[Darrik Spaude]

Dime,

Engineering and Escalation are taking a look at your cases. I’m sorry that you have not had a good experience. However, I would say that most FaxFinder installations are unique. We do have many happy customers. Your installation has something else unique that we’ll try to understand and help you resolve.

Fernando,

Originally you had mentioned you wanted to download the log files rather than have them e-mailed. Have you been able to do that?

[Darrik Spaude]

Hi Brandon,

The recommendation in this case is to migrate to the FFx40 series. What you are looking to use has been added in that line of FaxFinders. We don’t recommend that you make changes to the API. You will need to know/change a lot more than just what is in /usr/ffweb/controller/ffws.

Best Regards,
Darrik

[Darrik Spaude]

Hi Kiran,

Try this guide which has a section for Linux installation:
http://www.multitech.com/manuals/s000569.pdf

[Darrik Spaude]

Which version of the FF840 firmware are you using? Which web browser?

In the current release (3.3.8), on the System Configuration–>Debug page there is a Download Logs button. I believe this option has been available since the original release.

[Darrik Spaude]

Check the iSMS product page for the latest official release:
http://www.multitech.com/brands/multimodem-isms#gsc.tab=0

Otherwise, for unofficial releases (beta), then check the following:
https://webfiles.multitech.com/engineering/unofficial-releases/iSMS%20(Formerly%20SMSFinder)/Firmware/

[Darrik Spaude]

The following AT command guide also applies to the MTCDP-EV3:

http://www.multitech.com/manuals/s000546.pdf

Best Regards,
Darrik

[Darrik Spaude]

Hi Mark,

I’m going to create a case for you in the Support Portal since this needs more research.

[Darrik Spaude]

Hi Paul,

We are not able to support the FFx20 series anymore. Even though the FFx20 series has Bash, it may not be possible to exploit it without gaining access to the shell on the unit. It doesn’t use Apache nor its CGI engine for the web server.

[Darrik Spaude]

3.3.6 for the FFx40 and FF240-IP families was released today.

[Darrik Spaude]

Hi Paul,

Which model(s)? The FFx40 and FF240-IP should see version 3.3.6 released this week.

[Darrik Spaude]

Hi Chris,

The FaxFinder server firmware that has this password reveal fix will be either later today or tomorrow. It will be version 3.3.6. The client software with this fix will be released a little later this year.

Best Regards,
Darrik

[Darrik Spaude]

Hi Ian,

The vulnerability affects versions 1.14 through 4.3 of GNU Bash. The OCG products have a vulnerable version of bash. We’re still working on what we need to do regarding this security vulnerability, but this product line should be in line for an update to resolve the vulnerability.

[Darrik Spaude]

Hi Rob,

The vulnerability affects versions 1.14 through 4.3 of GNU Bash. The iSMS has a vulnerable version of bash. However, even though the product contains a vulnerable version of bash, it doesn’t necessarily mean the vulnerability is easily exploitable. The iSMS does not use Apache for the web server which was one avenue to exploit. However, since it does have terminal access via telnet there’s always a possibility of vulnerability whether through a bug or through poor password security.

We’re still working on what else we need to do regarding this security vulnerability.

• This reply was modified 9 years, 7 months ago by Darrik Spaude.

[Darrik Spaude]

Hi Chris,

Your concern was passed to our development group, but there hasn’t been a decision on what they would like to do. While the password is being passed to the client, there is an option to use SSL (enabled by default). However, as you stated, if someone had access to the PC then they could obtain the credentials. The interim solution is to urge employees to practice secure habits (e.g. locking the screen when walking away), but probably don’t describe why they should do that (e.g. someone could open up Application XYZ, click on this or that, show password, etc.).

I think our ideal solution would have to be that we don’t allow the password to be shown and don’t send the password itself to the client either.

[Darrik Spaude]

Thanks for the feedback, Mark.

[Darrik Spaude]

Hi Mark,

Were you able to update the bootstrap and if so did that resolve the problem?

Best Regards,
Darrik

[Darrik Spaude]

Hi Daniel,

When you say “web services” do you mean the FaxFinder API or the FaxFinder web GUI or something else? At the moment, the FaxFinder does NOT support MS Word documents via API or web GUI or T.37 (e-mail).

[Darrik Spaude]

Hi Chanda,

Are you using the API, T.37 (e-mail), web GUI, or FaxFinder Client (Windows) to send the document?

[Darrik Spaude]

Hi Daniel,

The FaxFinder server feature for this is still on the list of feature requests. However, if you use the new FaxFinder client 3.x (for Windows) there is the ability to fax Word documents. If MS Word is installed on the system, then the FFClient will automatically use Word to convert the document to the format needed by the FaxFinder (TIFF in this case). No need in that case for you to convert the document before using the FFClient.

http://www.multitech.com/en_US/SUPPORT/Families/FaxFinder/software.aspx

[Darrik Spaude]

Hi Greg,

There were 4 topic submissions that were flagged as spam. Do you want the content of this one modified since it is a public forum?

[Darrik Spaude]

If you have trouble with the module (trying to flash in the image) or you have more than one module that was received that booted to ROM rather than U-boot, then please create a support case and mention the serial numbers.

https://support.multitech.com/

Thanks,
Darrik

[Darrik Spaude]

The iSMS hardware isn’t obsolete yet and the latest firmware was just generated yesterday. We haven’t done an official release for quite some time, but we haven’t stopped fixing bugs or adding minor features. Read the ReadMe.txt file for the 1.51.25 firmware to see if there is something new that would help:

https://webfiles.multitech.com/engineering/unofficial-releases/iSMS%20(Formerly%20SMSFinder)/Firmware/

[Darrik Spaude]

If an update to IE 10 doesn’t resolve the problem, then another possible solution to this problem may be to try using the new FaxFinder client. At this time the client is in beta testing, so if you would like to try the beta, then create a new case at Multi-Tech’s Product Support Portal and request the new FaxFinder Client software.

https://support.multitech.com

[Darrik Spaude]

For those having a problem similar to this one, we have a document that provides information related to accessing OCG resources using the MultiConnect SDK from user permissions other than root. If you need that document, then please create a new case at Multi-Tech’s Product Support Portal and request the MultiConnect SDK Resource Permissions document.

https://support.multitech.com

[Darrik Spaude]

If the tarball is extracted in a Linux VM, then the file system should be case sensitive unless some other file system format is used–I would assume Linux always enforces case sensitivity. However, extracting the tarball on the Mac OS X side (not inside the VM) could lead to trouble since by default the drive is formatted as HFS+, journaled (not case sensitive).

[Darrik Spaude]

Hello Ashok,

I assume you have already been looking at the following page:

http://www.multitech.net/developer/products/faxfinder/t-37-advanced-usage/

If possible, you may need to capture the e-mail TCP/IP packet to see how it is formatted by the Mail User Agent (MUA)–the mail application sending the e-mail. Wireshark is useful for TCP/IP capture. Maybe the e-mail body is not the first inline text part and so it isn’t being included in the cover page comments section. From the link above, “By default, the first inline text body part will be used as the cover page comments.”

[Darrik Spaude]

No, that doesn’t appear to be normal. We have done testing with that utility and didn’t notice the malformed responses.

Which product/model are you using?

Which version of CoreCDP are you using?

[Darrik Spaude]

Case created.

[Darrik Spaude]

Hi Daniel,

I have added your request to the existing feature request. At this time we don’t support file formats other than PDF and TIFF. You would have to convert those file formats before sending it to the FaxFinder.

[Darrik Spaude]

Hi Chris,

I recommend submitting this to our Support Portal. You may log in using the same Multi-Tech ID and then create a new case. You will get more help there.

https://support.multitech.com/

Thanks,

Darrik

[Author]

Posts