User given root access by mistake?

kjmz · 07-26-2005, 04:48 PM

Hi,

I recently bought a site off of eBay and I was gettin the site from cPanel when I noticed that at the top it said "Warning: You are logged in using the reseller or root password." I really didn't know what it mean't I looked a little lower and what do you know I had access to all the site on the server! (Look at screenshot attached.)

This really is not good what do you guys think I should do? Should I contact the owner of the server? This may be happening with everyone?

Comments please!

KPR · 07-26-2005, 04:55 PM

Contact him right away incase someone who isnt as honest is able to access it all also.

kjmz · 07-26-2005, 04:58 PM

Originally Posted by KPR

Contact him right away incase someone who isnt as honest is able to access it all also.

Think I should ask for some money

lol

I know I report someone before to Google Adsense because they had "Click the Ads Above to Support Us", they didn't even say "Thank you."

I honestly don't even know who the host is maybe if I do a nameserver check I will find out.

---------------------------------------------
????: NamePros.com http://www.namepros.com/web-hosting-discussion/110137-user-given-root-access-by-mistake.html

I just emailed him, here the email:

Hi,

I would just like to notify you that you have given me and maybe others root access. I actually bought the site speedbanner.biz from eBay and I got a cPanel account to transfer the site. I see that I could access all the sites on your server because of this. I'm just notifying you because I would hate for this to happen to me if I owned a hosting company.

I would appreciate it if I got something for pointing this out to you and not doing any damage to your server

Thanks

Scott · 07-26-2005, 05:23 PM

Can you login to WHM? That's non-SSL port 2086 or SSL port 2087. If so, post a screenshot of the navigation.

Thanks,
-Scott

hotrod12 · 07-26-2005, 05:29 PM

All that means is that the cPanel account that he gave you is his main account or even his only account on the server. I would think that he would know what he is doing by giving you that kind of access so there should be no need to contact him but as long as you don't touch anything but the backup function then you should have no problem. Also, Scott he would definetly have access to WHM because he was given root access under the reseller/server.

dgaussin · 07-27-2005, 12:39 AM

You have this message when you're logged on a CPanel account using the reseller or root layer. Not the same thing to have root access... I guess you have a reseller account...

Veolus · 07-27-2005, 01:00 AM

Yep, David is most likely right in this case. It could just be a reseller account

Sabre · 07-27-2005, 01:46 AM

Even if its a reseller login, he can still access everyone else account on that reseller...

Scott · 07-27-2005, 02:02 AM

Originally Posted by Sabre

Even if its a reseller login, he can still access everyone else account on that reseller...

Assuming there are accounts. Exactly the reason I asked for a SS, then we could verify if it's root (or not).

kjmz · 07-27-2005, 02:32 AM

Originally Posted by Scott

Assuming there are accounts. Exactly the reason I asked for a SS, then we could verify if it's root (or not).

I tried to login and it wouldn't work. I can access all the different sites though.

Oblivion. · 07-27-2005, 02:05 PM

Originally Posted by kjmz

I tried to login and it wouldn't work. I can access all the different sites though.

Try clicking the direct link to WHM when you're logged into CPanel, After seeing the items on the top of the WHM menu, we would be able to tell if it was a reseller acount, or root access that you've got

.

07-26-2005, 04:55 PM	#2 (permalink)
KPR Senior Member Join Date: May 2005 Location: Sunny Scotland Posts: 1,757	Contact him right away incase someone who isnt as honest is able to access it all also. __________________ Online Shopping at the Cozy Shop

07-27-2005, 01:46 AM	#8 (permalink)
Sabre First Time Poster! Join Date: Aug 2004 Location: Chelmsford, UK Posts: 11,421	Even if its a reseller login, he can still access everyone else account on that reseller... __________________ NamePros Google Panda / Penguin Thread SEO Services \| UK PPC Company \| UK Website Analysis Service Cheap Backpacker Travel Insurance \| Cheap Family Travel Insurance \| Cheap Travel Insurance \| Cheap Holiday Insurance\| UK Dedicated Servers

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Adding FrontPage users and determining their access!	priyanka[imported]	Web Hosting Discussion	0	12-16-2004 08:14 PM
A Beginner's Guide to Securing Your Server Part 1 of 3 (Security Inside WHM/CPanel)	000000000	Webmaster Tutorials	7	10-09-2004 01:17 PM
Access denied for user	redhippo	Programming	6	08-26-2004 05:21 AM
Hyperpipe.net webhosting offers	hyperpipe	Web Hosting Offers	0	03-28-2004 03:56 AM

07-26-2005, 05:23 PM	#4 (permalink)
Scott Senior Member Join Date: Jun 2003 Location: UK Posts: 3,541	Can you login to WHM? That's non-SSL port 2086 or SSL port 2087. If so, post a screenshot of the navigation. Thanks, -Scott

07-26-2005, 05:29 PM	#5 (permalink)
hotrod12 Senior Member Join Date: Jan 2005 Location: USA Posts: 1,149	All that means is that the cPanel account that he gave you is his main account or even his only account on the server. I would think that he would know what he is doing by giving you that kind of access so there should be no need to contact him but as long as you don't touch anything but the backup function then you should have no problem. Also, Scott he would definetly have access to WHM because he was given root access under the reseller/server.

07-27-2005, 12:39 AM	#6 (permalink)
dgaussin Senior Member Join Date: May 2004 Location: France Posts: 1,226 Follow @dgaussin	You have this message when you're logged on a CPanel account using the reseller or root layer. Not the same thing to have root access... I guess you have a reseller account...

07-27-2005, 01:00 AM	#7 (permalink)
Veolus Account Closed Join Date: Dec 2004 Location: Australia Posts: 4,308	Yep, David is most likely right in this case. It could just be a reseller account

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)