RE: OT: FTP Servers

[Gwendolynn ferch Elydyr <gwen () reptiles org>]

On Fri, 6 Jun 2003, Sloane, David wrote:
> First, I don't know if WU-FTPD is still a good server or not.

<snip>

> -----Original Message-----
> From: John Smith [mailto:john.smith () minolta-qms com]
>     My question is this: Is WU-FTPD still a good FTP server to use?  The
> pros are I am experienced with it and it works very well in
> installations I have done.  The (potential) con is the fact that there
> hasn't been a new release of the code since 11/2001 (2.6.2).  I haven't
> seen new exploits for it, so I don't know if the code is that stable or
> if it isn't being maintained anymore.  The home page (www.wu-ftpd.org)
> was last updated 2/18/2003.

Slightly off topic from this (which is already quite clearly off topic,
and I am making an attempt to drag it back towards firewall-wizards), I'd
be curious to know what steps the average member of the list takes to
evaluate any given piece of hardware or software.

I'm also curious to know how many people think that "ask the list" is
a valid first step.

Personally, given the rate and number of vulnerabilities that WU-FTPD
has demonstrated, and the general type of vulnerabilities, (not to mention
the use of ftp in the first place) I'd be inclined to examine other
options.

cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet.  This is the defining metaphor of my life right now."

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards