Menu

#2287 Webmin deleted all users !!!!!!!!!!!!!!

open
None
5
2005-10-20
2005-10-19
Anonymous
No

Webmin 1.180
Red Hat 7.2

I've been using webmin since the beginning.
This morning (as usual) I was modifying the password of
a local user (Users and Groups) of my remote server
when, after clicking on save button, I discovered that all
the users of my server were deleted !!!!!!
Webmin deleted all users, including root!

Please do not tell me I am using an old and unsupported
webmin version, I stopped updating it because of too
many bugs in the latest releases.

Anyway, I will stop using webmin, it is too buggy and
too risky!

Sorry for that

Maurizio
fulvio_fulvio@hotmail.com

Discussion

  • Nobody/Anonymous

    Logged In: NO

    This is the log:

    Details of logged action 1129728538.9609.0
    Description Modified user eurospand
    Webmin module Users and Groups Generated by script
    useradmin/save_user.cgi
    Webmin user xxxxxx Client IP or hostname ppp-62-10-38-
    128.dialup.tiscali.it
    Session ID 2a3506bbb931aa56ea57cf8f7730bc7b Date and
    time 19/Ott/2005 07:28:58

    Changed file /etc/group
    0a1,202
    > root❌0:root
    > bin❌1:root,bin,daemon
    > daemon❌2:root,bin,daemon
    > sys❌3:root,bin,adm
    > adm❌4:root,adm,daemon
    > tty❌5:
    > disk❌6:root
    > lp❌7:daemon
    > mem❌8:
    > kmem❌9:
    > wheel❌10:root,krisw
    > mail❌12:mail
    > news❌13:
    > uucp❌14:
    > man❌15:
    > games❌20:
    > ftp❌50:
    > sshd❌74:
    > nobody❌99:
    > users❌100:
    > slocate❌21:
    > utmp❌22:
    > mailnull❌47:
    > rpc❌32:
    > rpcuser❌29:
    > mysql❌27:mysql
    > majordomo❌30:

    omissis

    Changed file /etc/gshadow
    0a1,202
    > root:::root
    > bin:::root,bin,daemon
    > daemon:::root,bin,daemon
    > sys:::root,bin,adm
    > adm:::root,adm,daemon
    > tty:::
    > disk:::root
    > lp:::daemon
    > mem:::
    > kmem:::
    > wheel:::root
    > mail:::mail
    > news:::
    > uucp:::uucp
    > man:::
    > games:::
    > ftp:::
    > nobody:::
    > users:::
    > slocate❌:
    > utmp❌:
    > mailnull❌:
    > rpc❌:
    > rpcuser❌:
    > majordomo❌:

    omissis

     
  • Nobody/Anonymous

    Logged In: NO

    Also,

    please consider that many people are using older versions f
    webmin like 1.180, and they cannot or do not want to update
    it like me, for several reasons.
    IMHO not updating serious bugs in older versions is a very
    bad decision!

     
  • Nobody/Anonymous

    Logged In: NO

    OK, I see you removed this BUG report from the bug list.
    Instead of responding or try to resolve problems you hide
    them!

    That's bad!

    Maurizio

     
  • Jamie Cameron

    Jamie Cameron - 2005-10-20
    • labels: 441849 -->
     
  • Jamie Cameron

    Jamie Cameron - 2005-10-20

    Logged In: YES
    user_id=129364

    There was a bug in older versions that could cause this to
    happen if you run out of disk space on the partition
    containing the /etc directory. It is fixed in version 1.190,
    which you should be able to upgrade to without major problems.

    By the way, the bug report hasn't been removed from the list
    - but you entered it under the wrong category (Usermin
    Bugs), which is why it probably wasn't visible. It has now
    been categorized properly..

     
  • Eduardo Diaz

    Eduardo Diaz - 2005-10-20

    Logged In: YES
    user_id=36388

    I think that jcameron make a very good work,.

    if I don't want update one product but I don't want bugs?.

    Sorry, for the people that had a problem, but if I can't
    support/upgrade one product that I install and make more
    easy and faster my administration, I must buy support for
    other company.

    Every two weeks I check the update and allways upgrade
    webmin. or can wait some weeks and if I don't have many bugs
    upgrade, but don't update it is very dangerous for the
    security of the machine.

    If don't want problems I use one formal package from redhat
    or use true commands as useradd od vi editor.

    Maurizio you are using a BSD software as BSD I think that
    you don't have any warranty.

    It is only my opinion.
    regards.

     

Log in to post a comment.

Auth0 Logo