WS_FTP Server Support

WS_FTP Server 6.1.1 with SSH & WS_FTP Server 6.1.1

Released May 20, 2008

Download:

Visit myIpswitch to download this update

Details:

Web Transfer Module: The main purpose of this release of WS_FTP Server 6.1 and WS_FTP Server 6.1 is to allow for integration of the new WS_FTP Server Web Transfer Module.

WS_FTP Server Web Transfer Client is a web application that runs with Microsoft Internet Information Server (IIS) and lets your WS_FTP Server users access their accounts via a browser (using HTTP).

Date format specification: (on ‘System Details’ page of Web Admin): Sets the date display format for all of the WS_FTP Server Manager pages that display the date, and sets the format for text boxes where you can enter a date including auto expiring accounts, SSL certificates, Log Viewer, etc. Once you select a date format, the WS_FTP Server Manager will verify a date that you enter against the selected format. Note: These settings are cached by WS_FTP Server for up to ninety seconds. Changes made to these settings are not recognized until the services are restarted or the cache expires.

Data channel timeout (60 by default). Enter the number of seconds after which the client is disconnected that the server will abandon the transfer of an uploaded file and release the lock from any partially uploaded file.

Fixed in 6.1.1

The following issues were addressed in this release:

• The "TLS Only" option allowed connections using SSL v2, but would reject the connection during the login attempt. "TLS Only" now rejects connections during SSL negotiation.
• Clients with SSL session reuse and mutual authorization activated (requiring a client certificate) failed during second attempts to connect to the server. This problem has been fixed.
• File transfers were keeping files locked when network connections were suddenly dropped. This problem has been addressed by including a Data Channel Timeout for listeners.

Ipswitch would like to thank Secunia (secunia.com) for reporting the following issues, which have been fixed in this release:

• [SA28753] SSH Server Denial of Service vulnerability: A boundary error in the SSH Server Service could be exploited by passing an overly long argument to a command.
• [SA28822] The WS_FTP Server Manager log viewer vulnerability: HTTP requests for the FTPLogServer/LogViewer.asp script could be exploited allowing unauthorized log access.
• [SA28761] WS_FTP Server Denial of Service vulnerability: Overly large datagrams sent within a short time period could cause the log service to stop responding to log requests.

Requirements to install this update:

• You must have WS_FTP Server 6.1 with SSH or WS_FTP Server 6 to install this update.

WS_FTP Server 6.1 with SSH & WS_FTP Server 6.1

Released January 16, 2008

Download:

Visit myIpswitch to download this update

Details:

An update has been released for WS_FTP Server, which adds support for the recently released Microsoft .NET 2.0 Service Pack 1 (SP1).

This affects ONLY a limited number of users:

• Customers who have installed the recently released .NET 2.0 Service Pack (SP) 1 and who cannot successfully install WS_FTP Server should apply this update. This release adds support for .NET 2.0 (SP1).

Download this free update only if you are running the environment mentioned above and cannot successfully install WS_FTP Server. If WS_FTP Server has installed successfully, you do not need to install this update.

Requirements to install this update:

• You must have WS_FTP Server 6.1 with SSH or WS_FTP Server 6.1
• You must be running the recently released .NET 2.0 Service Pack (SP)

WS_FTP Server 6.1 with SSH & WS_FTP Server 6.1

Released November 12, 2007

Download:

Visit myIpswitch to download this update

Details:

WS_FTP Server 6.1 -- New Administrative Options!

• Choice of Databases: Administrators have the option to either use the embedded WS_FTP Server database or integrate with an existing Microsoft® SQL Server or Microsoft SQL Server Express for both user authentication and server system configuration (ie: access controls, user permissions, password policies, etc.)
• Choice of Web Servers: Administrators can either use the default standards-based Web server that ships with WS_FTP Server or integrate with Microsoft IIS for powering the Web administration interface of WS_FTP Server.
• Silent Install for Fast Deployment of Multiple Servers: Enables administrators to customize installation configuration and quickly get multiple server deployments with unattended bulk installations up and running remotely, quickly and easily.
• Storage Utilization Displayed to Connecting WS_FTP Professional clients: Users connecting to WS_FTP Server 6.1 with the WS_FTP Professional 2007.1 file transfer client get a real-time view of their server disk space utilization. (note: WS_FTP Professional 2007.1 to be released shortly)
• Lock Files During Upload: Ensure version control of files by preventing different users from simultaneously uploading and downloading the same file. File lock during upload prevents users from downloading a file before it is fully uploaded to the server.
• Enhanced Password Management: Ability to force end users to change their password upon their initial login to the server. Administrators can also set policies that require users to reset their password at any time on an ongoing basis.

Requirements to install this update:

• You must have WS_FTP Server 6 with SSH or WS_FTP Server 6 to install this update.