Re: chroot'ing ftpdFrom: Doug Hughes (doug@Eng.Auburn.EDU)
- Previous message: André Carezia: "Re: Openssh rollout on solaris 7"
- In reply to: firstname.lastname@example.org: "Re: chroot'ing ftpd"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 17 Dec 2001 13:27:44 -0600 (CST) From: Doug Hughes <doug@Eng.Auburn.EDU> To: email@example.com
On Mon, 17 Dec 2001 firstname.lastname@example.org wrote:
> Michael Tucker writes:
> > Hence the market niche for products like wu-ftpd (don't use this! it's
> > riddled with security holes!) and proftpd (use this instead).
> proftpd is better than wuftpd, but it's had it's share of security holes
> Ncftpd has never had any. I've been using it continuously for at least four
> years (maybe five?) and it has performed flawlessly. it's not free, but in
> this case, you get what you pay for, by far.
logdaemon ftpd - (comes with wietse logdaemon package).
one hole back in 98 or so (the signals one - all ftpds were vulnerable).
nothing before or since. Free. small and verifiable. No extra cruft. It
just does simple ftpd stuff.