菜鸟求教，关于CVE-2014-4014漏洞的问题

[S667]

在漏洞利用的POC中，最后输入的-sh-4.3$是什么意思啊，求大神解答

[小笨和漂向北方]

That is the default shell prompt for root...after shell code injection, the account was switched from vnik to root... There are missing new lines in between

[S667]

引用 1 楼 micropentium6 的回复:

That is the default shell prompt for root...after shell code injection, the account was switched from vnik to root... There are missing new lines in between

谢谢啦，shell文件编译执行过了，但是最后没看懂什么效果，最后一步的内容也没有出来，可不可以再请教一下你呢

[小笨和漂向北方]

引用 2 楼 u013894494 的回复:

[quote=引用 1 楼 micropentium6 的回复:] That is the default shell prompt for root...after shell code injection, the account was switched from vnik to root... There are missing new lines in between

谢谢啦，shell文件编译执行过了，但是最后没看懂什么效果，最后一步的内容也没有出来，可不可以再请教一下你呢[/quote] I don't know the detail of this security hole. Usually, shellcode is designed to get root privilege. From the screen shot you posted, after running the script, you were granted root permission since your effective group id is 0, which represents the root group.

[??????406]

大神啊，，我们的问题一样啊，求解决方法

[S667]

引用 3 楼 micropentium6 的回复:

[quote=引用 2 楼 u013894494 的回复:] [quote=引用 1 楼 micropentium6 的回复:] That is the default shell prompt for root...after shell code injection, the account was switched from vnik to root... There are missing new lines in between

谢谢啦，shell文件编译执行过了，但是最后没看懂什么效果，最后一步的内容也没有出来，可不可以再请教一下你呢[/quote] I don't know the detail of this security hole. Usually, shellcode is designed to get root privilege. From the screen shot you posted, after running the script, you were granted root permission since your effective group id is 0, which represents the root group. [/quote]太谢谢啦，那再请问一下我按照这个顺序执行之后却没有获取到root权限，可不可以麻烦你再帮忙看一下呢，cve-2014-4014,或者是可不可以给我你的QQ号啊,谢谢啦

[S667]

引用 4 楼 qq_15235257 的回复:

大神啊，，我们的问题一样啊，求解决方法

啦啦啦，好的哇~求教楼上大神吧~

[小笨和漂向北方]

引用 5 楼 u013894494 的回复:

[quote=引用 3 楼 micropentium6 的回复:] [quote=引用 2 楼 u013894494 的回复:] [quote=引用 1 楼 micropentium6 的回复:] That is the default shell prompt for root...after shell code injection, the account was switched from vnik to root... There are missing new lines in between

谢谢啦，shell文件编译执行过了，但是最后没看懂什么效果，最后一步的内容也没有出来，可不可以再请教一下你呢[/quote] I don't know the detail of this security hole. Usually, shellcode is designed to get root privilege. From the screen shot you posted, after running the script, you were granted root permission since your effective group id is 0, which represents the root group. [/quote]太谢谢啦，那再请问一下我按照这个顺序执行之后却没有获取到root权限，可不可以麻烦你再帮忙看一下呢，cve-2014-4014,或者是可不可以给我你的QQ号啊,谢谢啦[/quote] if so, then probably your system has been patched or the shellcode doesn't work for you system...

[u011034785]

同问同问同问同问