Now this is an interesting way to check without using third party tools. It is a one-liner you run on your system to check:
Code:
find / 2>/dev/null -regex ".*.jar" -type f | xargs -I{} grep JndiLookup.class "{}".class "{}"
It actually works pretty well! At least the linux version,
on a Synology forum there is a post I found this along with a Powershell version.
Code:
grep: /opt/minecraft/jars/minecraft_server.1.11.2.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.11.2.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.12.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.12.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.12.1.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.12.1.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.12.2.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.12.2.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.13.2.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.13.2.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.17.jar.class: No such file or directory
Binary file /opt/minecraft/jars/minecraft_server.1.17.jar matches
grep: /opt/minecraft/jars/minecraft_server.1.18.1.jar.class: No such file or directory
grep: /opt/minecraft/versions/1.18.1/server-1.18.1.jar.class: No such file or directory
...
grep: /opt/minecraft/libraries/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.jar.class: No such file or directory
Binary file /opt/minecraft/libraries/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.jar matches
So the previous versions of Minecraft can be compromised as indicated by the "matches" where 1.18.1 doesn't match. Given there is still log4j core being used, it must just mitigate it via the MC jar.
Louis L'Amour, “To make democracy work, we must be a nation of participants, not simply observers.
One who does not vote has no right to complain.”
Visit our archived Minecraft world! | Maybe someday I'll proof read, until then deal with it.