Every one can execute for example:
site change AnyGrp GROUPVSFILE ..\etc\admin.vfs
although in .ini its being disallowed:
Code:
[Change-Permissions]
groupvfsfile = M
Example logged in as normal user (no +M flag):
[code]
[R] (02:15:54) SITE CHANGE AnyGrp GROUPVFSFILE ..\etc\admin.vfs
[R] (02:15:55) 200 CHANGE Command successful.
[R] (02:16:15) CWD .
This is pretty bad :<