I found a way to get root access within seconds on *any* box running WHM/CPanel ...with the help of a WHM feature. I'm still waiting for someone from the CPanel staff to get back to me. Their forums seem abandoned ...at least by the staff members. :eek3:

I think its partly in the wrong forum. Feel free to move it.

Does it require access to WHM to get root access? If so, access to WHM is as bad as root. With WHM I can format a herd drive.

Well, you can give someone WHM access to certain features without actually giving them 'root' access. Right now, simply reseller access would do it but with what i've tested so far, i think there are ways around that too ...

ok , thanks for the heads up.

i'm off to temporarily disable some customers whm and shell access :)

Its a pretty hard to find bug so i doubt many people will even notice it. I'm still waiting for someone at Cpanel to reply :rolleyes: I don't know if the same problem exists with VDI's Webpanel but i can test a box in case someone from VDI reads this thread. :)

Does someone just need access to WHM? If so, CPanel had better get it straightened out ASAP.

:eek: eek

:puke: cpanel.net

Kiwi, if you could email me the details of the exploit i'll make sure to stay on Nick's case about getting it fixed, I just don't like to yell at people without knowing the full extent or the feasibility of a problem or issue.

Tnx