com.bea.core.common.security.saml2_1.0.0.0_6-2-0-0.jar
     

324. 解压缩 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp
     

325. 更新 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar45419.tmp 到 /home/cams/bea/middleware/modules/com.bea.core.weblogic.stax_1.11.0.0.jar
     

326. 结果: 成功

 查看最新的补丁信息

1. cams@SCT-APP:~/bea/middleware/utils/bsu> ./bsu.sh -prod_dir=/home/cams/bea/middleware/wlserver_10.3/ -status=applied -verbose -view
   

2. ProductName: WebLogic Server
   

3. ProductVersion: 10.3 MP6
   

4. Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
   

5.                    nistration Console,WebLogic Server/Configuration Wizard and
   

6.                    Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
   

7.                    r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
   

8.                     Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
   

9.                    erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
   

10.                    erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
    

11.                    ic Server/Evaluation Database,WebLogic Server/Workshop Code
    

12.                    Completion Support
    

13. BEAHome: /home/cams/bea/middleware
    

14. ProductHome: /home/cams/bea/middleware/wlserver_10.3
    

15. PatchSystemDir: /home/cams/bea/middleware/utils/bsu
    

16. PatchDir: /home/cams/bea/middleware/patch_wls1036
    

17. Profile: Default
    

18. DownloadDir: /home/cams/bea/middleware/utils/bsu/cache_dir
    

19. JavaVersion: 1.6.0_29
    

20. JavaVendor: Sun
    

23. Patch ID: FMJJ
    

24. PatchContainer: FMJJ.jar
    

25. Checksum: 591477727
    

26. Severity: optional
    

27. Category: General
    

28. CR/BUG: 26519424
    

29. Restart: true
    

30. Description: WLS PATCH SET UPDATE 10.3.6.0.171017
    

31. WLS PATCH SET UPDATE 10
    

32.                    .3.6.0.171017

第四步，使用工具复测漏洞

 启动一个weblogic域

1. cams@SCT-APP:~/bea/middleware/utils/bsu> cd /home/cams/bea/middleware/user_projects/domains/cams_wf/

2. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> nohup ./startWebLogic.sh >/dev/null 2>&1 &

3. [1] 17849
   

4. cams@SCT-APP:~/bea/middleware/user_projects/domains/cams_wf> netstat -nlp | grep 7006

5. (Not all processes could be identified, non-owned process info
   

6.  will not be shown, you would have to be root to see it all.)
   

7. tcp        0      0 10.6.3.226:7006         0.0.0.0:* LISTEN      17902/java
   

8. tcp        0      0 127.0.0.1:7006          0.0.0.0:* LISTEN      17902/java

测试RCE漏洞

1. F:\weblogic_wls_wsat_rce-master>python weblogic_wls_wsat_exp.py -t 10.6.3.226:70

2. 06 -c ls

3. [-]FAIL:404 no output

从测试返回结果“FAIL:404 no output”，显然漏洞已经修复。
3.最后，由于之前操作卸载了反序列化漏洞的补丁，还需使用测试“Java反序列化漏洞”是否存在。经过测试，反序列化漏洞也已经修复。（具体测试工具也可从Github上下载）

上述内容就是Weblogic WLS组件REC漏洞CVE-2017-10271测试与修复方案是什么，你们学到知识或技能了吗？如果还想学到更多技能或者丰富自己的知识储备，欢迎关注编程网行业资讯频道。