Zimbra Forums

It seems that Zextras cared about us already

https://www.zextras.com/ru/zimbra-9/

Pls try to start your research from this topic
viewtopic.php?f=15&t=65932

Same here, all solutions that I found in this post and links working the only temporary. NE 8.7.11_GA_3800 I can't tell you the direct solution but can tell you what i did to resolve my problem 0) Backed up everything 1) Applied the patch needed to resolve this security issue in future. The patch o...

Have you tried this solution?
https://wiki.zimbra.com/wiki/SecureConfiguration#SMTP

carlosmillan6969 wrote:mi servidor zimbra 8.5 no permite adjuntar correos dice error critico en la carga del archivo que solucion podria implementar archivos pequeños muy pequeños si los adjunta

Check viewtopic.php?f=15&t=65932 for the solution

but we are on version 8.8.12. This CVE have been fixed in this release. So may be we have been compromised before the update. is it safe to remove zmswatch ? it is not part of zimbra ? Thanks Zimbra 8.8.12 without any patches has CVE-2019-11318. This CVE was fixed only in 8.8.12 Patch 1 (https://wi...

The final solution for remove zmswatch is AS ROOT ps -faxu to see the PID number of process kill -9 PID cd /opt/zimbra/log rm -rf zmswatch rm -rf zmswatch.sh touch zmswatch touch zmswatch.sh chattr +i zmswatch chattr +i zmswatch.sh crontab -e -u zimbra edit and remove the last line if exists that c...

Hi MaySky No our server was not compromised. we patched it on time and we checked our log , they were never any attempt to connect to 185[.]106.120.118. also we never seem zmcat or l.sh or s.sh on our server. The problem is somewhere else. Did you check top for strange activity? IP's and file names...

Hi We are running into strange problem since yesterday. Our Zimbra server version 8.8.12. in fact user using zimbra desktop and webmail cannot send any email if it has attachment on it. very small attachment (not more than 20 bytes ) goes well. Imap user can send without any problem. Our limit is s...

Who managed to overcome ZMWATCH completely without return. I have 4 hours and everything comes back! :( :( :( :( I am. 22 hours without virus already. Found new intrusion attempts in logs, but all the files in jetty folder are as on newly installed system disconnected from internet and no strange a...