RE: ftp server windows

["Craig Wright" <cwright () bdosyd com au>]

 IIS has a simple and not particularly  secure firewall. It is a hell of
a lot better but it is definitely not up there for security

Vs-ftp is considered good if patches (like everything)

IIS FTP has had numerous vulnerabilities, especially in the past - the
default proxy forwarding was a good one 

CSW

-----Original Message-----
From: Roger A. Grimes [mailto:roger () banneretcs com]
Sent: 23 July 2005 2:54
To: Leon; security-basics () securityfocus com
Subject: RE: ftp server windows

IIS's FTP is an excellent, secure FTP server. I don't know of any
exploits against it ever other than one obscure client-side
cross-scripting type of attack that was never publicly exploited.

I've been running it for years and never a single problem.

Roger

************************************************************************
***
*Roger A. Grimes, Banneret Computer Security, Computer Security
Consultant *CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4),
CEH, CHFI
*email: roger () banneretcs com
*cell: 757-615-3355
*Author of Malicious Mobile Code:  Virus Protection for Windows by
O'Reilly *http://www.oreilly.com/catalog/malmobcode
*Author of Honeypots for Windows (Apress)
*http://www.apress.com/book/bookDisplay.html?bID=281
************************************************************************
****



-----Original Message-----
From: Leon [mailto:roastin () yahoo com]
Sent: Thursday, July 21, 2005 8:19 PM
To: security-basics () securityfocus com
Subject: ftp server windows

Does anyone know of a good ftp sever for windows with a good security
track record.  WS_FTP is out because of the last vuln where not only did
they not address the issue when it was posted on bugtraq but it took
them close to 3 weeks to come up with a patch.

I have been told about serv-u and bulletproof.  Are there any others
that I should be aware of (with a good history any can google ftp server
windows).

Thanks


                
____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs