How to start ldap whitout start MTA and mailbox CVE-2019-9670

[TitusI]

Hi,
our mail server was been exploited via CVE-2019-9670 (zmcat in /var/tmp/ and miner) , web interface not accessible it seems that some jsp are deleted ) admin interface is still working,
we have stopped all services to avoid further problem (data leaks).
We have started deploing a new mail server, we want to recreate all mailbox from all domain, but with ldap stopped we can't get the addresses.

There is a work around? Can we just start ldap and use zmprov?
If we give zmcontrol start ldap the server go on and start other services too.

Any suggestion is really appreciated.

[fs.schmidt]

Hi,
our mail server was been exploited via CVE-2019-9670 (zmcat in /var/tmp/ and miner) , web interface not accessible it seems that some jsp are deleted ) admin interface is still working,
we have stopped all services to avoid further problem (data leaks).
We have started deploing a new mail server, we want to recreate all mailbox from all domain, but with ldap stopped we can't get the addresses.

There is a work around? Can we just start ldap and use zmprov?
If we give zmcontrol start ldap the server go on and start other services too.

Any suggestion is really appreciated.

Hello, you can start ldap with "ldap start" as zimbra user and you will be able to export the data from LDAP. If you need to export mailboxes data (email, appointments, etc...) you will have start the mailbox service with zmmailboxdctl start. If you don't want your Zimbra available on the internet, you cloud to block the access.

[TitusI]

Hi,
our mail server was been exploited via CVE-2019-9670 (zmcat in /var/tmp/ and miner) , web interface not accessible it seems that some jsp are deleted ) admin interface is still working,
we have stopped all services to avoid further problem (data leaks).
We have started deploing a new mail server, we want to recreate all mailbox from all domain, but with ldap stopped we can't get the addresses.

There is a work around? Can we just start ldap and use zmprov?
If we give zmcontrol start ldap the server go on and start other services too.

Any suggestion is really appreciated.

Hello, you can start ldap with "ldap start" as zimbra user and you will be able to export the data from LDAP. If you need to export mailboxes data (email, appointments, etc...) you will have start the mailbox service with zmmailboxdctl start. If you don't want your Zimbra available on the internet, you cloud to block the access.

thank you,
I've tried zmcontrol ldap start, I stopped it because I see it begin to start other services, I don't want the server go up again. (othervise mail reach the server and I want they go to the new server)


EDIT
Ok, ldap start semms to work