File Transfer Protocol. A simple client server protocol for transfering a file over a network. Most operating system come with the client application. FTP provides no confidentiality or integrity to the data being trasfered.

learn more… | top users | synonyms

16
votes
1answer
5k views

SFTP, FTPS and SecureFTP differences and security implications

What are the basic differences and security implications of using SFTP, FTPS and SecureFTP.
1
vote
1answer
572 views

FTP over SSL vs HTTPS implemention

Consider two implementations of SSL on a HTTP server and on an FTP server. With the same cipher suites used and the exact same protocols used. Is one more secure than the other. I have heard that it ...
2
votes
0answers
2k views

Hack scenario when a person has a non-superuser shell [closed]

Suppose that there are following three machines in the network: Machine A: Microsoft Server 2003 Service Pack 2 FileZilla 0.9.29 beta ftp server (TCP 21) Mcafee ePolicy server (81), remote desktop ...
14
votes
3answers
4k views

Bruteforce attack on my FTP server

I recently setup VSFTPD on my personal server for sharing files over FTP. In the vsftpd.log file, i see hundreds of failed attempts to login with usernames like "adminitrator" , "adminitrator1", ...
12
votes
3answers
34k views

Good Practices to secure FTP access

We have several web applications (B2B, B2C eCommerce). Where developers have access to upload files. I need to ensure FTP part is Secure enough. What practices / steps should I follow? Now I do, ...
11
votes
5answers
4k views

Is it worth the effort to store FTP passwords encrypted?

I have a project to build a system that needs to push files to multiple third-party FTP servers. I have asked these third parties to provide a more secure interface; all have declined. So now I have ...
1
vote
1answer
25 views

Is authorisation of FTP safe against sniffing and vulnerable to man-in-the-middle hijacking?

One of my hosting providers still just offers FTP access to the server... Is authorisation safe (i.e. resistant to network sniffing) despite the content of the transmission is plain text? Is it ...