This website is deprecated, and remains online only for historic access to old issues and docs for historic versions of Virtualmin. It has been unmaintained for several years, and should not be relied on for up-to-date information. Please visit www.virtualmin.com instead.

Possible bug in V-min script

4 posts / 0 new

Topic locked

Last post

#1 Thu, 02/20/2014 - 08:45

BossHog

Possible bug in V-min script

Howdy, while migrating to a new VPS I have noticed an oddity while setting up an admin user. Since it may be considered a security issue, I am hestitant to post details. After looking in the bug tracker and not finding the same issue, I was ready to post, however it appears that all posts become public. Would it be possible to contact me via my forum email with instructions, or comment in this thread? Thanks, Joe

#2 Thu, 02/20/2014 - 09:17

andreychek

Howdy,

If you think you found a security issue, my suggestion would be to go to the Support link at the top of the page here, create a new support request -- and to check the "Make post private" link, which makes it so that only the Virtualmin staff can see it.

Then we can work with you privately regarding the issue.

Thanks!

-Eric

#3 Thu, 02/20/2014 - 15:39 (Reply to #2)

BossHog

Okay, thanks Eric.

#4 Thu, 02/20/2014 - 15:00

lp86

One issue I noticed is that by default all server administrators have shell access.

Topic locked