Blog
A authenticated local root vulnerability has been discovered in ISPConfig. Short Description A correctly authenticated ISPconfig server administrator is able to modify the group of a shell user which can be misused to …
A severe vulnerability in OpenSSL has been found, the vulnerability is named Heartbleed and affects the heartbeat implementation in Openssl version 1.0.1 up to version 1.0.1f. This velnerability can be used to get the …
Summary A security issue has been found in the sites module which allows customers to create website users for websites which they do not own from within the ISPConfig interface. This issue requires a valid ISPConfig …
ISPConfig 3.0.4.5 is available for download. This release is a bugfix release for ISPConfig 3.0.4. This release contains a security patch for an SQL injection vulnerability: http://bugtracker.is...ls&task_id=2221 It is …
ISPConfig 3.0.4.4 is available for download. This release is a bugfix release for ISPConfig 3.0.4. This release contains a critical security patch for webdav users: http://bugtracker.is...ls&task_id=2157 It is highly …
