Extended vsFTPd builds

News

vsFTPd home at https://security.appspot.com/vsftpd.html
Original source of vsFTPd by Chris Evans.
vsFTPd.devnet.ru is NOT an official site!
SVN repository for project at http://vsftpd.devnet.ru/vsftpd/
vsFTPd 2.2.2
      Last build ext.10 at http://vsftpd.devnet.ru/files/2.2.2/ext.10/
      On SVN: svn co http://vsftpd.devnet.ru/vsftpd/tags/vsFTPd-2.2.2-ext.10/
      Dev on SVN: svn co http://vsftpd.devnet.ru/vsftpd/branches/2.2.2-ext/
vsFTPd 3.0.3
      Last build ext.1 at http://vsftpd.devnet.ru/files/3.0.3/ext.1/
      On SVN: svn co http://vsftpd.devnet.ru/vsftpd/tags/vsFTPd-3.0.3-ext.1/
      Dev on SVN: svn co http://vsftpd.devnet.ru/vsftpd/trunk/

02.08.2021 - vsftpd-3.0.5 released

01.10.2017 - vsftpd-3.0.3+ (ext build 1) released (Download files)

Implemented features 3.0.2+ (ext build 1) with last patches.

01.10.2017 - vsftpd-2.2.2+ (ext build 10) released (Download files)

Implemented last security fixes from vsftpd-3.0.3.

25.07.2015 - vsftpd-3.0.3 released

08.10.2013 - Gentoo ebuild for "vsftpd-3.0.2+ (ext build 1)"

Available ebuild for Gentoo from Molchanov Alexander.

26.10.2012 - vsftpd-3.0.2+ (ext build 1) released (Download files)

Implemented features 3.0.0+ (ext build 1) with last patches.

26.10.2012 - vsftpd-2.2.2+ (ext build 9) released (Download files)

Implemented last security fixes from vsftpd-3.0.2.

19.09.2012 - vsftpd-3.0.2 released

03.09.2012 - vsftpd-3.0.0+ (ext build 1) released (Download files)

Implemented features 2.3.5+ (ext build 1) with last patches.

03.09.2012 - vsftpd-2.2.2+ (ext build 8) released (Download files)

Implemented last security fixes from vsftpd-3.0.0.

20.07.2012 - Started testing of vsFTPd-ext 2.2.2 build 8

In SVN available for testing vsFTPd-ext 2.2.2 build 8 with changes from 3.0.0.

17.06.2012 - Started testing of vsFTPd-ext 3.0.0

Today available version for testing from SVN. Implemented all features that available in previous versions of daemon.

09.04.2012 - vsftpd-3.0.0 released

14.02.2012 - vsftpd-2.3.5+ (ext build 1) patches (Download files)

Added new parameters ssl_userlist and ssl_userlist_enable for force SSL authorization for users from defined list.

14.02.2012 - vsftpd-2.2.2+ (ext build 7) patches (Download files)

Added new parameters ssl_userlist_file and ssl_userlist_enable for force SSL authorization for users from defined list.

16.01.2012 - Available RPM-packages

Available RPM-packages for install vsFTPd-2.2.2-ext.7 and vsFTPd-2.3.5-ext.1 on systems of RedHat, ScientificLinux and CentOS versions 5 and 6. Packages compiled with support of SSL and TCP Wrapper.

03.01.2012 - vsftpd-2.3.5+ (ext build 1) released (Download files)

Implemented features 2.3.4+ (ext build 2) with last patches.
Removed parameter tpm_allow_anon_root_access and added allow_writable_root that allow access to root catalog for users (do not recomended for use).

03.01.2012 - vsftpd-2.2.2+ (ext build 7) released (Download files)

Implemented last security fixes from vsftpd-2.3.5.
Removed parameter tpm_allow_anon_root_access and added allow_writable_root that allow access to root catalog for users (do not recomended for use).

14.12.2011 - vsftpd-2.3.5 released

08.09.2011 - vsftpd-2.3.4+ (ext build 2) released (Download files)

08.09.2011 - vsftpd-2.2.2+ (ext build 6) released (Download files)

12.07.2011 - vsftpd-2.3.4+ (ext build 1) patches (Download files)

Content-Type detection for HTML-files by extention.
In pasv_rules field PassiveAddress can be 0.0.0.0. In this case vsftpd on command PASV returns IP address of connected client.
Value of pam_service_name changed to vsftpd.

12.07.2011 - vsftpd-2.2.2+ (ext build 5) patch (Download files)

In pasv_rules field PassiveAddress can be 0.0.0.0. In this case vsftpd on command PASV returns IP address of connected client.
Value of pam_service_name changed to vsftpd.

06.07.2011 - vsftpd-2.3.4+ (ext build 1) patches (Download files)

Added support IPv6 to pasv_addr_rules and users_access_ip rules parser.

06.07.2011 - vsftpd-2.2.2+ (ext build 5) patch (Download files)

Added support IPv6 to pasv_addr_rules and users_access_ip rules parser.

04.07.2011 - Reviewed source code of vsftpd 2.2.2 and 2.3.4.
On July 3, Chris Evans published in blog information about backdoor in vsftp 2.3.4, that grants access to console after input smile ":)" as user login.

08.04.2011 - vsftpd-2.3.4+ (ext build 1) patches (Download files)

Added parameter http_default_index for display default file in directory.

16.03.2011 - vsftpd-2.2.2+ (ext build 5) patch (Download files)

Applyes some fixes from 2.3.4 for work with IPv6, background mode, command processing and more...

16.03.2011 - vsftpd-2.3.4+ (ext build 1) patches (Download files)

Changed replyes of commands POST and PASV when service worked with IPv6. (ipv6_port_pasv.patch)
Changed processing both parameters ftp_enable and http_enable. (sanity_check.patch)

21.02.2011 - vsftpd-2.3.4+ (ext build 1) released (Download files)

Implemented features 2.3.2+ (ext build 1).

21.02.2011 - vsftpd-2.2.2+ (ext build 5) released (Download files)

Implemented some fixes from vsftpd-2.3.4.

20.02.2011 - vsftpd-2.3.2+ (ext build 1) released (Download files)

Implemented features 2.2.2+ (ext build 4).
In HTTP-Server mode fixed processing requests with escaped URL.
Added new option http_browse, allowing view the contents of directories.
Added new options: http_error_403_server_tpl, http_error_403_tpl, http_error_404_tpl, http_browse_tpl, http_browse_line_fmt.

20.02.2011 - vsftpd-2.2.2+ (ext build 4) released (Download files)

Allow define 0.0.0.0 in pasv_rule file as LocalIP.
Fixed work with parameter tpm_allow_anon_root_access for access to root of server.
Implemented patches vsftpd-2.2.2-clone.patch and vsftpd-2.2.2-v6only.patch.
Implemented patch from Peter.

15.02.2011 - vsftpd-2.3.4 released on official site

15.02.2011 - vsftpd-2.3.3 released on official site

26.10.2010 - vsftpd-2.2.2+ (ext build 3) Gentoo ebuild by Peter.

21.10.2010 - vsftpd-2.2.2+ (ext build 3) released (Download files)

Implemented anti bruteforce mechanism. New options: anti_bruteforce (default: no) and anti_bruteforce_banner (default: empty string).
Close connection message after failed attempts to log in.
Applyed patches vsftpd-2.2.2-dso.patch and vsftpd-2.2.0-openssl.patch.
Fixed start daemon in background and non-background mode.
Small optimizations...

15.10.2010 - vsftpd-2.2.2+ (ext build 2) released (Download files)

Fixed work of anon_umask.
The parametr tunable_chown_upload_mode is set to 0666 by default.
Applyed some fixes from vsFTPd 2.3.2.

20.08.2010 - vsftpd-2.3.2 released on official site

19.08.2010 - vsftpd-2.3.1 released on official site

06.08.2010 - vsftpd-2.3.0 released on official site

01.04.2010 - vsftpd-2.2.2+ (ext build 1) released (Download files)

Implemented some features from 2.1.2+ (ext build 1)
Applyed some patches (vsftpd-2.0.5-greedy.patch, vsftpd-2.1.0-libs.patch, vsftpd-2.1.0-trim.patch, vsftpd-2.1.0-userlist_log.patch, vsftpd-2.1.1-daemonize_plus.patch and vsftpd-close-std-fds.patch)

30.03.2010 - Configured SVN repository for vsFTPd extended builds project.

17.11.2009 - vsftpd-2.2.2 released on official site

19.10.2009 - vsftpd-2.2.1 released on official site

13.08.2009 - vsftpd-2.2.0 released on official site

06.07.2009 - vsftpd-2.1.2+ (ext build 1) released (Download files)

29.05.2009 - vsftpd-2.1.2 released on official site

28.05.2009 - vsftpd-2.1.1 released on official site

23.02.2009 - vsftpd-2.1.0+ (ext build 1) released (Download files)

Added char convertion without iconv for some charsets.
Added rules for anonymous access based on user's IP address masks.
Added rules for user access only from defined IPs.
Allow or disallow delete files by anonymous.
Added chowning anonymous uploaded files by user IP.
Added new parametr double_377 (by default 1). This parameter switch off telnet specific character \377.
Changed find libs in "vsf_findlibs.sh".
Different speed for upload and download data transfer rates for anonymous and local users.
All other features are removed.

18.02.2009 - vsftpd-2.1.0 released on official site

10.08.2008 - vsftpd-2.0.7+ (ext build 1) released (Download files)

Implemented all features from 2.0.6+ (ext build 1) with last patches.

06.08.2008 - vsftpd 2.0.6-ext1 RPM (w 3 patches) for SUSE 10.3 x86_64

Download RPM-packet with binary files of vsftpd with last patches. Author Filin.

31.07.2008 - vsftpd 2.0.6-ext1 RPM (w 3 patches) for SUSE 10.3 x86

Download RPM-packet with binary files of vsftpd with last patches. Author Filin.

30.07.2008 - vsftpd-2.0.7 released on official site

Last patches for 2.0.6 ext.1

02.03.2008: utf8.patch - Not worked recoding to UTF8 or switch off her, if local charset is UTF8.
25.06.2008: chown_group.patch - Added feature of sett file group by defined in configuration file chown_username if define chown_group.
26.06.2008: mem_leak.patch - Memory leak if used setting deny_file.

11.03.2008 - Deb-packet for "vsftpd-2.0.6+ (ext build 1)"

Available deb-packet with last patch. Author Grundik.

02.03.2008 - Gentoo ebuild for "vsftpd-2.0.6+ (ext build 1)"

Available ebuild for Gentoo with last patch. Author Sergey (aka Rion).

27.02.2008 - vsftpd-2.0.6+ (ext build 1) released (Download files)

Implemented all features from 2.0.5+ (ext build 5).

18.02.2008 - vsftpd-2.0.5+ (ext build 5) released (Download files)

Close user connection if defined user_config_dir and user config is not available
Fixed IE and FF authorization if anonymous disabled.
Fixed a mistake at assembly with support libcap.
Fixed bug with virtual users
Changed find libs in "vsf_findlibs.sh".
Different speed for upload and download data transfer rates for anonymous and local users. For use this feature, read man on params anon_rxtx_rate, anon_max_rate_rx, anon_max_rate_tx, local_rxtx_rate, local_max_rate_rx and local_max_rate_tx.

13.02.2008 - vsftpd-2.0.6 released on official site

23.10.2007 - vsftpd-2.0.5+ (ext build 4) released (Download files)

Added logging deleting files and folders.
Added new parameter double_377 (by default 1). This paramert switch off telnet specific character \377.
Some patches are applied from vsftpd 2.0.5-19:
- vsftpd-1.0.1-missingok.patch: patch logrotate config to allow log file to be missing
- vsftpd-2.0.1-tcp_wrappers.patch: enables tcp wrappers in build & fixes logging behavior when enabled (only applied when Use.tcpwrappers is enabled)
- vsftpd-2.0.2-signal.patch: make signal handlers safer (RH BZ #119136)
- vsftpd-1.2.1-conffile.patch: make the vsftpd config files stored under /etc/vsftpd/ not just in /etc
- vsftpd-2.0.1-server_args.patch: patch the xinetd.conf to know that the config file is in /etc/vsftpd/
- vsftpd-2.0.1-dir.patch: another patch for moving location of vsftpd config files
- vsftpd-2.0.1-use_localtime.patch: use localtime in logfiles if use_localtime config variable set (RH BZ #143687)
- vsftpd-1.2.1-nonrootconf.patch: dies if config file not owned by root
- vsftpd-2.0.3-background.patch: default to starting up in the background - important for starting up in initscript (RH BZ #158714)
- vsftpd-2.0.1-kickline.patch: fix a problem when using suniq option (RH BZ #165083)
- vsfptd-2.0.3-user_config.patch: allow user config files not to exist (RH BZ #166986)
- vsftpd-2.0.3-pam_hostname.patch: perform reverse DNS on IP addresses when passing to PAM so ACLs with partial domain matching work (RH BZ #159745)
- vsftpd-2.0.5-man.patch: make paths to config files in the man pages match reality
- vsftpd-2.0.4-filter.patch: fix so patterns specified in deny_files config option are better matched (RH BZ #174764)
- vsftpd-2.0.5-file_stat.patch: fix incorrect use str_stat function (RH BZ #206810)
- vsftpd-2.0.5-confspell.patch
- vsftpd-2.0.5-bind_denied.patch: add errno EACCES to not die by vsf_sysutil_bind (RH BZ #198677)
- vsftpd-2.0.5-pasv_dot.patch: Add pasv dot after pasv response (RFC 959 page 40)
Fixed Koi8-R codepage and added Koi8-U.

08.06.2007 - change hardware

On June, 16th and 17 change of hardware will be made, faults in work of a server therefore are possible.

18.04.2007 - vsftpd-2.0.5+ (ext build 3.3) released (Download files)

Fixed some bugs in files parsers: vsftpd.pasv_rules and vsftpd.users_ip

18.04.2007 - The structure of catalogues on a site is changed

All new versions of vsFTPd now placed in directory with structure /files/<origin build>/<extended build>/.

04.04.2007 - deb-packet "vsftpd-2.0.5+ (ext build 3.2)"

Download from HTTP deb-packet for Debian Linux. Author Denis.

28.02.2007 - ebuild for "vsftpd-2.0.5+ (ext build 3.2)"

Download from HTTP ebuild file for Gentoo Linux. Author Ivan (aka Calculator).

26.02.2007 - vsftpd-2.0.5+ (ext build 3.2) released (Download souce)

Fixed bug in command proccessor.
For fix this problem you can download diff (2088 bytes) or download two files (charconv.c ant ftpcmdio.c) then overwrite exist files.

12.02.2007 - vsftpd-2.0.5+ (ext build 3) released (Download source)

Added char convertion in reply of command NLST.
Changed separator in xferlog from space to tab for calc statistic by awstats.
In xferlog changed authentication user id to file owner id for calc statistic.
If defined chown_by_ip then chown uploaded files by user IP.
If defined tpm_allow_anon_root_access then anonymous can write to writable root on server.
Undefined option VSF_BUILD_TCPWRAPPERS as in original sources.
To format of file with user access roles added remote codepage. Now used next file format: <UserName> [CodePage] <Remote IP/Remote Mask> [<Remote IP/Remote Mask> ....]

Example of file vsftpd.users_ip:

# UserName      CodePage Remote IP/Remote Mask
4ever           UTF8     10.1.237.0/24  192.168.1.0/24 122.34.56.2 
chiko                    10.1.156.0/24  158.76.23.54   176.32.56.32

15.11.2006 - ebuild for vsftpd-2.0.5+ (ext build 2)

Download from HTTP ebuild file for Gentoo Linux. Author Ivan (aka Calculator).

11.10.2006 - vsftpd-2.0.5+ (ext build 2) released (Download source)

Fixed writing to log unprintable chars if local and remote charsets identical.
New option anon_delete_enable allow delete files by anonymous. By default allow. User can delete files if anon_delete_enable and anon_other_write_enable is true.
In rules file allow additional column remote_charset and anon_delete_enable. New format: <LocalIP> <RemoteMask> <PassiveAddress> [remote_charset] [anonymous_enable [anon_upload_enable [anon_mkdir_write_enable [anon_other_write_enable [anon_delete_enable]]]]].
Additional parameter for local_charset and remote_charset: CP866, CP878, CP1250, CP1251 and CP1252.
New option add_default_rule adds the default rule if rules-file is loaded.
All new options are described in man-file vsftpd.conf.5.

Example of file vsftpd.pasv_rules with new format:

# LocalIP       RemoteMask      PassiveAddress  rem_char  anon  anon_upl  anon_md  anon_oth  anon_del
192.168.20.1    192.168.20.0/24 192.168.20.1        UTF8   yes       yes      yes       yes       yes
10.15.147.237   0.0.0.0/0       10.15.147.237               no
10.12.207.21    10.12.0.0/16    10.12.207.21     WIN1251   yes       yes      yes       yes       no
10.12.207.21    172.0.0.0/8     10.12.207.21       CP878   yes       yes      yes       yes       no
10.12.207.21    192.168.20.0/24 10.12.207.21               yes       yes      yes       yes       no
10.12.207.21    0.0.0.0/0       212.118.59.149             yes        no       no        no       no

08.07.2006 - vsftpd-2.0.5+ (ext build 1) released (Download source)

Implemented all features from 2.0.4+ (ext build 3).

03.07.2006 - vsftpd-2.0.5 released on official site

18.06.2006 - vsftpd-2.0.4+ (ext build 3) released (Download source)

Added rules for user access only from defined IPs. To enable this feature add to config users_access_ip with optional pathname of rules-file (if rules-file is not specified, vsftpd uses /etc/vsftpd.users_ip). If the user is not found, it is considered, that it can work with a server. Rules-file format: <UserName> <Remote IP/Remote Mask> [<Remote IP/Remote Mask> ....]
Added support full conversion from Southern European between UTF-8 and ISO-8859-3 (need define VSFTP_CHARCONV_SUPPORT_SOUTHERN in charconv.h).

Example of file vsftpd.users_ip:

# UserName      Remote IP/Remote Mask
4ever           10.1.237.0/24  192.168.1.0/24 122.34.56.2 
chiko           10.1.156.0/24  158.76.23.54   176.32.56.32

19.02.2006 - vsftpd-2.0.4+ (ext build 2) released (Download source)

Fixed replyes if server not supported anonymous logon.
Fixed writng to log unprintable chars.
Added support full conversion for Cyrillic between UTF-8, Win-1251, Koi8-R, IBM866 and ISO-8859-5 (need define VSFTP_CHARCONV_SUPPORT_CYRILLIC in charconv.h).
Added support full conversion for Western European between UTF-8, ISO-8859-1 (Latin-1), ISO-8859-15 (Latin-9) and Win-1252 (need define VSFTP_CHARCONV_SUPPORT_WESTERN in charconv.h). If you have problem with files that contain German "Umlauts" like ä, ü, ö then check your ftp-client.
Added support full conversion for Central European between UTF-8, ISO-8859-2 (Latin-2), ISO-8859-16 and Win-1250. (need define VSFTP_CHARCONV_SUPPORT_CENTRAL in charconv.h).
Options local_charset and remote_charset can be: UTF8, WIN1251 (1251), KOI8R (878), IBM866 (866), ISO-8859-5 (ISO5), ISO-8859-1 (LATIN1 or ISO1), ISO-8859-15 (LATIN9 or ISO15), WIN1252 (1252), ISO-8859-2 (LATIN2 or ISO2), ISO-8859-16 (ISO16) or WIN1250 (1250).

19.01.2006 - vsftpd-2.0.4+ (rus/ext build 1) released (Download source)

Implemented all features from 2.0.3+ (ext build 3).
pasv_addr_resolve option to allow pasv_address to get DNS resolved for each client session.
If passive address in rules-file defined as 0.0.0.0 then uses address from pasv_address option.

18.01.2006 - vsftpd-2.0.3+ (ext build 3) released (Download source)

Added rules for anonymous access based on user's IP address masks. To enable this feature add to config pasv_addr_rules with optional pathname of rules-file (if rules-file is not specified, vsftpd uses /etc/vsftpd.pasv_rules). Rules-file format: <LocalIP> <RemoteMask> <PassiveAddress> [anonymous_enable] [anon_upload_enable] [anon_mkdir_write_enable] [anon_other_write_enable]

Example of file vsftpd.pasv_rules:

# LocalIP       RemoteMask      PassiveAddress  anon  anon_upl  anon_md  anon_oth
192.168.20.1    192.168.20.0/24 192.168.20.1    yes   yes       yes      yes
10.15.147.237   0.0.0.0/0       10.15.147.237   no
10.12.207.21    10.12.0.0/16    10.12.207.21    yes   yes       yes      yes
10.12.207.21    172.0.0.0/8     10.12.207.21    yes   yes       yes      yes
10.12.207.21    192.168.20.0/24 10.12.207.21    yes   yes       yes      yes
10.12.207.21    0.0.0.0/0       212.118.59.149  yes   no        no       no

09.01.2006 - vsftpd-2.0.4 released on official site

20.12.2005 - vsftpd-2.0.3+ (ext build 2) released (Download source)

Fixed result of command FEAT.
Fixed reply to commands like PWD.

30.11.2005 - vsftpd-2.0.3+ released (Download source)

Added support char conversion for Russia between UTF-8, Win-1251 and Koi8-R without use iconv for each session. To use this feature you need add strings to vsftpd.conf: convert_charset_enable=1, local_charset=CP, remote_charset=CP. CP should accept one of the following values: UTF8, WIN1251 or KOI8R.
Added this feature to ftp command FEAT.
Added ftp command OPTS with arguments UTF8 (values ON or OFF) and CP (values UTF8, WIN1251 or KOI8R).
Added information about char convertion to result of command STAT.

Contact
You could try mailing me: Dmitriy, vsftpd@devnet.ru.