[Xitami] Xitami FTP security problems

Alvaro E. Siman xitami@lists.xitami.org
Fri, 28 Sep 2001 20:04:29 -0400


The default readme file you find under Xitami's FTP says the following:

Uploads are not allowed into
this directory.  Connect with user name 'upload', password 'upload' to
send files to this system.

It lets someone upload to this directory in my server.  I guess someone can
now upload a lot of junk if they wanted to.

On the flip side, it wont let me log in with my superuser password!!!???

How do I get rid of this, and create FTP accounts for the users and
passwords created under VHosts????

None of the FTP directories created under VHosts are working.  What do I
need to do to create these FTP directories....and insure that only the users
with passwords have access to them?

Alvaro Siman