ftpd

For wuarchive ftpd, you can obtain version 2.4 via anonymous FTP from wuarchive. wustl.edu, in the "/packages/wuarchive-ftpd" directory.

CA-94:08 CERT Advisory ftpd Vulnerabilities 1996

As these vulnerabilities are widely known, we strongly recommend that any site running a version of ftpd listed below take steps to immediately upgrade or disable their FTP daemon.

CA-94:08 CERT Advisory ftpd Vulnerabilities 1996

File Checksum Checksum MD5 Digital Signature ftpd. tar.gz 38443 60 1710 119 ae624eb607b4ee90e318b857e6573500

CA-94:08 CERT Advisory ftpd Vulnerabilities 1996

Versions known to be vulnerable to these problems are: wuarchive ftpd versions 2. 0-2.3 (version 2.2 patched the SITE EXEC problem, but not the race condition)

CA-94:08 CERT Advisory ftpd Vulnerabilities 1996

We strongly recommend that any site running the wuarchive ftpd take steps to immediately install version 2.3, or disable their FTP daemon.

CA-94:07 CERT Advisory wuarchive ftpd Trojan Horse 1994

The CERT Coordination Center has received confirmation that some copies of the source code for the wuarchive FTP daemon (ftpd) were modified by an intruder, and contain a Trojan horse.

CA-94:07 CERT Advisory wuarchive ftpd Trojan Horse 1994

III - Inserted a pointer and checksums for wu-ftpd-2. 4.

CA-94:07 CERT Advisory wuarchive ftpd Trojan Horse 1994

If you are running the wuarchive ftpd, but not providing anonymous FTP access, you are still vulnerable to this Trojan horse.

CA-94:07 CERT Advisory wuarchive ftpd Trojan Horse 1994

Vulnerable wuarchive ftpd versions were available from wuarchive. wustl.edu:/packages/ftpd. wuarchive.shar and many other anonymous FTP sites.

CA-93:06 CERT Advisory wuarchive ftpd Vulnerability 1993

CA-93: 06 CERT Advisory April 9, 1993 wuarchive ftpd Vulnerability

CA-93:06 CERT Advisory wuarchive ftpd Vulnerability 1993