Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 09-02-2010, 06:30 AM
Member
 
Posts: 12
Question Zimbra 6.0.8 and Nessus 10722 vulerability

Doing a regularly scheduled security sweep of our systems found this "vulnerability" on our test Zimbra 6.0.8 install:

Tenable Network Security: 10722

Is this real and something I need to worry about? Is there a "fix" or change I can easily make to Zimbra configs to make this warning vanish? Or is this just business as usual and the way things are?

Thanks!
mike r.
Reply With Quote
  #2 (permalink)  
Old 09-02-2010, 07:21 AM
Zimbra Consultant & Moderator
 
Posts: 20,313
Default

You shouldn't expose LDAP to the internet and you can always disable Anonymous Binds to the LDAP server (search the forums or Release Notes for details).
__________________
Regards


Bill
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.