HISTORY 2.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748
  1. Troll-FTPd is a nice FTP server coded by Arnt Gulbrandsen <agulbra at troll.no>
  2. from Troll Tech. Despite his lack of popularity, it has always been a very
  3. good project, coded with the following requirements in mind :
  4. - No useless bloat,
  5. - No external command calls (source of most security flaws)
  6. - RFC standards conformance,
  7. - Easy to set up,
  8. - User friendly,
  9. - Secure.
  10. The official repository for this piece of software is
  11. ftp://ftp.troll.no/freebies/ftpd/ .
  12. People who tried Troll-FTPd usually kept it and used it in production
  13. servers for years without any problem. Alternatively, WU-FTPd, ProFTPd,
  14. BeroFTPd and many others have had serious security and reliability issues,
  15. and system administrators had to always watch for patches and new releases
  16. to ensure a good nights sleep.
  17. Troll-FTPd was often considered for inclusion in secure distributions, but
  18. the project was't actively maintained. Release 1.25 is dated 03/1999 and has
  19. been made with help from Janos Farkas, cmj at localnet.com, August Fullford and
  20. Ximenes Zalteca. Troll-FTPd 1.26 was released two years after, just to fix
  21. minor bugs. Arnt said that there won't be any other release unless he ever
  22. moves to IPv6.
  23. This is why I started to collect various unofficial patches over the internet,
  24. merged them (and it wasn't painless), added my own ones, cleaned up the code,
  25. audited it, repackaged it, rewrote the documentation... and the Pure-FTPd
  26. project was born.
  27. The first released version of Pure-FTPd was labeled 0.90 because I wanted
  28. some margin before 1.00, just to add missing features that prevent people
  29. from moving from other FTP servers. Also the documentation was in need for
  30. a full update before version 1.00 . It was based on Troll-FTPd 1.25, and
  31. changes from 1.26 were backported.
  32. Troll-FTPd 1.26 and earlier are vulnerable to a local root exploit
  33. (Troll-FTPd 1.27 was released later to fix it) . Pure-FTPd is not vulnerable
  34. to this, and it has never been. The fix was already applied to the first
  35. version of Pure-FTPd before the flaw was discovered and fixed in Troll-FTPd.
  36. Thanks to Arnt for his excellent job. The Pure-FTPd project would never have
  37. been started without it.
  38. -Frank DENIS "Jedi/Sector One" <j at pureftpd dot org>