vsftpd

vsftpd, (or very secure FTP daemon),[1] is an FTP server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6, TLS and FTPS (explicit since 2.0.0 and implicit since 2.1.0). It is the default FTP server in the Ubuntu, CentOS, Fedora, NimbleX, Slackware and RHEL Linux distributions.

vsftpd
Developer(s)Chris Evans
Stable release
3.0.3 / July 25, 2015 (2015-07-25)
Operating systemUnix-like systems
TypeFTP daemon
LicenseGPL
Websitesecurity.appspot.com/vsftpd.html

Compromised website

In July 2011, it was discovered that vsftpd version 2.3.4 downloadable from the master site had been compromised.[2][3] Users logging into a compromised vsftpd-2.3.4 server may issue a ":)" smileyface as the username and gain a command shell on port 6200.[3] This was not an issue of a security hole in vsftpd, instead, an unknown attacker had uploaded a different version of vsftpd which contained a backdoor. Since then, the site was moved to Google App Engine.

gollark: *Are* there cons beyond "sometimes it blocks things overaggressively"?
gollark: Or don't imagine it, unless you want imaginary adverts?
gollark: Yes, imagine NOT blocking all advertisements.
gollark: But more trees → more sequestered carbon → more good.
gollark: The obvious solution is laser-launched planes.

See also

References
  1. "README file from source code".
  2. vsftpd Compromised Source Packages Backdoor Vulnerability at SecurityFocus
  3. Evans, Chris (2011-06-03). "Alert: vsftpd download backdoored". Retrieved July 7, 2011.


This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.