Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 470
Alerts This Week
Warning Icon 1 470

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 1 articles for you...
77

Comparing the Differences Between Vsftpd and ProFTPd FTP Servers

FTP is a standard protocol that is used to transfer files widely, and FTP servers like Vsftpd and ProFTPd provide a way to use that protocol and access plus transfer files stored on a remote server. Here we quickly learn the difference between Vsftpd and ProFTPd. . vsftpd (Very Secure FTP Daemon) is a GPL-licensed FTP server software developed to provide a secure but fast way to transfer files. It is popular among Linux users because of its simplicity and efficient use of system resources. That’s the reason why most Linux distros such as Redhat, Fedora, Ubuntu, Debian, and more offer this FTP server package to install directly from the base repository of the system. Learn – How to install VSFTPD to Setup FTP Server on Ubuntu 22.04. ProFTPd (Pro FTP daemon) is also an open-source FTP server just like Vsftpd but comes highly customizable and extensible. It offers a wide range of advanced features like virtual hosts, SSL/TLS encryption, and LDAP authentication. It is designed to be a highly feature-rich FTP server. . When comparing vsftpd and ProFTPd, both excel in secure file transfers, but vsftpd is simpler and more performance-oriented, while ProFTPd offers flexibility and advanced features. Vsftpd, ProFTPd, FTP Server Comparison, File Transfer Protocols. . LinuxSecurity.com Team

Calendar%202 Mar 29, 2023 User Avatar LinuxSecurity.com Team Server Security
79

Configuring Vsftpd with MySQL: Enhanced FTP Security on Debian

Layers upon layers of security should make anyone feel warm and fuzzy about their secured application. I like the fact that if anyone is going to root me, they're going to have to WORK for it. FTP was always an area where I felt it could use a little more work in locking down its defenses. Enter Vsftpd along with a tag team partner of virtualization, and you've got a how-to of sandboxing your FTP server into a virtual environment. . Vsftpd is one of the most secure and fastest FTP servers for Linux. Usually vsftpd is configured to work with system users. This document describes how to install a vsftpd server that uses virtual users from a MySQL database instead of real system users. This is much more performant and allows to have thousands of ftp users on a single machine. The link for this article located at HowtoForge is no longer available. . Vsftpd is one of the most secure and fastest FTP servers for Linux. Usually vsftpd is configured to . layers, security, should, anyone, fuzzy, about, their, secured, applicatio. . LinuxSecurity.com Team

Calendar%202 Jun 26, 2007 User Avatar LinuxSecurity.com Team Security Projects
77

Selecting An FTP Server: Key Features And Security Considerations

A FTP server does the heavy lifting of security, organization, and transfer control, while clients usually just take part in saving transferred files to a specified location on your hard drive. If you are really into business and plan on spending money on your FTP server, you'll want to focus on what kind of qualities and characteristics the software provides. . . .. A FTP server does the heavy lifting of security, organization, and transfer control, while clients usually just take part in saving transferred files to a specified location on your hard drive. If you are really into business and plan on spending money on your FTP server, you'll want to focus on what kind of qualities and characteristics the software provides. First and foremost, look for security. You should be able to allow access to some files without compromising the security of the entire system. Your operating system will affect your security needs. You can use almost any Win95/98/NT, Mac, Linux, and Unix machine as an FTP server. Conversely, any machine that supports TCP/IP and has an FTP client can access an FTP server. The link for this article located at Tech TV is no longer available. . A FTP server does the heavy lifting of security, organization, and transfer control, while clients u. server, heavy, lifting, security, organization, transfer, control, while, clients. . LinuxSecurity.com Team

Calendar%202 Jul 13, 2004 User Avatar LinuxSecurity.com Team Server Security
77

vsftpd: 1.0 Release Details On Security And Scalability

Chris Evans, author of the "very secure" FTP daemon, has released version 1.0 of his software. The previous version included bandwidth control. Chris writes, "vsftpd is also extremely fast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment.". . .. Chris Evans, author of the "very secure" FTP daemon, has released version 1.0 of his software. The previous version included bandwidth control. Chris writes, "vsftpd is also extremely fast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment." Chris is also looking for ideas for his next project. Date: Mon, 12 Nov 2001 22:34:56 +0000 (GMT) From: Chris Evans To: This email address is being protected from spambots. You need JavaScript enabled to view it. Subject: vsftpd-1.0.0 Ok, the thing deserves a 1.x release version now, it seems to be doing useful work on various production sites. Before the 1.0 release details, something potentially interesting: my next project. Before I start investigating the feasability, I want to judge the demand. I'm considering a "vssshd", which would be a very cut down/minimal server-only implementation of the ssh2 protocol. The intended audience would be paranoid people who want no-frills secure remote access. I'm not saying the current sshd implementations are insecure; however, their design leaves something to be desired. In particular there seems to be rather too much use of "root" (witness the severity of the deattack.c flaw). I am tempted to investigate the possibility of writing a minimal sshd where all protocol parsing and in particular SSL code runs as non-root in a chroot() environment. vsftpd-1.0.0 Approximate changelog: - Fix build on Red Hat7.2 - Fix build on Mandrake systems README: vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but a reflection that I have written the entire codebase with security in mind, and carefully designed the program to be resilient to attack. Recent evidence shows that vsftpd is also extremelyfast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment. vsftpd is now a proven stable solution. Of particular note, Red Hat used vsftpd to enable to support 15,000 concurrent users across their server pool. This extreme load was generated by the release of Red Hat 7.2 to the world. Cheers Chris . Uncover ProFTPD release 1.3.5, a robust FTP server created by Rob Richards, intended for efficiency and extensibility.. vsftpd, secure ftp, file transfer, open source daemon. . LinuxSecurity.com Team

Calendar%202 Nov 12, 2001 User Avatar LinuxSecurity.com Team Server Security
77

vsFTPd Bandwidth Control: Enhancements For Secure File Transfers

vsFTPd, the "very secure" FTP daemon, now includes the ability to control bandwidth by preventing the link from being saturated. "vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but a reflection that I have written the entire codebase with security in mind, and carefully designed the program to be resilient to attack.". . .. vsFTPd, the "very secure" FTP daemon, now includes the ability to control bandwidth by preventing the link from being saturated. "vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but a reflection that I have written the entire codebase with security in mind, and carefully designed the program to be resilient to attack." Date: Sat, 22 Sep 2001 02:07:22 +0100 (BST) From: Chris Evans To: This email address is being protected from spambots. You need JavaScript enabled to view it. Subject: list back / vsftpd release Hi, The list is back after a bit of a hiccup. Any exciting auditing activity going on? And there's a new vsftpd release md5sum 63d847253ba551c00966cbdf70ee8837 vsftpd-0.9.2.tar.gz - Bandwidth limiting - Speedups for large directories - Fix chown_upload - User deny list - Many other little enhancements 0.9.1 was very stable and is being used on some big production sites. Hopefully 0.9.2 should be just as useful. Cheers Chris . vsFTPd, the 'very secure' FTP daemon, now includes the ability to control bandwidth by preventing th. vsftpd, 'very, secure', daemon, ability, control, bandwidth, preventing. . LinuxSecurity.com Team

Calendar%202 Sep 23, 2001 User Avatar LinuxSecurity.com Team Server Security
77

OpenBSD: Urgent Advisory for ftpd Buffer Overflow Threat and Remote Access

An esoteric buffer overflow bug in OpenBSD has been upgraded in importance after it was discovered that, in certain conditions, it could allow a cracker to gain remote access to a server. Users are recommended to apply a patch to fix . . . . An esoteric buffer overflow bug in OpenBSD has been upgraded in importance after it was discovered that, in certain conditions, it could allow a cracker to gain remote access to a server. Users are recommended to apply a patch to fix the one-byte buffer overflow vulnerability present in an OpenBSD service called ftpd(8). The issue particularly affects non-anonymous FTP (File Transfer Protocol) servers, and administrators of these services are also been encouraged to use more secure transport mechanisms. For a system to be vulnerable, ftpd must have been enabled by the administrator because by default OpenBSD ships with the service turned off - though it is a frequently used service. The link for this article located at The Register is no longer available. The link for this article located at The Register is no longer available. . An esoteric buffer overflow bug in OpenBSD has been upgraded in importance after it was discovered t. esoteric, buffer, overflow, openbsd, upgraded, importance. . LinuxSecurity.com Team

Calendar%202 Dec 20, 2000 User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200