Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 12th September 2006, 08:28
djtremors djtremors is offline
Senior Member
 
Join Date: Apr 2006
Location: Sydney
Posts: 278
Thanks: 0
Thanked 13 Times in 11 Posts
Default issue with no admin user allocated

Hey all,

Just noticed an issue where I have a user as an admin and files on their home path is 644 but I noticed that when I remove the admin rights to the ispc system for that site, all files belong to "apache" user now.

This opens the server up for writing now and any content can be changed if there is a vulnerable page whereas as the user they can't modify the files with the 644 permissions.

PHP Code:
drwxrwxr-x   2 apache web7 4096 Jul 21 10:32 cgi-bin
drwxr
-xr-x   3 apache web7 4096 Sep  5 09:58 log
drwxrwxrwx   2 apache web7 4096 Sep 12 12
:13 phptmp
drwxr
-xr-x   2 apache web7 4096 Jul 21 10:32 ssl
drwxr
-xr-x  11 apache web7 4096 Sep  8 21:24 user
drwxrwxr
-x  17 apache web7 4096 Sep 12 15:25 web 
anyone notice this?
Reply With Quote
Sponsored Links
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Statistic not working mzo Installation/Configuration 49 20th April 2011 13:19
Cannot receive emails : DSN: User Unknown shiidii Installation/Configuration 24 22nd September 2006 19:05
Virtual Users And Domains With Postfix, Courier... USER Web admin? Maquiavelo HOWTO-Related Questions 4 10th June 2006 22:12
Users and websites aren't created Glorfindel Installation/Configuration 9 23rd February 2006 05:20
Virtual Users And Domains With Postfix, Courier And MySQL (+ SMTP-AUTH, Quota, SpamAs pontifex HOWTO-Related Questions 2 26th October 2005 18:54


All times are GMT +2. The time now is 00:36.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.