ownCloud Server Authentication Vulnerability

ownCloud is a free and open source personal cloud storage solution created by German KDE developer Frank Karlitschek. The solution offers file management, music storage, calendars, and more. A security vulnerability exists in ownCloud Server due to the FTP backend "userexternal" failing to provid...

PT-2015-4139

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.18 ownCloud Server versions 6.x prior to 6.0.6 Description The issue allows remote attackers to bypass intended authentication requirements. This is achieved by crafting a password that exploits the FTP...

Server: Login bypass when using the external FTP user backend

ownCloud provides multiple user backends that can be used to authenticate users. One of those backend providers is "userexternal", which authenticates users against FTP, IMAP or SMB servers. This is mainly useful when it is not possible to authenticate against an LDAP server. The FTP backend...