search

jas502n / CVE-2020-5902

CVE-2020-5902 BIG-IP
372 stars 112 forks source link

There was a problem during command execution #1

Open BeckGeGe opened 4 years ago

BeckGeGe commented 4 years ago

In execution /tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin appear {"error":"","output":""} Reading files and uploading files are successful. Only executing commands will not work. Why is this?

屏幕快照 2020-07-06 下午2 30 19

Tig3rHu commented 4 years ago

我和楼上的情况是一样的

fengwenhua commented 4 years ago

我也是同样的情况, BIGIP-15.1.0-0.0.31和BIGIP-14.1.2.5-0.0.3都不行!

Tig3rHu commented 4 years ago

我现在执行命令。拿到shell了

------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 6:16 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

fengwenhua commented 4 years ago

我现在执行命令。拿到shell了 … ------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 6:16 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

咋做到的?

Tig3rHu commented 4 years ago

1.首先创建执行命令的权限

  1. 然后向一个文件写要执行的命令
  2. 执行命令
  3. 关闭执行命令的权限

------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 6:45 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

fengwenhua commented 4 years ago

1.首先创建执行命令的权限 2. 然后向一个文件写要执行的命令 3. 执行命令 4. 关闭执行命令的权限 … ------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 6:45 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

有点玄学的是, 我成功了一次, 重启了虚拟机, 又不行了!!

Tig3rHu commented 4 years ago

你是在本地测试的吗

------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 7:35 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

bugj commented 4 years ago

1.首先创建执行命令的权限 2. 然后向一个文件写要执行的命令 3. 执行命令 4. 关闭执行命令的权限 … ------------------ Original ------------------ From: 冯文华 <notifications@github.com> Date: Mon,Jul 6,2020 6:45 PM To: jas502n/CVE-2020-5902 <CVE-2020-5902@noreply.github.com> Cc: tigerOrtiger <1161629782@qq.com>, Comment <comment@noreply.github.com> Subject: Re: [jas502n/CVE-2020-5902] There was a problem during command execution (#1)

请问这四部是在cmd后面分别输入吗

fengwenhua commented 4 years ago

稳了, 测试之前, 记得登录 web 即可!

BeckGeGe commented 4 years ago

稳了, 测试之前, 记得登录 web 即可!

Why log in to the web

junero88 commented 2 years ago

@tigerOrtiger @fengwenhua @BeckGeGe @bugj Anyone fixed this problem? How do I assign permissions to the command?