Problems of security on ISPConfig

[misterm]

Hello with all

One has just affirmed me that there are problems of security on the current version of ISPConfig, is this possible falko & till?

Yours sincerely

MM

[till]

Originally Posted by misterm

One has just affirmed me that there are problems of security on the current version of ISPConfig, is this possible falko & till?

There are no known security problems with ISPConfig. If you are talking about the entries from May / june 2006, they did not affect the security of ISPConfig and the code has also changed since 2.2.6 to avoid them when someone uses ISPConfig code in third party projects. Please red my answers on bugtraq if you want to get a detailed description. Please send me a detailed description of the security problems you might have found as PM or by email to dev [at] ispconfig [dot] org. We will review them then and update this thread.

[misterm]

Hello till

There are not problems, it is that, I had proposed to a person to install ISPConfig on a waiter at OVH, is it has me to affirm that there was bugs of security, but it gave me the version of this one...

Well with you

MM

[till]

Sorry but I dont understand what you mean. Does this person tell you that there are security problems or not? If yes, please send me a detailed description of whyt this person told you and we will review it.

[misterm]

OK till,

I go will ask him, does not worry you

Good day

MM

[misterm]

Hello till

IT was said to me that it was on the new version of ISPConfig 2.2.7 which there are bugs of security, but, I awaits the notes as fast as possible....

Well with you

MM

[Ben]

If though, pls just comment them to till or falko to avoid anybody reading things and creating an exploit, just in case the bugs are "heavy"