[FTPSERVER-497] Anonymous login with unlimited logins

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.1.1
• Component/s: Server
• Assignee: Unassigned
• Reporter: Joshua Engel
• Created: 24/Jul/20 11:43
• Updated: 24/Jul/20 11:43

Description

In the org.apache.ftpserver.command.impl.USER class is following if-condition:

if (anonymous && (currAnonLogin >= maxAnonLogin))

which is always true if anonymous logins are unlimited (maxAnonLogin = 0), so no anonymous login is permitted.