REGARDING THE RECENT VULNERABILITY ANNOUNCEMENT AUGUST 10, 2023!#
If your CrushFTP version is less then 10.5.1, you are vulnerable. No exception. Look at your version number on the dashboard, and it must be 10.5.1 or higher to be safe. For reference, v6, v7, v8,v9...those numbers are less than v10.5.1. Yes, they are vulnerable! Anything below 10.5.1 is vulnerable.
The vulnerability CVE will be released soon. This vulnerability is critical because it does NOT require any authentication. It can be done anonymously and steal the session of other users and escalate to an administrator user. Its critical everyone updates ASAP!
Updating CrushFTP v10#
How to update CrushFTP within the same major version number:#
1.) Login to the dashboard using your "crushadmin" equivalent user in the WebInterface.2.) Click on the about tab.
3.) Click Update, Update Now.
4.) Wait roughly 5 minutes for the files to download, unzip, and be copied in place. CrushFTP will auto restart once done.
5.) Finished.
Installing an offline update when the server cannot reach our server over the internet directly:#
1.) Download CrushFTP10.zip from our download page. (https://www.crushftp.com/early10/CrushFTP10.zip)2.) Give it the specific name `CrushFTP10_new.zip` and place this in the CrushFTP main folder. (Same location where you have your prefs.XML file)
3.) See above normal instructions as Crush will use your local offline zip file.
How to restore a backup in the event of some issue or regression in functionality:#
(CrushFTP automatically creates a backup of its core files in the CrushFTP folder, backup folder.)1.) Restore the CrushFTP.jar file.
2.) Restore the plugins folder.
3.) Restore the WebInterface folder...mainly the CrushTunnel.jar file from inside it.
Changelog: https://www.crushftp.com/version10_build.html
#
Updating an old CrushFTP v9#
You must upgrade: CrushFTPUpgradeYou need a v10+ license code first! If you are an enterprise customer, contact us for your code. Its free if your maintenance is current.
Add new attachment
Only authorized users are allowed to upload new attachments.
List of attachments
Kind | Attachment Name | Size | Version | Date Modified | Author | Change note |
---|---|---|---|---|---|---|
jpg |
minor_update.jpg | 356.6 kB | 1 | 05-Dec-2023 05:32 | Ada Csaba |
«
This particular version was published on 05-Dec-2023 05:32 by Ben Spink.
G’day (anonymous guest)
Log in
JSPWiki