SOLVED Zimbra 8.6 HTTP ERROR 404 Problem accessing /public/error.jsp. Reason: /public/error.jsp Rumi, May 10, 2019 Do a quick search under the usual jetty folders: find /opt/zimbra/jetty/ -type f -name *jsp -mtime -30 If you find files like: /opt/zimbra/jetty/webapps/zimbra/js/zimbra/csfe/XZimbra.jsp /opt/zimbra/jetty/webapps/zimbra/public/Ajax.jsp you’re actually hacked. Unlike the previous “zmcat” and “dblaunchs” that actually exploit the vuln and load some sh*t this looks like a bad childish attack. It seems that they delete some files under jetty dir, don’t know why. The attack vector is the same, but, there are no strange processes, there is no persistence. To clean: Get the package of your version. In our case was an unpatched 8.6 Extract the package, find the store rpm or deb. In our case was zcs-NETWORK-8.6.0_GA_1153.UBUNTU14_64.20141215151218/packages/zimbra-store_8.6.0.GA.1153.UBUNTU14.64_amd64.deb Get into the rpm or the package (midnight commander allows browsing deb & rpm) and navigate to the correspondent jetty/webapps/zimbra/public folder Replace the old public folder with the public folder from the package Patch immediately. You modified some files that will be patched so, if you installed some patch before, use ./installPatch.sh –force, to avoid zimbra version control Here’s the patch file download link: https://www.zimbra.com/downloads/zimbra-%20collaboration/ Install the Patch Note: This patch should be installed on all nodes running in your environment. 1. Before you begin, confirm you have the following: Zimbra Collaboration 8.6.0 GA installed Zimbra Collaboration 8.6.0 Patch8 TGZ file 2. Copy the patch.tgz file(s) to your server. 3. Install Zimbra Collaboration 8.6.0 Patch8 a. Log in as root and cd to the directory where the tar file is saved. Type tar xzf zcs-patch-8.6.0_GA_XXX.tgz cd zcs-patch-8.6.0_GA_XX b. As root, install the patch. Type ./installPatch.sh c. Switch to user zimbra su – zimbra d. ZCS must be restarted to changes to take effect. Type zmcontrol restart Note: For users who have the web-client open and are running the FOSS edition, the refresh notice mightstate that you have changed to the NETWORK Edition; however, your feature set will remain FOSS only. Src: https://wiki.zimbra.com/wiki/Zimbra_Releases/8.6_Patch_8 https://forums.zimbra.org/viewtopic.php?t=66077 Related Administrations Configurations (Linux) UbuntuUbuntu 16zimbra
Install PHPIPAM using Docker on CentOS 7 January 7, 2024 Update Docker Package Database. In a terminal window, type: sudo yum check-update Remove if any docker is preinstalled with your OS- sudo yum remove docker docker-client docker-client-latest docker-common docker-latest docker-latest-logrotate docker-logrotate docker-selinux docker-engine-selinux docker-engine Install the Dependencies sudo yum install -y yum-utils device-mapper-persistent-data lvm2 The –y switch indicates to the yum… Read More
Delete Old Unused Kernels in Debian June 17, 2022 To find out the current version of Linux kernel running on your system, use the following command. $ uname -sr Linux 4.12.0-041200-generic To list all installed kernels on your system, issue this command. $ dpkg -l | grep linux-image | awk ‘{print$2}’ linux-image-4.12.0-041200-generic linux-image-4.8.0-22-generic linux-image-extra-4.8.0-22-generic linux-image-generic Remove Old Unused Kernels… Read More
How to copy files using no owncloud web interface July 22, 2019July 22, 2019 Migrating was instant since we’re moving on the local fs. Checking the above screenshot you can see the rights are still the same of course. Own the folders to the ownCloud user and change the permissions to octal 755: # Recursively own the folder to www-data sudo chown -R www-data:www-data… Read More