近期发现IP-guard Web服务器存在文件读取漏洞,经过分析确认是部分Web系统使用了路径参数,而这些Web系统代码没有对路径参数做安全校验,去除敏感字符,存在文件读取漏洞。
过了维保的客户不能升级服务器版本的情况下,可以使用仅升级web部分的独立版本来升级
各Web系统下载地址
Web控制台:
完整版:4.82.607.0
http://www.tec-development.com/down/IPguard/Release/Web/IPguardWebServer4.82.0607.0.zip?s=30DAAA4BABFDAE7178B7AE6A3A386E758DCDA6473F7D509D5908A68047FBFAE8&md5=37969F237F0DB4869B8B0F2D116566B8
独立版:4.82.608.0
http://www.tec-development.com/down/IPguard/Release/Web/IPguardWebServer_www4.82.0608.0.zip?s=A816C67A29F9F18E970FBF2B962ED05A5C3F3D085AA2CCE6C6BDAF2CD6F34CAB&md5=1BA658EB82B2772155C65DF3041BA5B6
审批管理系统:4.82.606.0
完整版:
http://www.tec-development.com/down/IPguard/Release/Web/IPguardWebApprMgr4.82.0606.0.zip?s=0AD843DC29F0DA5C95D75F307BF75AAD028F82458C9DBC09456C47F77382C9A2&md5=F65955BF5C065EA59CEB77F8E5362F1A
独立版:
http://www.tec-development.com/down/IPguard/Release/Web/IPguardWebApprMgr_www4.82.0606.0.zip?s=862421328B48F706AD222FCE3C84688D54E53B5C8F85DD57F1A71DC56D8DA948&md5=FB6AE9BA259151BE52404CFCDB88747D
软件中心:4.82.0602.0
完整版:
http://www.tec-development.com/down/IPguard/Release/Web/SoftwareCenter4.82.0602.0.zip?s=9FE0D4C79B6E242820461B831000AE897D29B97F3CFD7A0FB80082AD8E00E91A&md5=31C5E3A0607DA2563C85EDB1A3FD32C6
独立版:
http://www.tec-development.com/down/IPguard/Release/Web/SoftwareCenter_www4.82.0602.0.zip?s=513A38E646F3FFD074ED9BACB27047EE698518A32D64CE6C05581618F5997116&md5=DD56C436D4F9746D14F086A20EDB8075
文档云备份:4.82.603.0
完整版:http://www.tec-development.com/down/IPguard/Release/Web/FileCloudBackupServer4.82.0603.0.zip?s=5D430EEECA1960F77CA40A248654159EF8F1E5913AE57268496FBEA7DA8B6E12&md5=AFABD7B7F0A5A9D427E1983DDC1AF5F9
独立版:
http://www.tec-development.com/down/IPguard/Release/Web/FileCloudBackupServer_www4.82.0603.0.zip?s=BD17E38BF1DED25B4EB930B0B87C44CD9BD9A7968B6FD6B4FAA977B75F7B3314&md5=A2128F878E01F553E3ACF1D3FA845C46
数据统计分析系统:4.81.302.0
完整版:
http://www.tec-development.com/down/IPguard/Release/Web/StatisticalSystem4.81.0302.0.zip?s=216A9D483BC5C8D90B13563439845AA073B03F48F724B73B6EB5B24BF7D48E15&md5=CB5729442C2B80F623BC34F3484478E3
独立版:
http://www.tec-development.com/down/IPguard/Release/Web/StatisticalSystem_www4.81.0302.0.zip?s=32A3DD7DD400F289C66024D3E893B3CD31A73B4C80763448C4BEFDDC216C11AB&md5=6837C8ABD8E907279D75754C87FA1546
Web用户系统:4.82.603.0
http://www.tec-development.com/down/IPguard/Release/Web/UserMgrV2_4.82.0603.0.zip?s=4517DE65FEE27C9BB6676FA491E884C7C9112045B53DE041739D9D1AC7F6BB50&md5=29D4500BC0D42D2B1F1FF3B05900C237
泄密追溯系统:4.74.1103.0
http://www.tec-development.com/down/IPguard/Release/Web/TraceabilitySystem4.74.1103.0.zip?s=7CDCE7F26937A83F6A1CCB1253BBAE7FAF913060AD39832B8A54283AE6865745&md5=34F4F8BCFE7E14988A7F582A83ADFF32