Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Versioncheck warns writable, but FTP can't change permissions?  (Read 4464 times)

0 Members and 1 Guest are viewing this topic.

Eric Chadwick

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 20
Versioncheck warns writable, but FTP can't change permissions?
« on: November 09, 2007, 08:41:51 pm »
Hello.

I upgraded to 1.4.14, and ran Versioncheck.php, and it reports several folders as writable. For example:
=============
Folder writable
The folder "bridge" is writable. This is an unnecessary risk, coppermine only needs read/execute access.
=============

My FTP client, Filezilla 2.2.19a, shows the "bridge" folder permissions as:

drwxr-xr-x

In other words:
Owner permissions: Read/Write/Execute
Group permissions: Read/Execute
Public permissions: Read/Execute

Is Versioncheck showing this as a risk because it has been run by me the owner, and thus it sees the folder as writable?

Since I am the only admin, but Group/Public don't have write access, is there still a risk?

FWIW, my site is hosted, I'm not a server admin.

Thanks for any help.
« Last Edit: November 10, 2007, 03:49:46 am by TranzNDance »
Logged

Nibbler

  • Guest
Re: Versioncheck warns writable, but FTP can't change permissions?
« Reply #1 on: November 09, 2007, 08:48:47 pm »
That's fine, don't worry about it.
Logged

Eric Chadwick

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 20
Re: Versioncheck warns writable, but FTP can't change permissions?
« Reply #2 on: November 10, 2007, 01:51:02 am »
OK, thanks for the reply.
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.016 seconds with 15 queries.