Zimbra AJAX Webmail not loading

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
sibercintra
Posts: 3
Joined: Wed May 11, 2016 8:23 pm

Re: Zimbra AJAX Webmail not loading

Post by sibercintra »

Same problem here on our server. we take the following actions: we change the permissions according to ab_zimbra, we remove the lines in the contrab that call zmswatch and we block the address in the firewall http://93.113.108.146:443/cr.sh.
The environment is stable but we still can not resolve the problems with the attachments.
But the question that does not want to be silent is how to correct the vunerability so that another attack does not occur.
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Zimbra AJAX Webmail not loading

Post by phoenix »

sibercintra wrote:But the question that does not want to be silent is how to correct the vunerability so that another attack does not occur.
If you look in the forums you'll find out how to clean this hack from your server, you should then make sure your server is patched and at the most recent released version.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
Klug
Ambassador
Ambassador
Posts: 2746
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: Zimbra AJAX Webmail not loading

Post by Klug »

The patch to avoid this have been available for more than a month now.
sibercintra
Posts: 3
Joined: Wed May 11, 2016 8:23 pm

Re: Zimbra AJAX Webmail not loading

Post by sibercintra »

AR84 wrote:Hey guys, dont forget to also check your Email Accounts, in our case there was some users with Administrator privilidge that have been added.
They added the accounts such as
no-replayz@....
no-rreplay@....
zmbr@....

Make sure you delete all accounts that are not from you.

here the user wrcm @
yvespires
Posts: 20
Joined: Tue Jan 03, 2017 1:15 pm

Re: Zimbra AJAX Webmail not loading

Post by yvespires »

phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Zimbra AJAX Webmail not loading

Post by phoenix »

yvespires wrote:Is this patch cumulative?
Does the search function of these forums not work any longer, is it not possible to read the product documentation or the Release Notes? If you had done any of those thing you'd know that patches in Zimbra are cumulative!!!
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
AB_Zimbra
Posts: 4
Joined: Sat May 25, 2019 12:52 pm

Re: Zimbra AJAX Webmail not loading

Post by AB_Zimbra »

sibercintra wrote:Same problem here on our server. we take the following actions: we change the permissions according to ab_zimbra, we remove the lines in the contrab that call zmswatch and we block the address in the firewall http://93.113.108.146:443/cr.sh.
The environment is stable but we still can not resolve the problems with the attachments.
But the question that does not want to be silent is how to correct the vunerability so that another attack does not occur.
The upload/attachment problem has to do with the same issue. You can resolve by executing (as root):
chmod 755 /opt/zimbra/data/tmp/upload

For information on mitigate and clean-up the hack, please refer to,
viewtopic.php?t=65932
https://lorenzo.mile.si/zimbra-cve-2019 ... ction/961/
Zulianto
Posts: 2
Joined: Wed Feb 07, 2018 2:28 am

Re: Zimbra AJAX Webmail not loading

Post by Zulianto »

AB_Zimbra wrote:We had exactly the same issue. And I saw that the files had the wrong permissions (executable instead of writeable).

Version: 8.7.11_GA_3800.NETWORK

I did the following (as root);
cd /opt/zimbra/mailboxd
find webapps -type d -exec chmod 0755 {} \;
find webapps -type f -exec chmod 0644 {} \;

Then restart Zimbra;
su - zimbra
zmcontrol restart

After that, everything working fine again and no such messages in the logs anymore.

My Zimbra Version: 8.6.0_GA_1194.NETWORK
It Working for me.. Thanks AB_Zimbra
dhayes
Posts: 18
Joined: Sat Sep 13, 2014 12:26 am

Re: Zimbra AJAX Webmail not loading

Post by dhayes »

Hello All...Does this vulnerability affect 8.7.9 network ?

Thanks
Dave
Last edited by dhayes on Mon May 27, 2019 10:56 pm, edited 3 times in total.
koval1986
Posts: 5
Joined: Mon May 27, 2019 5:30 am

Re: Zimbra AJAX Webmail not loading

Post by koval1986 »

Someone got rid of the emerging process .kthrotlds 400% proc
I am not very good specialist in Linux. Сan you explain step by step what i should do
8.7.7_GA_1787.FOSS :cry: :cry: :cry:
Post Reply