Secure bug: ProFTPD every FTP user see / (root) directory
-
- Posts: 19
- Joined: Fri Jan 09, 2015 2:29 pm
Secure bug: ProFTPD every FTP user see / (root) directory
Hello,
I found an issue. I replaced default FTP server with ProFTPD. I done everything like in Vesta online documentation. Now after login with admin account via ftp client (i have only admin account in my vesta) I am logged into / directory of server and I can see /etc and others directories, not as always to /home/admin. Also when I create another FTP account with specified path, it have access to / directory... For me it's very unsecure. Where I can change it? Or back to Vsftpd?
Best regards, Chris.
I found an issue. I replaced default FTP server with ProFTPD. I done everything like in Vesta online documentation. Now after login with admin account via ftp client (i have only admin account in my vesta) I am logged into / directory of server and I can see /etc and others directories, not as always to /home/admin. Also when I create another FTP account with specified path, it have access to / directory... For me it's very unsecure. Where I can change it? Or back to Vsftpd?
Best regards, Chris.
Re: Secure bug: ProFTPD every FTP user see / (root) director
Hello, Chris.
We talked about this before.
viewtopic.php?f=10&t=7231&p=22959&hilit=sftp#p22959
We talked about this before.
viewtopic.php?f=10&t=7231&p=22959&hilit=sftp#p22959
Temporaly fix is disabling SFTP
In file /etc/rssh.conf disable sftp
#allowsftp
then restart ssh
/etc/init.d/ssh restart
-
- Posts: 19
- Joined: Fri Jan 09, 2015 2:29 pm
Re: Secure bug: ProFTPD every FTP user see / (root) director
I done the changes but admin still have access to / directory. Nothing change. How safely back to Vsftpd? Install it and reverse commands from documentations?
Re: Secure bug: ProFTPD every FTP user see / (root) director
Yep, it should work.krzysztofek wrote:I done the changes but admin still have access to / directory. Nothing change. How safely back to Vsftpd? Install it and reverse commands from documentations?