FTPd recommendation?

[Jase Thew]

Chris H. wrote:
> Quoting Iantcho Vassilev <ianchov at gmail.com>:
> 
>> My vote goes to PureFtpd..
>> It`s ideal server..
> 
> But is not *nearly* as secure as vsftpd.

Hi,

I'm curious - do you have any empirical evidence to support this?

A trawl of a few vulnerabilty databases would suggest your comment is 
not entirely accurate.

NVD NIST [1] shows 4 entries for vsftpd (latest 2005-12)  , 1 for 
pureftpd (latest 2004-08)

SecurityFocus [2] shows 1 entry for vsftpd (latest 2004-05), 2 for 
pureftpd (latest 2004-07)

ISS X-Force [3] shows entries 3 for vsftpd (latest 2004-05), for 1 
pureftpd (latest 2004-07)

Regards,

Jase.

[1] http://nvd.nist.gov/nvd.cfm
[2] http://www.securityfocus.com/vulnerabilities
[3] http://xforce.iss.net/xforce/search.php