��ڵ��Dvbbs 7.1 Sp1�Ĳ��⣬��ͼ��

�� ߣ�ϸ�� ʱ�䣺2006-10-09 | ��壺�� С��

[��]��һ��̳ר��Ŀ�ԡ��ڡ��ܶ��˲��ԣ�ʼ��ڻ��DVBBS��İ�ȫ��⣬��ôDVBBS��û�а�ȫ��أ��ǣ��У��Ϊ˭Ҳ��ұ�֤�Լ��ĳ��Զ�ٷ�֮�ٵİ�ȫ��Ǵ��Է��ģ�DVBBS��ٵ�...

��һ��̳ר��Ŀ�ԡ��ڡ��ܶ��˲��ԣ�ʼ��ڻ��DVBBS��İ�ȫ��⣬��ôDVBBS��û�а�ȫ��أ��ǣ��У��Ϊ˭Ҳ��ұ�֤�Լ��ĳ��Զ�ٷ�֮�ٵİ�ȫ��Ǵ��Է��ģ�DVBBS��ٵ�ĿǰΪֹ��û��µ�©��֣��˿��˵��ĿǰΪֹ��Ǿ��԰�ȫ�ģ��˸�λ��̺�ԩ��ڵĸ��뻹��ԭ��ɡ�

��Ҿ��Ҹ��˵��˽�˵һ����DVBBS��ڵĹ��̣�ϣ��Դ��Լ��߷��ʶ��û��ͼƬ˵��һ��ǲ��˵��̫��ף��С��«��ưȥ��ˣ��Ҫ��ͼʵ��鷳��Ѿ��ܲ��ˡ�

Ŀǰ��ﱻ�ڵľ��ѱ��ڴ��Ŷ��ǻ��㣬һ��ͨ��ȡ��̨�ʺ��ǰ̨�ϴ�ͼƬ��ľ��Ȼ��ͨ��̨��ݷ�ʽת��.asp�Ļ�ľ��ڶ��ַ�ʽһ��ڿ�վ��ˣ��һ��Ƿ��Щ��ȫ��ĳ��Ŀռ����λ��ȫ��ʩ�޹ء�

��˵��һ�֣�ͨ��ȡ��̨�ʺ��ǰ̨�ϴ�ͼƬ��ľ��Ȼ��ͨ��̨��ݷ�ʽת��.asp�Ļ�ľ��

��ַ�ʽ��ؼ��ĵ�Ȼ��õ��̨��Ա�ʺ��ˣ��Ҳû��ʲôֱ�ӵİ취��DVBBS��Ա��̨��룬��ʵ�ڵͱ��˲µ��̨��ˣ��һ��Ϊ�ܶ�վ��û��dvbbs7.mdb��Ĭ��ݿ��ļ��˺��׾�ͨ��http//www.*****.com/data/dvbbs7.mdb��ص��ݿ⡣

�ǵ��ݿ��ڶ��ͨ��õ��ݿ��ˣ��Ҷ�֪��DVBBS7��붼��16λMD5��ܵģ�ʵ��õ��Ҳû�ã��֪��ʲô��ַ��һ�ǰ�16λMD5��ܵ��ͨ��½⣬��Щ��ó�Ϊ��֣��ĸ��ʲô�Լ��գ�Ů��յļһ��͵�ù�ˣ��6λ8λ�ģ��и�ר�Ų½��վ��ֻҪ��Ӿ��ʵ��룬��ʹ��ͨ��½�Ҳ��˶��ʱ�䣻�ڶ��ַ��ͨ��ݿ��־�ļ��ˣ�ͨ��ܶ�վ��ϰ��̳��־�ļ��̳��޸��֮��ô��޸��Ĺ��Ҳ�ͱ��̳ԭԭ��ļ�¼��־��¼�ˣ��ļ�¼��ԭʼ��룺admin888�Լ��ĳɵ��ݣ��ֻҪ��ݿ��Dv_log��а��pass�ؼ��ֽ��м��ܺ��ҵ��̳�ĺ�̨�ʺ��ˡ�

�Ǻǣ�ֻҪ�õ��̨��½�ʺ��룬��ôDVBBS�͵��ڱ��ˣ��Ϊ��Ҫ�ϴ�ľ��ʵ��̫��ˡ��ܶ��Ҳ��Ϊ��У�Dvbbs 7.1 Sp1��޲��ͨ��ݷ�ʽ�ϴ�ľ��©��.mdb�ļ��κ�α��ļ��޷��б��ݻ��߻ָ��ǵģ��һ��ȷʵDvbbs 7.1SP1�Ѿ��޲��Ȼ�з��ƹ��֤��

��Ѿ�˵��°�DVBBS��ǿ��֤��ֻ��.mdb�ļ��б��ݺͻָ��ô��Ǿ͸��Ū��.mdbľ��ܼ򵥣�
1��½��Ҹ�.mdb��ݿ⣬ע��Сһ�㣬��ݿ��ļ��
2��ݿ⣬��ǿտ��½�һ��Լ�һ��ֶΣ��롣Ȼ��ݿ��ͼ��½�һ��ֶΣ��ֶ��㣬��ѡOLE��ǹؼ��Ȼ�󱣴档
3��ص��ݿ��棬�򿪸ղű��OLE��ı��ᷢ�ֱ��OLE��ֶ�ֵ��ʾ��ݡ��ѡ��Ȼ��Ҽ�ѡ��ڴ򿪵ĶԻ��ѡ��ļ��һ�Ȼ��ѡ��㱾��ASPľ��ļ��ľ��ļ�һ��ҪС��ԽСԽ�á�
4��ѡ�к��ȷ��һ��aspľ��ͱ��ݿ��ˡ��ݿ��Ǿ��úϷ��ȫ��DVBBS7�Ͽɣ��ӹ�DVBBS��֤��Ƶļ��顣

ľ��ˣ��Ĳ��ͼ��ˣ��ں�̨��а��ϴ��ļ��һ��mdb��ʽ��Ȼ��ǰ̨�ϴ��ղ��.mdbľ��ݿ⣬��ͨ��׵ĺ�̨��ݷ�ʽ��߻ָ��ݷ�ʽ��.mdb��ɻ��.aspľ��ˣ�Ȼ��㵱Ȼ�Ϳ��Ϊ��Ϊ��ô��̳��ô��ˡ�

�ڶ��ַ�ʽ��ǿ�վ����ʵ��ûʲô��˵�ģ�Ҳ��Ǽ��ռ��̰�ȫ��Ĳ��ã��ôֻҪ��һ��վ��ڣ��ô�ڿ;Ϳ��ڸ�վͨ��ľ��ͬWEBĿ¼�е��վ��ݣ��Ҿ��ȫ�Ĳ��Ȩ�ޣ��Ŀռ��ֻ��ϵ�ù�ˣ��ô��ȫ��ܳ�Ϊ��˲˵Ķ��Ϊʲô�ܶ��˵��DV��ֽ��İ��̳��ȫ��ˣ��ǲ�ͣ�ı��أ��ˡ�

��ܽ�һ�£��Ҫ��ⱻ�ڣ��ô�Լ�Ҫ�а�ȫ��ʶ�Ǳ��ģ�װ��̳��һ��Ҫ��²��蹤��
1��޸��̳ǰ��̨��룬��ǰ��̨�û��뾡��Ҫ��ͬ��Ϊ��ϰ汾��̳�з��Ի��ǰ̨�ʺ��ģ��̨Ҳ��ˣ��һ��뾡��һ�㡣

2��ڶ��ݿ��ˣ�һ��Ҫ��Ĭ�ϵ��ݿ�dvbbs7.mdb��и��,��ֻ�ǽ�dvbbs7.mdb�ĳ�dvbbs7.aspҲ�ã��ڿ;��޷��ݿ��ˣ�ע��޸ĺ�Ҫ��Ӧ��conn.asp�ļ��е��޸�һ�£��ļ��һ�¡�

3��̳��ǰ��־��¼��ʹ�õ��ݿ�Ҳ�޷�ֱ��֪��룬ֻ�ܿ��½⣬��½�ֻҪ��΢��ӵ��û��µĳ��

4��ʵ��ǰ�漸��Ѿ��һ��ȫ�Ķ��̳�ˣ��Щ��ģ�ȴ��ù��վ��ԣ��ϰ汾��̳һ��Ҫ�ǵ��°��Ӷ��Ϊ��ǰ�汾��©��±��ڡ�

5��ڿ�վ��õĿռ��Ļ��޷��ģ�ֻ��˵ѡ��һ��õĿռ��ˣ��ռ��Լ��ASPľ��¿ռ��Ļ��ȫ�Ƿ��ϸ��Ҳ�ǿռ��̣��Լ��ľ��ҽ��һ��ò�Ҫȥѡ��Щ��ν��ȫ�ܿռ䣬ȫ�ܻ��ϵ��ȫ��û�㼼��׾͸�ȫ�ܿռ��֧��ASP�Ŀռ䰲ȫ�Ƿǳ��ģ��һȫ�ܾͱȽ��ˡ�

�Ǻǣ�ϣ��ҿ��ƪ��ʾ��úü��Լ��̳�Ƿ��©��ڵ��ʵ��˵�Ǳ��ˣ��Ϊһ�㼼��û�У�ֻ��Ϊ��ҵ��ɵġ�

-----------------------��䣬��з��û��------------------------

��Ļ�(��з��Ȩ��վ��)��

һ��coboy�ᵽ��mdb��ݣ��IIS��һ�¾Ϳ��Է��ģ��ӳ��ļ��(IIS��-->��Ŀ¼-->��-->ӳ��)��mdb�ļ��ͣ�ӳ��ѡ��asp.dll��һ��DLL�ļ��ɣ��MDB��ݿ��޷��ˡ�

��վ��ļ��У��˼��Ҫ��дȨ�޵��ļ��(data[��ݿ��Ŀ¼] | uploadfile[�ϴ��ļ��Ŀ¼] | uploadface[�ϴ�ͷ��Ŀ¼] | previewimage[ʹ��ASPJPEG��ʱ��Ҫʹ�õ��ļ��] | Dv_fourmnews[��ҳ��õ�config�ļ��Ŀ¼] | Skins[�༭CSS�͵��ʱ��Ҫʹ��])�Ժ��ļ��м��ļ�ֻ��ȡȨ��д��Ȩ��uploadfile��uploadface��data��backupdata�⼸��Ŀ¼��Ҫ��ִ�нű��Ȩ�ޣ�ִ��Ȩ��Ϊ��ޡ��㴫��ľ��Ҳ�޷��С�

�ټ��ã�һ��ë��ܺ��

ת��ע��Դ��ITѧϰ�� ַ��http://www.t086.com/ ��Ƽ��
�ر�� վ��ر��ֹת�ص�ר��¿��ת�أ��ע��ԭʼ��ߡ��°�Ȩ��ԭʼ��С��ڱ��վת��µĸ��˺��վ��Ǳ�ʾ��л�⡣��վת�ص��а�Ȩ��ϵ��ǣ��ǻᾡ��Ը��

�� ( Dvbbs )

��DVBBS7.1��ʽ��

DVBBS Upfile.asp Exploit

�˽��Щ�֣��

��

Enjoy��²��

��
��
��
��
��
��
��
��
��

���ڵ���Dvbbs 7.1 Sp1�Ĳ������⣬��ͼ��

��ڵ��Dvbbs 7.1 Sp1�Ĳ��⣬��ͼ��