泛华保险某基金系统配置不当导致Java反序列化命令执行

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0163942

漏洞标题：泛华保险某基金系统配置不当导致Java反序列化命令执行

漏洞作者：牛小帅

提交时间：2015-12-23 18:53

修复时间：2016-02-08 18:23

公开时间：2016-02-08 18:23

漏洞类型：命令执行

危害等级：高

自评Rank：18

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

2015-12-23：细节已通知厂商并且等待厂商处理中
2015-12-26：厂商已经确认，细节仅向厂商公开
2016-01-05：细节向核心白帽子及相关领域专家公开
2016-01-15：细节向普通白帽子公开
2016-01-25：细节向实习白帽子公开
2016-02-08：细节向公众公开

简要描述：

泛华保险某基金系统配置不当导致java反序列化命令执行

详细说明：

http://182.254.162.32:7001/console/login/LoginForm.jsp
用了weblogic

root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
abrt:x:173:173::/etc/abrt:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
saslauth:x:499:76:"Saslauthd user":/var/empty/saslauth:/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
rtkit:x:498:499:RealtimeKit:/proc:/sbin/nologin
pulse:x:497:498:PulseAudio System Daemon:/var/run/pulse:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
gdm:x:42:42::/var/lib/gdm:/sbin/nologin
avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin
oracle:x:500:500::/home/oracle:/bin/bash
weblogic:x:501:503::/data/weblogic:/bin/bash
hssale:x:505:500::/data/hssale:/bin/bash
tuxedo:x:504:500::/data/tuxedo:/bin/bash

eth1      Link encap:Ethernet  HWaddr 52:54:00:42:FD:6A  
          inet addr:10.232.6.108  Bcast:10.232.7.255  Mask:255.255.254.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:202837563 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27915347 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:35331726105 (32.9 GiB)  TX bytes:12610818860 (11.7 GiB)
lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:21854537 errors:0 dropped:0 overruns:0 frame:0
          TX packets:21854537 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:4836203619 (4.5 GiB)  TX bytes:4836203619 (4.5 GiB)

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 10.232.6.108:9997           0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:5901                0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:9999           0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:9617                0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:10001          0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:6001                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:1522                0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:10004          0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:10005          0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:7001           0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:7001              0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:7005              0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:7005           0.0.0.0:*                   LISTEN      
tcp        0      0 10.232.6.108:1522           10.232.6.108:30556          ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.143.72.111:54945         ESTABLISHED 
tcp        1      0 127.0.0.1:9784              127.0.0.1:1522              CLOSE_WAIT  
tcp        0     25 10.232.6.108:7001           10.143.72.111:57311         ESTABLISHED 
tcp        0      0 10.232.6.108:22             10.143.72.111:56748         ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.232.6.108:17125          ESTABLISHED 
tcp        0      0 10.232.6.108:22             10.143.72.111:56915         ESTABLISHED 
tcp        0      0 10.232.6.108:6887           10.232.6.108:1522           ESTABLISHED 
tcp        1      0 127.0.0.1:9778              127.0.0.1:1522              CLOSE_WAIT  
tcp        0      0 127.0.0.1:25513             127.0.0.1:1522              ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.143.72.111:54663         ESTABLISHED 
tcp        0      0 10.232.6.108:15909          10.232.6.108:10001          ESTABLISHED 
tcp        0      0 127.0.0.1:23136             127.0.0.1:1522              ESTABLISHED 
tcp        0      0 10.232.6.108:6890           10.232.6.108:1522           ESTABLISHED 
tcp        1      0 127.0.0.1:9772              127.0.0.1:1522              CLOSE_WAIT  
tcp        0      0 10.232.6.108:1522           10.143.72.111:54825         ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.232.6.108:6887           ESTABLISHED 
tcp        0      0 10.232.6.108:22             10.143.72.111:60368         ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.143.72.111:54950         ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.143.72.111:54818         ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.143.72.111:54954         ESTABLISHED 
tcp        0      0 10.232.6.108:25022          10.142.68.12:20022          ESTABLISHED 
tcp        0      0 10.232.6.108:15940          10.232.6.108:10001          ESTABLISHED 
tcp        0      0 127.0.0.1:10224             127.0.0.1:1522              ESTABLISHED 
tcp        0      0 10.232.6.108:10001          10.232.6.108:15909          ESTABLISHED 
tcp        0      0 10.232.6.108:34465          10.66.255.253:9966          ESTABLISHED 
tcp        0      1 127.0.0.1:55329             127.0.0.1:1521              SYN_SENT    
tcp        0      0 127.0.0.1:1522              127.0.0.1:10224             ESTABLISHED 
tcp        0      0 10.232.6.108:56546          10.181.225.16:9922          ESTABLISHED 
tcp        1      0 127.0.0.1:9780              127.0.0.1:1522              CLOSE_WAIT  
tcp        0      0 10.232.6.108:10001          10.232.6.108:15940          ESTABLISHED 
tcp        0      0 10.232.6.108:1522           10.232.6.108:6890           ESTABLISHED 
tcp        1      0 127.0.0.1:9777              127.0.0.1:1522              CLOSE_WAIT  
tcp        0      0 127.0.0.1:1522              127.0.0.1:25513             ESTABLISHED 
tcp        0      0 10.232.6.108:30556          10.232.6.108:1522           ESTABLISHED 
tcp        0      0 10.232.6.108:22             10.143.72.111:57616         ESTABLISHED 
tcp        0      0 10.232.6.108:7001           10.221.133.85:56521         ESTABLISHED 
tcp        0      0 10.232.6.108:1582           10.142.68.11:20022          ESTABLISHED 
tcp        0      0 127.0.0.1:1522              127.0.0.1:23136             ESTABLISHED 
tcp        0      0 10.232.6.108:17125          10.232.6.108:1522           ESTABLISHED 
tcp        1      0 127.0.0.1:9775              127.0.0.1:1522              CLOSE_WAIT  
udp        0      0 127.0.0.1:14326             0.0.0.0:*                               
udp        0      0 127.0.0.1:52598             0.0.0.0:*                               
udp        0      0 0.0.0.0:48154               0.0.0.0:*                               
udp        0      0 127.0.0.1:48555             0.0.0.0:*                               
udp        0      0 0.0.0.0:177                 0.0.0.0:*                               
udp        0      0 10.232.6.108:2743           0.0.0.0:*                               
udp        0      0 127.0.0.1:38488             0.0.0.0:*                               
udp        0      0 10.232.6.108:62440          0.0.0.0:*                               
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     12012  /tmp/.X11-unix/X1
unix  2      [ ]         DGRAM                    25836575 /tmp/agent_cmd.sock
unix  2      [ ACC ]     STREAM     LISTENING     10651  /var/run/dbus/system_bus_socket
unix  2      [ ACC ]     STREAM     LISTENING     477031 /var/tmp/.oracle/s#7224.1
unix  2      [ ACC ]     STREAM     LISTENING     477033 /var/tmp/.oracle/s#7224.2
unix  2      [ ACC ]     STREAM     LISTENING     12863  /tmp/ssh-rAkzRv1408/agent.1408
unix  2      [ ACC ]     STREAM     LISTENING     12964  /tmp/.ICE-unix/1408
unix  2      [ ACC ]     STREAM     LISTENING     13046  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  2      [ ACC ]     STREAM     LISTENING     13408  /tmp/orbit-root/linc-580-0-7d9e77d1636c4
unix  2      [ ACC ]     STREAM     LISTENING     13541  /tmp/orbit-root/linc-5ab-0-5428c2a98b1f6
unix  2      [ ACC ]     STREAM     LISTENING     10927  /var/run/acpid.socket
unix  2      [ ACC ]     STREAM     LISTENING     13549  /tmp/keyring-UO1plS/socket
unix  2      [ ACC ]     STREAM     LISTENING     13558  /tmp/orbit-root/linc-5a6-0-4ae84b0293e3a
unix  2      [ ACC ]     STREAM     LISTENING     10988  @/var/run/hald/dbus-4b1bUG7KA6
unix  2      [ ACC ]     STREAM     LISTENING     13562  /tmp/keyring-UO1plS/socket.ssh
unix  2      [ ACC ]     STREAM     LISTENING     13564  /tmp/keyring-UO1plS/socket.pkcs11
unix  2      [ ]         DGRAM                    25836577 /usr/local/sa/agent/log/agent_cmd.sock
unix  2      [ ACC ]     STREAM     LISTENING     13985  /tmp/orbit-root/linc-5ce-0-123efb8c39f9b
unix  2      [ ACC ]     STREAM     LISTENING     14148  /tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     14164  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  2      [ ACC ]     STREAM     LISTENING     14548  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  2      [ ACC ]     STREAM     LISTENING     10993  @/var/run/hald/dbus-DjQLPlTtEH
unix  2      [ ACC ]     STREAM     LISTENING     14767  /tmp/orbit-root/linc-612-0-3527a89e6566
unix  2      [ ]         DGRAM                    56684371 /usr/local/sa/agent/log/alarm.sock
unix  2      [ ACC ]     STREAM     LISTENING     14803  /tmp/orbit-root/linc-5f5-0-3a3f6b188a66
unix  2      [ ACC ]     STREAM     LISTENING     14914  /tmp/orbit-root/linc-60a-0-685ef02710a44
unix  2      [ ACC ]     STREAM     LISTENING     21068392 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  2      [ ACC ]     STREAM     LISTENING     25836579 /usr/local/sa/agent/log/ssh_cmd.sock
unix  2      [ ACC ]     STREAM     LISTENING     14974  /tmp/orbit-root/linc-614-0-7f94d18c15698
unix  2      [ ACC ]     STREAM     LISTENING     14986  /tmp/orbit-root/linc-600-0-852e9fc16205
unix  2      [ ACC ]     STREAM     LISTENING     15075  /tmp/orbit-root/linc-616-0-1ba8f5fa29ccf
unix  2      [ ACC ]     STREAM     LISTENING     15087  /tmp/orbit-root/linc-617-0-19f118892a4de
unix  2      [ ACC ]     STREAM     LISTENING     15282  /tmp/orbit-root/linc-637-0-70b2cafc43817
unix  2      [ ACC ]     STREAM     LISTENING     12291  @/tmp/dbus-vHqwXkoYm2
unix  2      [ ACC ]     STREAM     LISTENING     15302  /tmp/orbit-root/linc-633-0-6e1ea8f745f28
unix  2      [ ACC ]     STREAM     LISTENING     15338  /tmp/orbit-root/linc-636-0-1138f39486b04
unix  2      [ ACC ]     STREAM     LISTENING     15680  /tmp/.ICE-unix/1621
unix  2      [ ACC ]     STREAM     LISTENING     15702  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  2      [ ACC ]     STREAM     LISTENING     15771  /tmp/orbit-gdm/linc-655-0-326ec89ce5b86
unix  2      [ ACC ]     STREAM     LISTENING     15842  /tmp/orbit-gdm/linc-65c-0-c1306677e1e
unix  2      [ ACC ]     STREAM     LISTENING     15955  /tmp/orbit-gdm/linc-663-0-7002b6b215086
unix  2      [ ACC ]     STREAM     LISTENING     6778   @/com/ubuntu/upstart
unix  2      [ ACC ]     STREAM     LISTENING     15962  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  2      [ ACC ]     STREAM     LISTENING     16015  /tmp/orbit-gdm/linc-667-0-61aec09f1c4f6
unix  2      [ ACC ]     STREAM     LISTENING     16169  /tmp/orbit-gdm/linc-669-0-3cb4033824759
unix  19     [ ]         DGRAM                    10557  /dev/log
unix  2      [ ACC ]     STREAM     LISTENING     16219  /tmp/orbit-gdm/linc-66a-0-6195a8bf2699b
unix  2      [ ACC ]     STREAM     LISTENING     16243  /tmp/orbit-gdm/linc-66c-0-173484da2ac00
unix  2      [ ACC ]     STREAM     LISTENING     15655  @/tmp/gdm-session-cNjFDSdq
unix  2      [ ACC ]     STREAM     LISTENING     16371  /tmp/orbit-gdm/linc-66b-0-7af2c4f23689c
unix  2      [ ACC ]     STREAM     LISTENING     16403  /var/lib/gdm/.pulse/a4c4466c6eb5ae7b4eeb39210000000f-runtime/native
unix  2      [ ACC ]     STREAM     LISTENING     11688  /var/run/abrt/abrt.socket
unix  2      [ ACC ]     STREAM     LISTENING     12011  @/tmp/.X11-unix/X1
unix  2      [ ACC ]     STREAM     LISTENING     14147  @/tmp/.X11-unix/X0
unix  2      [ ]         DGRAM                    7486   @/org/kernel/udev/udevd
unix  2      [ ]         DGRAM                    11019  @/org/freedesktop/hal/udev_event
unix  2      [ ACC ]     STREAM     LISTENING     15627  @/tmp/dbus-SPpZI3K2OQ
unix  2      [ ACC ]     STREAM     LISTENING     15539  @/tmp/gdm-greeter-nUMLEBIN
unix  2      [ ACC ]     STREAM     LISTENING     15679  @/tmp/.ICE-unix/1621
unix  2      [ ACC ]     STREAM     LISTENING     12963  @/tmp/.ICE-unix/1408
unix  2      [ ]         DGRAM                    60902041 
unix  3      [ ]         STREAM     CONNECTED     60902019 
unix  3      [ ]         STREAM     CONNECTED     60902018 
unix  2      [ ]         DGRAM                    60902015 
unix  3      [ ]         STREAM     CONNECTED     60852513 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     60852492 
unix  2      [ ]         DGRAM                    59634413 
unix  3      [ ]         STREAM     CONNECTED     59634391 
unix  3      [ ]         STREAM     CONNECTED     59634390 
unix  2      [ ]         DGRAM                    59634387 
unix  2      [ ]         STREAM     CONNECTED     59513144 
unix  2      [ ]         DGRAM                    59513018 
unix  2      [ ]         STREAM     CONNECTED     59511695 
unix  2      [ ]         DGRAM                    59511587 
unix  2      [ ]         DGRAM                    59463897 
unix  2      [ ]         DGRAM                    59463887 
unix  2      [ ]         DGRAM                    59424398 
unix  2      [ ]         DGRAM                    59424389 
unix  2      [ ]         DGRAM                    59394515 
unix  2      [ ]         DGRAM                    59394505 
unix  2      [ ]         DGRAM                    59394253 
unix  2      [ ]         DGRAM                    59394243 
unix  2      [ ]         DGRAM                    59365180 
unix  3      [ ]         STREAM     CONNECTED     59365158 
unix  3      [ ]         STREAM     CONNECTED     59365157 
unix  2      [ ]         DGRAM                    59365154 
unix  2      [ ]         DGRAM                    59323683 
unix  3      [ ]         STREAM     CONNECTED     59323661 
unix  3      [ ]         STREAM     CONNECTED     59323660 
unix  2      [ ]         DGRAM                    59323657 
unix  3      [ ]         STREAM     CONNECTED     56684374 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     56684370 
unix  3      [ ]         STREAM     CONNECTED     43375527 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     43375526 
unix  3      [ ]         STREAM     CONNECTED     25836602 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     25836593 
unix  3      [ ]         STREAM     CONNECTED     25836601 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     25836592 
unix  3      [ ]         STREAM     CONNECTED     25836599 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     25836581 
unix  3      [ ]         STREAM     CONNECTED     25836598 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     25836571 
unix  3      [ ]         STREAM     CONNECTED     25836597 /usr/local/sa/agent/secubase/secu-tcs-agent.unix
unix  3      [ ]         STREAM     CONNECTED     25836566 
unix  2      [ ]         DGRAM                    451337 
unix  3      [ ]         STREAM     CONNECTED     16674  /tmp/orbit-root/linc-5a6-0-4ae84b0293e3a
unix  3      [ ]         STREAM     CONNECTED     16630  
unix  3      [ ]         STREAM     CONNECTED     16441  @/tmp/gdm-session-cNjFDSdq
unix  3      [ ]         STREAM     CONNECTED     16440  
unix  3      [ ]         STREAM     CONNECTED     16437  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16436  
unix  3      [ ]         STREAM     CONNECTED     16415  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16414  
unix  3      [ ]         STREAM     CONNECTED     16408  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16407  
unix  3      [ ]         STREAM     CONNECTED     16406  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16405  
unix  3      [ ]         STREAM     CONNECTED     16387  /tmp/orbit-gdm/linc-66b-0-7af2c4f23689c
unix  3      [ ]         STREAM     CONNECTED     16386  
unix  3      [ ]         STREAM     CONNECTED     16384  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  3      [ ]         STREAM     CONNECTED     16383  
unix  3      [ ]         STREAM     CONNECTED     16382  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16381  
unix  3      [ ]         STREAM     CONNECTED     16378  @/tmp/gdm-greeter-nUMLEBIN
unix  3      [ ]         STREAM     CONNECTED     16377  
unix  3      [ ]         STREAM     CONNECTED     16376  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16375  
unix  3      [ ]         STREAM     CONNECTED     16385  /tmp/orbit-gdm/linc-66b-0-7af2c4f23689c
unix  3      [ ]         STREAM     CONNECTED     16373  
unix  3      [ ]         STREAM     CONNECTED     16370  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     16369  
unix  3      [ ]         STREAM     CONNECTED     16368  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16367  
unix  3      [ ]         STREAM     CONNECTED     16356  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16355  
unix  2      [ ]         DGRAM                    16354  
unix  3      [ ]         STREAM     CONNECTED     16348  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16347  
unix  3      [ ]         STREAM     CONNECTED     16329  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16328  
unix  3      [ ]         STREAM     CONNECTED     16327  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16326  
unix  3      [ ]         STREAM     CONNECTED     16310  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16309  
unix  3      [ ]         STREAM     CONNECTED     16275  /tmp/orbit-gdm/linc-66c-0-173484da2ac00
unix  3      [ ]         STREAM     CONNECTED     16274  
unix  3      [ ]         STREAM     CONNECTED     16272  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  3      [ ]         STREAM     CONNECTED     16271  
unix  3      [ ]         STREAM     CONNECTED     16254  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16253  
unix  3      [ ]         STREAM     CONNECTED     16252  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16251  
unix  3      [ ]         STREAM     CONNECTED     16273  /tmp/orbit-gdm/linc-66c-0-173484da2ac00
unix  3      [ ]         STREAM     CONNECTED     16245  
unix  3      [ ]         STREAM     CONNECTED     16242  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     16241  
unix  3      [ ]         STREAM     CONNECTED     16240  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16239  
unix  3      [ ]         STREAM     CONNECTED     16232  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16230  
unix  3      [ ]         STREAM     CONNECTED     16224  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     16223  
unix  3      [ ]         STREAM     CONNECTED     16235  /tmp/orbit-gdm/linc-66a-0-6195a8bf2699b
unix  3      [ ]         STREAM     CONNECTED     16221  
unix  3      [ ]         STREAM     CONNECTED     16218  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     16217  
unix  3      [ ]         STREAM     CONNECTED     16213  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16212  
unix  3      [ ]         STREAM     CONNECTED     16302  /tmp/orbit-gdm/linc-669-0-3cb4033824759
unix  3      [ ]         STREAM     CONNECTED     16171  
unix  3      [ ]         STREAM     CONNECTED     16168  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     16167  
unix  3      [ ]         STREAM     CONNECTED     16166  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16165  
unix  3      [ ]         STREAM     CONNECTED     16160  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16159  
unix  3      [ ]         STREAM     CONNECTED     16150  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16149  
unix  3      [ ]         STREAM     CONNECTED     16028  @/tmp/.ICE-unix/1621
unix  3      [ ]         STREAM     CONNECTED     16027  
unix  3      [ ]         STREAM     CONNECTED     16024  /tmp/orbit-gdm/linc-667-0-61aec09f1c4f6
unix  3      [ ]         STREAM     CONNECTED     16023  
unix  3      [ ]         STREAM     CONNECTED     16021  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  3      [ ]         STREAM     CONNECTED     16020  
unix  3      [ ]         STREAM     CONNECTED     16019  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     16018  
unix  3      [ ]         STREAM     CONNECTED     16022  /tmp/orbit-gdm/linc-667-0-61aec09f1c4f6
unix  3      [ ]         STREAM     CONNECTED     16017  
unix  3      [ ]         STREAM     CONNECTED     16014  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     16013  
unix  3      [ ]         STREAM     CONNECTED     16012  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16011  
unix  3      [ ]         STREAM     CONNECTED     16007  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     16006  
unix  2      [ ]         DGRAM                    15973  
unix  3      [ ]         STREAM     CONNECTED     15972  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15971  
unix  3      [ ]         STREAM     CONNECTED     15970  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15969  
unix  3      [ ]         STREAM     CONNECTED     15968  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15967  
unix  3      [ ]         STREAM     CONNECTED     15966  /tmp/orbit-gdm/linc-65b-0-4523506615297
unix  3      [ ]         STREAM     CONNECTED     15965  
unix  3      [ ]         STREAM     CONNECTED     15964  /tmp/orbit-gdm/linc-663-0-7002b6b215086
unix  3      [ ]         STREAM     CONNECTED     15960  
unix  3      [ ]         STREAM     CONNECTED     15958  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15957  
unix  3      [ ]         STREAM     CONNECTED     15921  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15920  
unix  3      [ ]         STREAM     CONNECTED     15910  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15909  
unix  3      [ ]         STREAM     CONNECTED     15904  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15903  
unix  3      [ ]         STREAM     CONNECTED     15845  /tmp/orbit-gdm/linc-65c-0-c1306677e1e
unix  3      [ ]         STREAM     CONNECTED     15844  
unix  3      [ ]         STREAM     CONNECTED     15841  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  3      [ ]         STREAM     CONNECTED     15840  
unix  3      [ ]         STREAM     CONNECTED     15836  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15835  
unix  3      [ ]         STREAM     CONNECTED     15831  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15830  
unix  3      [ ]         STREAM     CONNECTED     15774  /tmp/orbit-gdm/linc-655-0-326ec89ce5b86
unix  3      [ ]         STREAM     CONNECTED     15773  
unix  3      [ ]         STREAM     CONNECTED     15770  /tmp/orbit-gdm/linc-658-0-103614a6e349e
unix  3      [ ]         STREAM     CONNECTED     15769  
unix  3      [ ]         STREAM     CONNECTED     15766  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15765  
unix  3      [ ]         STREAM     CONNECTED     15705  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15704  
unix  3      [ ]         STREAM     CONNECTED     15691  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15690  
unix  3      [ ]         STREAM     CONNECTED     15664  @/tmp/dbus-SPpZI3K2OQ
unix  3      [ ]         STREAM     CONNECTED     15663  
unix  3      [ ]         STREAM     CONNECTED     15659  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15658  
unix  3      [ ]         STREAM     CONNECTED     15631  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15630  
unix  3      [ ]         STREAM     CONNECTED     15629  
unix  3      [ ]         STREAM     CONNECTED     15628  
unix  3      [ ]         STREAM     CONNECTED     15616  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15615  
unix  3      [ ]         STREAM     CONNECTED     15541  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15540  
unix  3      [ ]         STREAM     CONNECTED     15459  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     15458  
unix  3      [ ]         STREAM     CONNECTED     15435  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15434  
unix  3      [ ]         STREAM     CONNECTED     15423  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15422  
unix  3      [ ]         STREAM     CONNECTED     15421  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15420  
unix  3      [ ]         STREAM     CONNECTED     15418  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15417  
unix  3      [ ]         STREAM     CONNECTED     15414  @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     15413  
unix  3      [ ]         STREAM     CONNECTED     15398  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15397  
unix  3      [ ]         STREAM     CONNECTED     15392  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15391  
unix  3      [ ]         STREAM     CONNECTED     15358  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15357  
unix  3      [ ]         STREAM     CONNECTED     15352  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     15351  
unix  3      [ ]         STREAM     CONNECTED     15350  /tmp/orbit-root/linc-636-0-1138f39486b04
unix  3      [ ]         STREAM     CONNECTED     15349  
unix  3      [ ]         STREAM     CONNECTED     15348  /tmp/orbit-root/linc-636-0-1138f39486b04
unix  3      [ ]         STREAM     CONNECTED     15347  
unix  3      [ ]         STREAM     CONNECTED     15346  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     15345  
unix  3      [ ]         STREAM     CONNECTED     15344  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15343  
unix  3      [ ]         STREAM     CONNECTED     15341  /tmp/orbit-root/linc-636-0-1138f39486b04
unix  3      [ ]         STREAM     CONNECTED     15340  
unix  3      [ ]         STREAM     CONNECTED     15337  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     15336  
unix  3      [ ]         STREAM     CONNECTED     15332  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15331  
unix  3      [ ]         STREAM     CONNECTED     15333  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     15330  
unix  3      [ ]         STREAM     CONNECTED     15329  /tmp/orbit-root/linc-633-0-6e1ea8f745f28
unix  3      [ ]         STREAM     CONNECTED     15328  
unix  3      [ ]         STREAM     CONNECTED     15327  /tmp/orbit-root/linc-637-0-70b2cafc43817
unix  3      [ ]         STREAM     CONNECTED     15326  
unix  3      [ ]         STREAM     CONNECTED     15323  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     15322  
unix  3      [ ]         STREAM     CONNECTED     15319  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15318  
unix  3      [ ]         STREAM     CONNECTED     15315  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15314  
unix  3      [ ]         STREAM     CONNECTED     15311  /tmp/orbit-root/linc-633-0-6e1ea8f745f28
unix  3      [ ]         STREAM     CONNECTED     15310  
unix  3      [ ]         STREAM     CONNECTED     15309  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     15308  
unix  3      [ ]         STREAM     CONNECTED     15307  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15306  
unix  3      [ ]         STREAM     CONNECTED     15305  /tmp/orbit-root/linc-633-0-6e1ea8f745f28
unix  3      [ ]         STREAM     CONNECTED     15304  
unix  3      [ ]         STREAM     CONNECTED     15301  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     15300  
unix  3      [ ]         STREAM     CONNECTED     15296  /tmp/orbit-root/linc-637-0-70b2cafc43817
unix  3      [ ]         STREAM     CONNECTED     15295  
unix  3      [ ]         STREAM     CONNECTED     15294  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     15292  
unix  3      [ ]         STREAM     CONNECTED     15291  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     15290  
unix  3      [ ]         STREAM     CONNECTED     15287  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15286  
unix  3      [ ]         STREAM     CONNECTED     15285  /tmp/orbit-root/linc-637-0-70b2cafc43817
unix  3      [ ]         STREAM     CONNECTED     15284  
unix  3      [ ]         STREAM     CONNECTED     15281  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     15280  
unix  3      [ ]         STREAM     CONNECTED     15275  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     15274  
unix  3      [ ]         STREAM     CONNECTED     15136  @/dbus-vfs-daemon/socket-dJHIHdRO
unix  3      [ ]         STREAM     CONNECTED     15135  
unix  3      [ ]         STREAM     CONNECTED     15137  @/dbus-vfs-daemon/socket-HbkArAwi
unix  3      [ ]         STREAM     CONNECTED     15134  
unix  3      [ ]         STREAM     CONNECTED     15133  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15132  
unix  3      [ ]         STREAM     CONNECTED     15131  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15130  
unix  2      [ ]         DGRAM                    15126  
unix  3      [ ]         STREAM     CONNECTED     15120  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     15119  
unix  3      [ ]         STREAM     CONNECTED     15116  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15115  
unix  3      [ ]         STREAM     CONNECTED     15110  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15109  
unix  3      [ ]         STREAM     CONNECTED     15103  @/dbus-vfs-daemon/socket-dPTp4mCW
unix  3      [ ]         STREAM     CONNECTED     15102  
unix  3      [ ]         STREAM     CONNECTED     15104  @/dbus-vfs-daemon/socket-zPkteHtU
unix  3      [ ]         STREAM     CONNECTED     15101  
unix  3      [ ]         STREAM     CONNECTED     15094  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15093  
unix  3      [ ]         STREAM     CONNECTED     15090  /tmp/orbit-root/linc-617-0-19f118892a4de
unix  3      [ ]         STREAM     CONNECTED     15089  
unix  3      [ ]         STREAM     CONNECTED     15086  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     15085  
unix  3      [ ]         STREAM     CONNECTED     15082  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15081  
unix  3      [ ]         STREAM     CONNECTED     15080  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15079  
unix  3      [ ]         STREAM     CONNECTED     15078  /tmp/orbit-root/linc-616-0-1ba8f5fa29ccf
unix  3      [ ]         STREAM     CONNECTED     15077  
unix  3      [ ]         STREAM     CONNECTED     15074  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     15073  
unix  3      [ ]         STREAM     CONNECTED     15070  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15069  
unix  3      [ ]         STREAM     CONNECTED     15068  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     15067  
unix  3      [ ]         STREAM     CONNECTED     15065  /tmp/orbit-root/linc-614-0-7f94d18c15698
unix  3      [ ]         STREAM     CONNECTED     15064  
unix  3      [ ]         STREAM     CONNECTED     15063  /tmp/orbit-root/linc-612-0-3527a89e6566
unix  3      [ ]         STREAM     CONNECTED     15062  
unix  3      [ ]         STREAM     CONNECTED     15060  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     15059  
unix  3      [ ]         STREAM     CONNECTED     15056  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     15055  
unix  3      [ ]         STREAM     CONNECTED     15012  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15011  
unix  3      [ ]         STREAM     CONNECTED     15007  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     15006  
unix  3      [ ]         STREAM     CONNECTED     14997  /tmp/orbit-root/linc-614-0-7f94d18c15698
unix  3      [ ]         STREAM     CONNECTED     14996  
unix  3      [ ]         STREAM     CONNECTED     14994  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14993  
unix  3      [ ]         STREAM     CONNECTED     14989  /tmp/orbit-root/linc-600-0-852e9fc16205
unix  3      [ ]         STREAM     CONNECTED     14988  
unix  3      [ ]         STREAM     CONNECTED     14985  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14984  
unix  3      [ ]         STREAM     CONNECTED     14981  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14979  
unix  3      [ ]         STREAM     CONNECTED     14980  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14978  
unix  3      [ ]         STREAM     CONNECTED     14977  /tmp/orbit-root/linc-614-0-7f94d18c15698
unix  3      [ ]         STREAM     CONNECTED     14976  
unix  3      [ ]         STREAM     CONNECTED     14973  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     14972  
unix  3      [ ]         STREAM     CONNECTED     14965  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14964  
unix  3      [ ]         STREAM     CONNECTED     14963  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14962  
unix  3      [ ]         STREAM     CONNECTED     14938  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14935  
unix  3      [ ]         STREAM     CONNECTED     14931  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14930  
unix  3      [ ]         STREAM     CONNECTED     14924  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14923  
unix  3      [ ]         STREAM     CONNECTED     14917  /tmp/orbit-root/linc-60a-0-685ef02710a44
unix  3      [ ]         STREAM     CONNECTED     14916  
unix  3      [ ]         STREAM     CONNECTED     14902  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14901  
unix  3      [ ]         STREAM     CONNECTED     14895  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14894  
unix  3      [ ]         STREAM     CONNECTED     14889  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14888  
unix  3      [ ]         STREAM     CONNECTED     14867  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14866  
unix  3      [ ]         STREAM     CONNECTED     14868  @/dbus-vfs-daemon/socket-WmU6cdtV
unix  3      [ ]         STREAM     CONNECTED     14865  
unix  3      [ ]         STREAM     CONNECTED     14869  @/dbus-vfs-daemon/socket-yVo2rYg3
unix  3      [ ]         STREAM     CONNECTED     14864  
unix  3      [ ]         STREAM     CONNECTED     14850  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14848  
unix  3      [ ]         STREAM     CONNECTED     14847  @/dbus-vfs-daemon/socket-3DI7WSoa
unix  3      [ ]         STREAM     CONNECTED     14846  
unix  3      [ ]         STREAM     CONNECTED     14849  @/dbus-vfs-daemon/socket-CiA6qju1
unix  3      [ ]         STREAM     CONNECTED     14845  
unix  3      [ ]         STREAM     CONNECTED     14838  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14837  
unix  3      [ ]         STREAM     CONNECTED     14833  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14830  
unix  3      [ ]         STREAM     CONNECTED     14813  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14812  
unix  3      [ ]         STREAM     CONNECTED     14808  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14807  
unix  3      [ ]         STREAM     CONNECTED     14806  /tmp/orbit-root/linc-5f5-0-3a3f6b188a66
unix  3      [ ]         STREAM     CONNECTED     14805  
unix  3      [ ]         STREAM     CONNECTED     14802  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14801  
unix  3      [ ]         STREAM     CONNECTED     14798  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14797  
unix  3      [ ]         STREAM     CONNECTED     14780  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14779  
unix  3      [ ]         STREAM     CONNECTED     14778  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14777  
unix  3      [ ]         STREAM     CONNECTED     14776  /tmp/orbit-root/linc-612-0-3527a89e6566
unix  3      [ ]         STREAM     CONNECTED     14775  
unix  3      [ ]         STREAM     CONNECTED     14774  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14773  
unix  3      [ ]         STREAM     CONNECTED     14772  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14771  
unix  3      [ ]         STREAM     CONNECTED     14770  /tmp/orbit-root/linc-612-0-3527a89e6566
unix  3      [ ]         STREAM     CONNECTED     14769  
unix  3      [ ]         STREAM     CONNECTED     14766  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     14765  
unix  3      [ ]         STREAM     CONNECTED     14744  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14743  
unix  3      [ ]         STREAM     CONNECTED     14704  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14703  
unix  3      [ ]         STREAM     CONNECTED     14698  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14697  
unix  3      [ ]         STREAM     CONNECTED     14574  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14573  
unix  3      [ ]         STREAM     CONNECTED     14561  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14560  
unix  3      [ ]         STREAM     CONNECTED     14559  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     14558  
unix  3      [ ]         STREAM     CONNECTED     14557  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14556  
unix  3      [ ]         STREAM     CONNECTED     14554  /tmp/orbit-root/linc-5f7-0-69bade88e674a
unix  3      [ ]         STREAM     CONNECTED     14552  
unix  3      [ ]         STREAM     CONNECTED     14553  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14550  
unix  3      [ ]         STREAM     CONNECTED     14499  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14498  
unix  3      [ ]         STREAM     CONNECTED     14495  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14494  
unix  3      [ ]         STREAM     CONNECTED     14248  @/tmp/.ICE-unix/1408
unix  3      [ ]         STREAM     CONNECTED     14247  
unix  3      [ ]         STREAM     CONNECTED     14244  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14243  
unix  3      [ ]         STREAM     CONNECTED     14174  @/tmp/.ICE-unix/1408
unix  3      [ ]         STREAM     CONNECTED     14173  
unix  3      [ ]         STREAM     CONNECTED     14170  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14169  
unix  3      [ ]         STREAM     CONNECTED     14167  /tmp/orbit-root/linc-5ef-0-6e12b57b88270
unix  3      [ ]         STREAM     CONNECTED     14166  
unix  3      [ ]         STREAM     CONNECTED     14163  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     14162  
unix  3      [ ]         STREAM     CONNECTED     14161  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14160  
unix  3      [ ]         STREAM     CONNECTED     14155  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     14154  
unix  3      [ ]         STREAM     CONNECTED     14151  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     14150  
unix  3      [ ]         STREAM     CONNECTED     14111  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14110  
unix  3      [ ]         STREAM     CONNECTED     14079  @/tmp/.ICE-unix/1408
unix  3      [ ]         STREAM     CONNECTED     14078  
unix  3      [ ]         STREAM     CONNECTED     14015  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     14014  
unix  3      [ ]         STREAM     CONNECTED     13988  /tmp/orbit-root/linc-5ce-0-123efb8c39f9b
unix  3      [ ]         STREAM     CONNECTED     13987  
unix  3      [ ]         STREAM     CONNECTED     13984  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     13983  
unix  3      [ ]         STREAM     CONNECTED     13980  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13979  
unix  3      [ ]         STREAM     CONNECTED     13928  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     13925  
unix  3      [ ]         STREAM     CONNECTED     13747  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     13746  
unix  3      [ ]         STREAM     CONNECTED     13745  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13744  
unix  3      [ ]         STREAM     CONNECTED     13698  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13697  
unix  3      [ ]         STREAM     CONNECTED     13693  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13692  
unix  3      [ ]         STREAM     CONNECTED     13660  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13659  
unix  3      [ ]         STREAM     CONNECTED     13654  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13653  
unix  3      [ ]         STREAM     CONNECTED     13552  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13551  
unix  3      [ ]         STREAM     CONNECTED     13544  /tmp/orbit-root/linc-5ab-0-5428c2a98b1f6
unix  3      [ ]         STREAM     CONNECTED     13543  
unix  3      [ ]         STREAM     CONNECTED     13540  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     13539  
unix  3      [ ]         STREAM     CONNECTED     13532  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13531  
unix  3      [ ]         STREAM     CONNECTED     13522  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     13521  
unix  3      [ ]         STREAM     CONNECTED     13411  /tmp/orbit-root/linc-580-0-7d9e77d1636c4
unix  3      [ ]         STREAM     CONNECTED     13410  
unix  3      [ ]         STREAM     CONNECTED     13407  /tmp/orbit-root/linc-597-0-7187759b5fd3a
unix  3      [ ]         STREAM     CONNECTED     13406  
unix  3      [ ]         STREAM     CONNECTED     13403  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     13402  
unix  3      [ ]         STREAM     CONNECTED     13049  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     13048  
unix  3      [ ]         STREAM     CONNECTED     12990  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12989  
unix  3      [ ]         STREAM     CONNECTED     12985  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12984  
unix  3      [ ]         STREAM     CONNECTED     12975  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12974  
unix  3      [ ]         STREAM     CONNECTED     12948  @/tmp/dbus-vHqwXkoYm2
unix  3      [ ]         STREAM     CONNECTED     12947  
unix  3      [ ]         STREAM     CONNECTED     12944  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     12943  
unix  3      [ ]         STREAM     CONNECTED     12752  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12751  
unix  3      [ ]         STREAM     CONNECTED     12523  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12522  
unix  3      [ ]         STREAM     CONNECTED     12484  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     12483  
unix  3      [ ]         STREAM     CONNECTED     12449  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     12448  
unix  3      [ ]         STREAM     CONNECTED     12447  
unix  3      [ ]         STREAM     CONNECTED     12446  
unix  3      [ ]         STREAM     CONNECTED     12234  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     12233  
unix  3      [ ]         STREAM     CONNECTED     12093  @/tmp/.X11-unix/X1
unix  3      [ ]         STREAM     CONNECTED     12092  
unix  2      [ ]         DGRAM                    11740  
unix  2      [ ]         DGRAM                    11690  
unix  3      [ ]         STREAM     CONNECTED     11504  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     11503  
unix  3      [ ]         STREAM     CONNECTED     11426  /var/run/acpid.socket
unix  3      [ ]         STREAM     CONNECTED     11425  
unix  3      [ ]         STREAM     CONNECTED     11420  @/var/run/hald/dbus-4b1bUG7KA6
unix  3      [ ]         STREAM     CONNECTED     11419  
unix  3      [ ]         STREAM     CONNECTED     11374  @/var/run/hald/dbus-4b1bUG7KA6
unix  3      [ ]         STREAM     CONNECTED     11373  
unix  3      [ ]         STREAM     CONNECTED     11013  @/var/run/hald/dbus-DjQLPlTtEH
unix  3      [ ]         STREAM     CONNECTED     11011  
unix  3      [ ]         STREAM     CONNECTED     10990  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     10989  
unix  2      [ ]         DGRAM                    10929  
unix  3      [ ]         STREAM     CONNECTED     10850  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     10849  
unix  2      [ ]         DGRAM                    10848  
unix  3      [ ]         STREAM     CONNECTED     10739  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     10738  
unix  3      [ ]         STREAM     CONNECTED     10721  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     10718  
unix  2      [ ]         DGRAM                    10714  
unix  3      [ ]         STREAM     CONNECTED     10671  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     10670  
unix  3      [ ]         STREAM     CONNECTED     10656  
unix  3      [ ]         STREAM     CONNECTED     10655  
unix  3      [ ]         DGRAM                    7503   
unix  3      [ ]         DGRAM                    7502

漏洞证明：

修复方案：

版权声明：转载请注明来源牛小帅@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：15

确认时间：2015-12-26 21:33

厂商回复：

非常感谢

WooYun.org

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0163942

漏洞标题：泛华保险某基金系统配置不当导致Java反序列化命令执行

相关厂商：泛华保险服务集团

漏洞作者：牛小帅

提交时间：2015-12-23 18:53

修复时间：2016-02-08 18:23

公开时间：2016-02-08 18:23

漏洞类型：命令执行

危害等级：高

自评Rank：18

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源牛小帅@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

WooYun.org

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0163942

漏洞标题：泛华保险某基金系统配置不当导致Java反序列化命令执行

相关厂商：泛华保险服务集团

漏洞作者： 牛 小 帅

提交时间：2015-12-23 18:53

修复时间：2016-02-08 18:23

公开时间：2016-02-08 18:23

漏洞类型：命令执行

危害等级：高

自评Rank：18

漏洞状态：厂商已经确认

Tags标签： 无

4人收藏 收藏 var token=""; var id="wooyun-2015-0163942"; $(".btn-fav").click(function(){ CollectBug(id,token); }); 分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源 牛 小 帅@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

漏洞概要关注数(24) 关注此漏洞

漏洞作者：牛小帅

Tags标签：无

4人收藏收藏
分享漏洞：

版权声明：转载请注明来源牛小帅@乌云