The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

/usr/local/cpanel/src/3rdparty/gpl/mailman-2.1.3

Discussion in 'E-mail Discussions' started by Curto, May 21, 2004.

  1. Curto

    Curto Active Member

    Joined:
    Sep 4, 2003
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    NY, USA
    Is there a reason for /usr/local/cpanel/src/3rdparty/gpl/mailman-2.1.3 to be owned by nobody instead of root?

    This is another path writable by nobody with no noexec setting affecting it.

    Also:
    /usr/local/cpanel/src/3rdparty/bsd/imap-2002e-cpanel

    And another...
    /usr/local/urchin
    All files under /usr/local/urchin are owned by nobody with rwx... this could allow a malicious user to remove urchin from the server.
     
    #1 Curto, May 21, 2004
    Last edited: May 21, 2004
Loading...

Share This Page