[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Zimbra zero-day exploit

To: Xueshan Feng <sfeng@stanford.edu>
Subject: Re: Zimbra zero-day exploit
From: Csillag Tamas <cstamas@digitus.itk.ppke.hu>
Date: Sun, 8 Dec 2013 23:36:35 +0100
Cc: Steve Hillman <hillman@sfu.ca>, zimbra-hied-admins <zimbra-hied-admins@sfu.ca>
In-reply-to: <889537228.9364125.1386541545194.JavaMail.zimbra@stanford.edu>
List-help: <mailto:zimbra-hied-admins-request@sfu.ca?subject=help> (List Instructions)
List-id: <zimbra-hied-admins.sfu.ca>
List-owner: <mailto:owner-zimbra-hied-admins@sfu.ca>
List-unsubscribe: <mailto:zimbra-hied-admins-request@sfu.ca?subject=unsubscribe>
References: <606309811.459804637.1386538104537.JavaMail.root@jaguar7.sfu.ca> <889537228.9364125.1386541545194.JavaMail.zimbra@stanford.edu>
Reply-to: Csillag Tamas <cstamas@digitus.itk.ppke.hu>
User-agent: Mutt/1.5.21 (2010-09-15)

Hi,

On Sun, Dec 08, 2013 at 02:25:45PM -0800, Xueshan Feng wrote:
> 
> Steve,
> 
> Shouldn't 7071 only open to some internal network/bastion host? The quick fix probably is to tighten up the port 7071 access.
> 
> I also tried to run the code on a system that has access to a test ZCS 8.0.5 server's port 7071.  
 
I can confirm 8.0.5 seems to be safe.

Regards,
 Tamas
-- 
CSILLAG Tamas (cstamas) - http://cstamas.hu/
PPKE IT

Follow-Ups:
- Re: Zimbra zero-day exploit
  - From: "Thom O'Connor" <thom@zimbra.com>
- Re: Zimbra zero-day exploit
  - From: Xueshan Feng <sfeng@stanford.edu>

References:
- Zimbra zero-day exploit
  - From: Steve Hillman <hillman@sfu.ca>
- Re: Zimbra zero-day exploit
  - From: Xueshan Feng <sfeng@stanford.edu>

Prev by Date: Re: Zimbra zero-day exploit
Next by Date: Re: Zimbra zero-day exploit
Previous by thread: Re: Zimbra zero-day exploit
Next by thread: Re: Zimbra zero-day exploit
Index(es):
- Date
- Thread