相信 ISPConfig 126.96.36.199 應該不久就會釋出
ISPConfig 3 Security Advisory
A security issue has been found in the sites module which allows customers to create website users for websites which they do not own from within the ISPConfig interface.
This issue requires a valid ISPConfig client login and the manipulation of http variables.
If a client would try to create a login for a different site, his actions are recorded in the sys_datalog and can be tracked down by the administrator even if he deletes this login again.
All ISPConfig 3 versions < 188.8.131.52
A hotfix for ISPConfig 184.108.40.206 is available at ispconfig.org:
This hotfix needs to be applied only to servers with an ISPConfig interface; you do not need to apply this patch on slave servers without an ISPConfig interface.
Installation instructions for the hotfix:
Login to your server as root and execute the following commands:
chmod +x ispconfig-hotfix.sh
Additionally to the hotfix, ISPConfig 220.127.116.11 will be released tomorrow
(August 09. 2013) which fixes this issue as well.
ISPConfig was notified of this issue by researcher Tim Mishutin ( ISPConfig forum user: Almere )
from SecureHoster (www.securehoster.nl).
上午收到官方通知 ISPConfig 18.104.22.168 釋出了
ISPConfig 22.214.171.124 正體中文完成
本次共中譯檔案 224 個(新增中譯檔 6 個)
修正檔案 3 個
並修改 Roundcube 0.9.2、phpMyBackupPro 2.4 整併方式