FTP security problem

we have a major security ÿproblem on our server. it seems to look like that every user can access all FTP sites on our server.

for example when i login to the ftp user usercom via FTP

i get into the userdirectory: /usercom/

then when i let FTP change this directory to another users directory, for example:

/user2com/

it is simply possible to get into this directory without using the right passwords.

I know there are two security documents from HC where i must delete the everyone user and change some other permisison settings, but i have done this all.

does anyone has the same problem? I hope someone can help me.

thanks

Did you really remove USERS from webspace root which is also being inherited by all child folders?