Title: FTP Security Considerations
Author(s): M. Allman, S. Ostermann.
Status: INFORMATIONAL
Date: May 1999
Length: 17870
The specification for the File Transfer Protocol (FTP) contains a number of mechanisms that can be used to compromise network security. The FTP specification allows a client to instruct a server to transfer files to a third machine. This third-party mechanism, known as proxy FTP, causes a well known security problem. The FTP specification also allows an unlimited number of attempts at entering a user's password. This allows brute force "password guessing" attacks. This document provides suggestions for system administrators and those implementing FTP servers that will decrease the security problems associated with FTP.
[sh-index] Back to list of manuals
|
| |
