The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Security bug in cPanel/WHM found

Discussion in 'Security' started by Ceko, Aug 6, 2011.

  1. Ceko

    Ceko Registered

    Joined:
    Aug 6, 2011
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    We have found out that 1 of our clients (a reseller) had created a common domain name "hotmail.com" and he had hijacked all emails theat were forwarded to or sent to any hotmail account from within our server.

    Although there is an option in WHM---> Tweak settings ---> domains ---> blocking use of common domains.... actually this option here is only good for falsely relaxing us that as if our clients can no longer create these domains....

    The truth on the other hand is that although they can not create it within their cPanels all and each reseller can easily create them from within their WHM and collect these mentioned emails of others sent/forwarded to hotmail.com addresses and we can prove it.

    Please let us know if you have any fix for this security bug.

    Regards
    Ceko
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,453
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  3. JeffP.

    JeffP. Well-Known Member

    Joined:
    Sep 28, 2010
    Messages:
    164
    Likes Received:
    9
    Trophy Points:
    18
    Hi Ceko,

    This issue is being tracked under case ID # 28634. Thank you for bringing this to our attention.
     
Loading...

Share This Page