Filezilla Server is een open source FTP-serversoftware en biedt ondersteuning voor onder andere FXP, Secure-FTP, GSS-authenticatie en Kerberos-encryptie. Sinds kort staat er bij Sourceforge een nieuwe versie klaar die 0.9.6 als het versienummer heeft meegekregen. Hierin worden twee mogelijke beveiligingspunten gedicht die mogelijk tot een DoS van een FileZilla Server zouden kunnen leiden. De release notes zien er als volgt uit:
FileZilla Server 0.9.6 fixes two problems which could be used as denial of service attacks against FileZilla Server. The first problem involves reserved MSDOS device names like CON, NUL, COM1, LPT1 and such. Under some Windows versions, FileZilla Server could freeze if the user issued a command to access a file containing a reserved name. The problem seems to only occur on Windows 2000 or older.
The second problem was caused by an infinite loop in the transfer logic. It could only happen if a file or directory listing was downloaded with enabled MODE Z. Certain files did trigger this problem with a high probability allowing a denial of service attack.
New features:Fixed bugs:
- SSL/TLS encryption. This feature is still experimental, use at your own risk.
- Infinite loop on file uploads or directory listings if using zlib compression
- Sending commands with filenames as arguments which did contain reserved MSDOS device names (such as NUL, CON, COM1, LPT1) could freeze FileZilla Server on older systems. Those filenames are now considered invalid
- Fixed crash if taking server offline
- Connection limits for users did not work as intended
- The /reload-config command line switch has been fixed
:strip_exif()/i/2004618434.png?f=thumbmedium)
:strip_icc():strip_exif()/u/103956/crop62b8803c4c37c_cropped.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/112893/pic_1.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/25938/lekkerkontje.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/116610/Baby.tux.sit-icon.jpg?f=community){kind=icon}
:strip_exif()/u/18101/cartmanklein.gif?f=community){kind=small}
/u/14754/avatar_small.png?f=community){kind=avatar}