From owner-freebsd-stable@FreeBSD.ORG Sun May 14 10:29:06 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7E19C16A403 for ; Sun, 14 May 2006 10:29:06 +0000 (UTC) (envelope-from bazerka@beardz.net) Received: from www.beardz.net (host86-141-164-192.range86-141.btcentralplus.com [86.141.164.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id D9A7843D46 for ; Sun, 14 May 2006 10:29:05 +0000 (GMT) (envelope-from bazerka@beardz.net) Received: from [127.0.0.1] ([127.0.0.1]) by www.beardz.net with Microsoft SMTPSVC(6.0.2600.2180); Sun, 14 May 2006 11:29:21 +0100 Message-ID: <44670681.7020703@beardz.net> Date: Sun, 14 May 2006 11:29:21 +0100 From: Jase Thew User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: freebsd-stable@freebsd.org References: <20060504134723.M54964@enabled.com> <20060504174447.GC2095@ayvali.org> <18e02bd30605051302x7575859u5f6c71031fa6f5c5@mail.gmail.com> <20060514020756.qywfiti4g0skk4co@webmail.1command.com> In-Reply-To: <20060514020756.qywfiti4g0skk4co@webmail.1command.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 14 May 2006 10:29:21.0359 (UTC) FILETIME=[43601DF0:01C67741] Subject: Re: FTPd recommendation? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 May 2006 10:29:06 -0000 Chris H. wrote: > Quoting Iantcho Vassilev : > >> My vote goes to PureFtpd.. >> It`s ideal server.. > > But is not *nearly* as secure as vsftpd. Hi, I'm curious - do you have any empirical evidence to support this? A trawl of a few vulnerabilty databases would suggest your comment is not entirely accurate. NVD NIST [1] shows 4 entries for vsftpd (latest 2005-12) , 1 for pureftpd (latest 2004-08) SecurityFocus [2] shows 1 entry for vsftpd (latest 2004-05), 2 for pureftpd (latest 2004-07) ISS X-Force [3] shows entries 3 for vsftpd (latest 2004-05), for 1 pureftpd (latest 2004-07) Regards, Jase. [1] http://nvd.nist.gov/nvd.cfm [2] http://www.securityfocus.com/vulnerabilities [3] http://xforce.iss.net/xforce/search.php