Skip to content

Instantly share code, notes, and snippets.

@paulgalow

paulgalow/log4j-hotfix-kerio-connect.md

Last active December 26, 2021 15:43
Show Gist options
  • Save paulgalow/3c8c6eac4e7ae76cbdf3ddc2ff12b891 to your computer and use it in GitHub Desktop.
Save paulgalow/3c8c6eac4e7ae76cbdf3ddc2ff12b891 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. paulgalow revised this gist Dec 17, 2021. 1 changed file with 5 additions and 1 deletion.
    6 changes: 5 additions & 1 deletion log4j-hotfix-kerio-connect.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,10 @@
    | :bell: UPDATE |
    |:---------------------------|
    | GFI has released an [official statement](https://techtalk.gfi.com/impact-of-log4j-vulnerability-on-gfi/) |

    Log4j hotfix against Log4Shell ([CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228)) for Kerio Connect server instances running on Ubuntu 20.04. Please note that at this point it is unclear to me if Kerio Connect is vulnerable. This is meant as a precaution.

    ⚠️ This will remove the vulnerable `JndiLookup` class from `log4j-core-2.5.jar`. I haven't run into any side effects, but be advised this might cause unintended side-effects.
    ⚠️ This will remove the vulnerable `JndiLookup` class from `log4j-core-2.5.jar`. I haven't run into any side effects, but be advised this might cause unintended side effects.

    ```sh
    cd /opt/kerio/mailserver/javaservices/im/lib
  2. paulgalow revised this gist Dec 12, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion log4j-hotfix-kerio-connect.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    Log4j hotfix (CVE-2021-44228) for Kerio Connect server instances running on Ubuntu 20.04. Please note that at this point it is unclear to me if Kerio Connect is vulnerable to log4shell. This is meant as a precaution.
    Log4j hotfix against Log4Shell ([CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228)) for Kerio Connect server instances running on Ubuntu 20.04. Please note that at this point it is unclear to me if Kerio Connect is vulnerable. This is meant as a precaution.

    ⚠️ This will remove the vulnerable `JndiLookup` class from `log4j-core-2.5.jar`. I haven't run into any side effects, but be advised this might cause unintended side-effects.

  3. paulgalow revised this gist Dec 12, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion log4j-hotfix-kerio-connect.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    Log4j hotfix (CVE-2021-44228) for Kerio Connect server instances running on Ubuntu 20.04.
    Log4j hotfix (CVE-2021-44228) for Kerio Connect server instances running on Ubuntu 20.04. Please note that at this point it is unclear to me if Kerio Connect is vulnerable to log4shell. This is meant as a precaution.

    ⚠️ This will remove the vulnerable `JndiLookup` class from `log4j-core-2.5.jar`. I haven't run into any side effects, but be advised this might cause unintended side-effects.

  4. paulgalow created this gist Dec 12, 2021.
    11 changes: 11 additions & 0 deletions log4j-hotfix-kerio-connect.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,11 @@
    Log4j hotfix (CVE-2021-44228) for Kerio Connect server instances running on Ubuntu 20.04.

    ⚠️ This will remove the vulnerable `JndiLookup` class from `log4j-core-2.5.jar`. I haven't run into any side effects, but be advised this might cause unintended side-effects.

    ```sh
    cd /opt/kerio/mailserver/javaservices/im/lib
    systemctl stop kerio-connect.service
    tar -cvzf log4j-core-2.5.jar-vulnerable.gz log4j-core-2.5.jar
    zip -d log4j-core-2.5.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
    systemctl start kerio-connect.service
    ```