Re: configuring ftpd for upload

[Michael Schmidt <mschmidt@fh-koblenz.de>]

On Mon, Sep 04, 2000 at 10:52:44AM +0100, Anil Madhavapeddy wrote:
> Michael Schmidt wrote:
> > Why don't you (not only Andreas but others too) like proftpd?
> > Where is the risk to run it under openbsd?
> 
> I used to like ProFTPD, but I gave up on it after the 4th or
> 5th remote root exploit that came out for it.
> 
> It may well be secure now, but I'd rather wait and see if it
> stands the test of time rather than risk my servers on it again.

It's almost two weeks ago, nevertheless:

You may look at:  
http://cr.yp.to/publicfile.html

Nobody is perfect, that's correct. In the above URL proftpd's past 
security problems are mentioned, but it's mentioned too when they have 
been repaired, shall say no longer existing. Of course that's no 
guarantee that no other ones are in it, but I would say that goes for 
all ftpds, doesn't it?

Have a nice day
Michael

-- 
Michael  Schmidt            mschmidt@fh-koblenz.de
 
                  MIRROR OF
DJGPP  *  Ghostscript  *  IPFilter  *  Linux-HOWTO