Vulnerable App:. EGroupware Premium Line 9. Other versions may also be affected. Successful attacks can compromise the affected software and possibly the computer running EGroupware. Impact: Direct execution of arbitrary code in the context of Webserver user. Solution: Fixed in EGroupware version 1. Mar 9, — Vendor released fixed versions. Mar 9, — Vulnerability is published. The vulnerability can be triggered by any user. Proof of Concept: Working on Mozilla Firefox 3. Docker is a technology to run Linux container on a host.
Docker is the default way of installation for EGroupware Forgot the password to login to egrouware 1. StefanU UTC 2. Hello, Bettina. Regards Stefan. Well I will answer your questions: I am a normal user and also with administrator privileges I am the only user with administrator rights Do you have access data for configuration? Yes could enter the cpanel where the egroupware files are hosted, I hope hear from you as soon as posible, Regards, Bettina.
RalfBecker UTC 4. I that case you first need to use your root rights to get access to setup again: find out where the header. Start planning the update Ralf. RalfBecker UTC 6. Hi Bettina, if you google the md5-hash you just posted, you get your setup password: So instead of modifying the file just use it and continue with step 3.
RalfBecker UTC 8. The password is for setup. RalfBecker UTC You gone to regular EGroupware login screen and entered your user beti plus the new password. What error message did you get? Hello Ralf, The error I get is: Your session could not be verified.
Friday, January 01 , PM - Permalink. Hi, just finished the installation how-to with the missing part adding applications to a user account prior to log in with this account. Did you know that with eGroupware it is also possible to have multiple identities under your user account: ideal when you have an or more external email account s that you want to receive and sent the emails from.
Thursday, January 07 , AM - Permalink. But when i go to make my header. Any ideas? Hi ToyotaHEAD, Sorry, no out-of-the-pocket solution but a bunch of questions: [ul] What does 'nothing happens' mean: you click the button and really nothing happpens, or clicking the button returns you to the header creation page? What happens when you try filling in the information a second time have read a posting on the egroupware forum that this could do the trick?
As this routine of creating the header. What version of ClearOS are you running? Saturday, January 09 , PM - Permalink. Hi, just increased the php. I have tested now with a 9 MB attachment and for that I needed a 96M setting. Monday, January 18 , AM - Permalink. Great tutorial. Any idea of how to sync with Google Calendar? The need is to be able to access the tasks from GCal as Project Manager plans them out. Is there a MySQL hack for it? Hi John, Thanks for your message and thumbs up.
I'm currently experimenting with Funambol on my android phone to synchronize address book and eventually calendar. Do not now the technical details or how-to, would be nice though to post back here your results. Wednesday, January 20 , AM - Permalink.
Sorry i didnt get an email saying there was a reply to this Um ya, literally nothing. I clicked the button to make the header. I was left looking at the page where u fill out the variables used for the header. Hi, did you look at the questions in my reply? Thursday, January 21 , AM - Permalink. No errors were reported by the installation check. I tried many different times at filling out the fields. Same thing happens each time. Re downloaded the file, extracted, and reinstalled to web browser.
Same issue persists. The Apache log was clear. The latest 5. Thursday, January 21 , PM - Permalink. The apache log being clear I interpret that as being empty is strange, in my acces log not the error log I have a lot of eGroupware PHP messages. What client browser are you using, do you have a popup filter blocker enabled? I think the header file displays in a new window? Sunday, January 24 , PM - Permalink. Ok I setup a fresh ClearOS testing box.
Infact it's a VM As it turns out it was a PEAR problem that the buttons were not doing anything. The one where you choose your language, and can run the installation tests Um i am not sure if this is related or not But I have been following your instructions in SSH while logged in as root. Should I potentially be logged in with a different account when I untar ect??? Monday, January 25 , AM - Permalink. Hi, how did you find out that it was PEAR related?
When pressing the continue button you should return to the screen where you on the left can click login. Tuesday, March 09 , AM - Permalink. Hi, just to say that eGroupware released a security fix: EGroupware 1. Personnaly I am very curious for what the syncML changes will bring Wednesday, March 10 , AM - Permalink.
Hi, just updated the 'how-to' on page 1 with an upgrade part. Did some first tests and so far did not find a problem for what it is worth: been using eGroupware for years and never had one upgrade problem, this makes me a 'bad' tester. Will be spending some time to see what changes where made in the SyncML part of eGroupware: hope to sync my Android address book using Funambol to my eGroupware server.
Will also convert this how-to to the wiki how-to section, this forum thread will be used for updates, notices, discussion, support, etc.
Have fun! Great work Ruud.
0コメント