System Accepts any password with correct username.

Report bugs or issues with Core FTP Server here
Post Reply
mad
Posts: 2
Joined: Fri Feb 01, 2008 5:58 am

System Accepts any password with correct username.

Post by mad »

Core FTP Server 1.0 Build 244

User Details - General
Always allow login (unchecked)
still allows any password with a valid username to access system and perform FTP commands permitted for that user. Seems the config does not save the checked box. I have attempted to change settings while service is running and restart and stopped, change settings then restarted service. On all attempts the config is not saved.

The same thing occurs when trying to check "Allow users to change password", check the box and it is not checked when you open the GUI after save.

Checking "Anonymous User", does the oppisite, when checked no anonymous access is allowed. Unchecked it allows anonymous login.
mad
Posts: 2
Joined: Fri Feb 01, 2008 5:58 am

Post by mad »

To clarify what I mean by"Always allow login (unchecked)
still allows any password with a valid username to access system and perform FTP commands permitted for that user. "

Example:
What is in the config:
User: joe
password: thisisthepassword

The user logs in with:
User: joe
password: takethiswrongpassword

and it still allows the user to access the system with the incorrect password.
Post Reply