Search found 125 matches

by maxxer
Thu May 30, 2019 6:48 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

Mike2000 wrote:Sorry for stupid questions, but i a'm not understand how to do it properly.
If i have ubuntu 16.04 - at first i should update it to 18.04 ?


you don't have to. you can install 8.8.12 on 16.04.

anyway 18.04 is still in beta, don't use it
by maxxer
Thu May 30, 2019 6:04 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

Mike2000 wrote:What about Zimbra 8.8.8 ga foss, is it vulnerable?
If it is, what do i have to do? Update to 8.8.12 GA Release or what?

Yes, you must update to the latest minor release of 8.8, that is 8.8.12P2
by maxxer
Tue May 28, 2019 9:17 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

mqaroush wrote:What this mean???


Likely non zimbra files you should delete
by maxxer
Tue May 28, 2019 7:35 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

in previsious post it's posted ZMCAT solutions I have zmswatch on crontab and after i delete/kill it , it's come back! it's the same infection, just more widely spread on the system. cleanup steps are basically the same. first of all patch your system, then cleanup all the mess: cron, unwanted jsp ...
by maxxer
Tue May 28, 2019 5:31 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

Stemond11 wrote:Hi ng
How can i find the source malaware ?
How can i delete definitly the script?


read the whole thread and/or the blogpost linked here, you will find guidelines on how to cleanup your system
by maxxer
Mon May 27, 2019 11:24 am
Forum: Administrators
Topic: certbot-zimbra v0.7 rewrite - call for testing
Replies: 0
Views: 249

certbot-zimbra v0.7 rewrite - call for testing

Hi all. Thanks to the collaboration of Jernej Jakob the script has been rewritten. We're calling people for testing this new rewrite before we publish it as a release. The new version is currently in a separate branch on Github. If you use this script and need to deploy a new cert, we kindly ask you...
by maxxer
Thu May 09, 2019 4:20 pm
Forum: Users
Topic: Images in Signatures
Replies: 3
Views: 1276

Re: Images in Signatures

Broken and not going to be fixed.

viewtopic.php?f=15&t=66125#p290205
by maxxer
Thu May 09, 2019 4:13 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

And if so, could you post your specific eradication steps please? I did, but was in the early stage of infection. All I did is documented on my blog and here. I got a recurring infection on an 8.6 box, but after cleaning up malicious jsps and restarting zimbra I never got attacked again. Nowadays a...
by maxxer
Thu May 09, 2019 4:09 pm
Forum: Users
Topic: Images in Signatures
Replies: 3
Views: 1276

Re: Images in Signatures

steelbricks wrote:Is this occuring in 8.8 versions?


It seems to be a bonus of patched 8.6 only :/
by maxxer
Thu May 02, 2019 2:38 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 239
Views: 131339

Re: CVE-2019-9670 being actively exploited

yellowhousejake wrote:I still thought it best to see if I should patch for this exploit but I am unable to determine if it is needed. When I go the security page it does not list this CVE number under any patches for 8.8.9.

for current zimbra supported version, namely 8.8.x, you must update to the latest version.

Go to advanced search