ProFTPD ->vsftpd

[tddlard]

I have just come accross this article about a security flaw in ProFTPD and notice that the version used (based on the message when I login) is a version with this flaw.

http://xforce.iss.net/xforce/alerts/id/154

Would it be wise to move to vsftpd? Or ditch ftp and move to sftp?

[paulredpath]

Em, we arent running an RC. We are running the final version.

So we arent affected.

[rob]

Originally posted by tddlard
I have just come accross this article about a security flaw in ProFTPD and notice that the version used (based on the message when I login) is a version with this flaw.

http://xforce.iss.net/xforce/alerts/id/154

Would it be wise to move to vsftpd? Or ditch ftp and move to sftp?

This advisory was about a bug last September, that was corrected in the final release. The advisory is only valid up to rc2, not the final release as Paul says.

Also, using sftp would just alienate all the users that use Windows, there's still not a decent SFTP client for Windows, and hence this would be a pain.

Thanks for your suggestion.

[tddlard]

I didn't realise that were not on a RC, I guess I need to get more cafine in my system to make me more aware.

Originally posted by Rob
Also, using sftp would just alienate all the users that use Windows, there's still not a decent SFTP client for Windows, and hence this would be a pain.

Actually I use Filezilla for both ftp and sftp transfers under windows, plus it's freeware.

http://filezilla.sourceforge.net

I have not been able to find a client as good that supports resuming with sftp.