View Single Post
Old 06-21-2003, 10:12 AM  
Zer0Racer
Senior Member
 
Join Date: Oct 2002
Posts: 703
Exclamation Bug in [Change-Permissions]

When testing gadmin stuff I stumbled onto something...

Seems gadmins (users with G flag) AND regular users can access certain commands that they are not supposed to.

When gadmin/user tries to SITE CHANGE groups other than their own and users NOT in gadmin's primary group:
Code:
[Change-Permissions]
admingroup        = 1M		Permissions denied.
credits           = 1M		Permissions denied.
flags             = 1M		Permissions denied.
groupdescription  = 1M		Command successful. <-- Bug!
groupslots        = 1M		Command successful. <-- Bug!
groupvfsfile      = M		Command successful. <-- Bug!
homedir           = 1GM		User is not in your primary group. Command successful. (but no change)
logins            = 1M		Permission denied.
passwd            = 1GM		User is not in your primary group. Command successful. (but no change)
ratio             = 1GM		User is not in your primary group. Command successful. (but no change)
stats             = M		Permission denied.
tagline           = 1GM		User is not in your primary group. Command successful. (but no change)
vfsfile           = M		Permission denied.
Only tested on ioFTPD 4.9.4r.
Zer0Racer is offline