The encoded file <b>/usr/local/cwpsrv/htdocs/admin/index.php</b> has expired about cve-2022-44877-white-box HOT 3 CLOSED

Hi there, i followed your instructions. but when i finally finished the steps . I try to connect to cwp. https://xxx.xx.xx.xx:2031 , I got server 500 in response. I checked the log from cwp, PHP message: PHP Fatal error: The encoded file /usr/local/cwpsrv/htdocs/admin/index.php has expired. in Unknown on line 0" How did you try to avoid this and make cwp could be used ?

I haven't encounter that specific error actually. could you show me the snippet of the logs? and also is the error occurred from the part of the downgrade CWP section?

here is my index.php's md5 hash if you wanted to compare it

fe1bc27fd70f157bdd0f758bc3e99c5a  index.php

i'm also going to check on my end if the setup.txt is still capable on the current version (was tested on 0.9.8.1150)

from cve-2022-44877-white-box.

Ow I actually just found the workaround. It seems like each CWP's previous version got their own End-of-Life timeline. Which in this case for version 0.9.8.1146, is probably start from the first April of 2023

So what you wanted to do is actually revert the system clock to at least around March 2023. So for the testing purposes, I use timedatectl set-time to January 2023 in .bashrc file, so it wouldn't be a problem on further sessions

$ cat /root/.bashrc
...
timedatectl set-time 2023-01-01
service cwp-phpfpm restart & wait
service cwpsrv restart & wait
service cwpsrv-phpfpm restart & wait

$ source /root/.bashrc
Redirecting to /bin/systemctl restart cwp-phpfpm.service
[1]+  Done                    service cwp-phpfpm restart
Redirecting to /bin/systemctl restart cwpsrv.service
[1]+  Done                    service cwpsrv restart
Redirecting to /bin/systemctl restart cwpsrv-phpfpm.service
[1]+  Done                    service cwpsrv-phpfpm restart

That should do the trick for me. Thanks for the heads up, I really appreciate it 👌

from cve-2022-44877-white-box.

No actually dont put it in the .bashrc lol, I kept failing on the remote access since it keeps restarting. Just use the command manually

from cve-2022-44877-white-box.