The Planet Forums > All Logs Viewable by FTP users

Full Version: All Logs Viewable by FTP users

The Planet Forums > Control Panels > cPanel/WHM

Yonu

Nov 6 2003, 05:39 AM

Hi,

I noticed today that when I log in to get my log files (using the username_logs@ ftp username) I can see all the other sites log files on the server

How can I stop this?

Thanks in advance,

Yonu,

Hostiberia

Nov 6 2003, 07:47 AM

Aaaarrrrggghh !!!

It's true !! anyone has access to all logs for all users that are on the same server !!!

ne1 knows how to solve this issue ?????

CORRECTION:
Users has no access to others' raw log files, but can access to bytes and offset logs.
Also, it's no good that a customer could see who's also on the server and their subdomains and addons domains names

Yonu

Nov 6 2003, 10:04 AM

QUOTE

CORRECTION:
Users has no access to others' raw log files, but can access to bytes and offset logs.
Also, it's no good that a customer could see who's also on the server and their subdomains and addons domains names

I can download the other domains raw logs as well

and Im not logged in as root - just a generic user.

Yonu

Nov 6 2003, 10:10 AM

Could somebody tell me please, how can I disable all the log usernames - ie: the username_logs@ ones.

Its just a temporary measure.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.