Release Notes

The release notes for every official version of Cerberus FTP Server. If you need any help setting up Cerberus FTP Server you can browse our online support resources.

Additional Support

top

Version 6.0 Release Notes		Hide
Version 6.0.1.0 Official release notes -- 5/06/2013 Added full UPN support for AD authentication Added password changing for LDAP users Added an account disable option for users that haven't logged in within a certain number of days Added a %USER% variable that can be used in virtual directory names and paths for users and groups Added an option to automatically create directories when approving a new account request Improved logic for detecting whether the data connection was gracefully closed at the end of an FTP STOR command Added a timer to ensure HTTP/S sessions are cleaned up and closed when they timeout Added support for the X-Frame-Options DENY header for HTTP/S web client page responses Added an advanced option to allow setting the temporary folder used for HTTP/S web client uploads Added an advanced option to specify the default share time (in hours) for publicly shared files Added an option to allow user to specify a password for publicly shared files Added two events for when a public file is shared, and when a public file is downloaded Added bytes transferred information to the log for files uploaded and downloaded Added tracking information to see when a public file is downloaded Fixed a bug that could result in an error for valid LDAP search filters Fixed an HTTP/S web client upload bug for uploading to non-ASCII directory paths Newly created Microsoft databases will now store Unicode text properly for statistics and reporting Version 6.0.0.3 Official release notes -- 3/27/2013 Added a note field for IP access items in the IP Manager Added username to all FTP/S and SSH SFTP client command log messages to match HTTP/S auditing Improved CSV importing, including support for CSVs exported from third party servers Improved auto-updater to allow more selective auto-updating Cleaner web administration pages and additional error checking Added ability to change several new settings through web administration Added a local file and directory selector for file path settings in web administration Fixed an issue where the FTP MLST command would fail on files on a network share Fixed a bug related to how auto-blocking works with whitelist mode Version 6.0.0.2 Official release notes -- 3/11/2013 Fixed telephone number wasn't included with account request notification Fixed email server selection for account approval in the web client was ignored Fixed setting for modifying hidden directory attribute on virtual directories would not save Added HTTP POST event target configuration capability to web admin Added public sharing as a permission option for virtual directories in the web admin Fixed inconsistent virtual directory permission selection behavior in the web admin Improvements to adding and removing LDAP and AD configurations in the web admin Fixed "Password Never Expires" setting ignored when adding new accounts CSV import now supports setting max logins, max upload filesize, and initial directory for a new user account Version 6.0.0.1 Official release notes -- 3/03/2013 Numerous bug fixes Update the SOAP API Version 6.0 Official release notes -- 2/20/2013 Upgraded FIPS OpenSSL to 1.0.1 with TLS 1.1 and TLS 1.2 support Added advanced statistics collection and a new Report Manager Added public file sharing to the web client Updated web client upload control Users and groups can now have whitelist IP ranges AD groups can now be mapped to Cerberus groups for assigning virtual directories Configurable timeout support for HTTP/S web client sessions Zip and unzip file operation actions for event actions HTTP POST operation event action to allow posting event information to a URL More variables for events Added variable substitution to event email recipient name and email address fields Added ability to customize email subjects on event emails, including variable substitution in subjects Added ability to set disable after time for users and groups through web administration Updated, easier to use AD and LDAP admin pages Access to advanced security settings from the Settings page Access AD and LDAP user attributes like name and email address for events

top

Version 5.0 Release Notes		Show
Version 5.0.7.0 Official release notes -- 2/07/2013 Updated OpenSSL to 0.9.8y Version 5.0.6.1 Official release notes -- 1/25/2013 Fixed an AD and LDAP virtual directory bug introduced in 5.0.6 Version 5.0.6.0 Official release notes -- 12/11/2012 Fixed a web admin XSS vulnerability (CVE-2012-6339) Minor updates and improvements Version 5.0.5.1 Official release notes -- 11/15/2012 Improved auto-blocking for HTTP/S web client bots Optimized temporary file creation for file uploads ensures cancelled upload temporary files are deleted Various system-wide performance improvements Added email approve/disaprove notification to the we admin account request manager Fixed a minor bug that would not let an admin add a directory to a newly created account through the web admin Version 5.0.5.0 Official release notes -- 9/25/2012 Fixed a CSRF vulnerability (US-CERT VU#989684) in the web admin Web client users can now replace existing files on upload if they have the correct permissions High DPI display improvements for the GUI No longer allow multiple logged in users to run the Cerberus Console at the same time Version 5.0.4.3 Official release notes -- 9/7/2012 Fixed a problem with Office documents not opening directly from the web client in some versions of IE Minor changes and updates to the web client Optimization for authenticating against very large LDAP databases Version 5.0.4.2 Official release notes -- 8/13/2012 Added LDAP authentication configuration to web administration Added option to require password change on next login Updated HTTP/S web client Fixed the CSR generator to accept wildcard common names Version 5.0.4.1 Official release notes -- 7/12/2012 Simultaneous login count was not getting decremented on logout for AD accounts Added ability to change passwords for AD accounts Improvements to the Getting Started Wizard Improved the LDAP account listing in the LDAP page of the User Manager Version 5.0.4.0 Official release notes -- 6/15/2012 DES cipher availability is now disabled by default for all SSH connections Added a MIME mapping dialog to change HTTP/S file MIME mappings Added reCAPTCHA option to the HTTP/S login page Modified the CSR generator to work with Verisign Made comparison on file extension caseless to determine MIME type Added support for the check-file-name SSH2 SFTP integrity/hash extension command Added support for the vendor-id SSH2 SFTP extension command Improvements to web administration (AJAX interface selection) Version 5.0.3.1 Official release notes -- 5/12/2012 Minor UI bug fixes and improvements Added email notification option for approving or declining account requests UI updates to better support Windows 8 and Server 2012 Added a MIME type mappings file to allow user customization of MIME types for the web client Updated OpenSSL to latest version Can now use a DNS-style domain name for AD authentication on Windows 2003 server and lower OS More flexible domain controller auto-selection for Windows 2003 server and lower Group IP whitelists are now applied to AD and LDAP users Version 5.0.3.0 Official release notes -- 4/20/2012 Added an option to create impersonated AD user before creating the initial home directory to ensure the AD user has owner rights on the home directory HTTP/S range support for partial content retrieval and file resume Updated the web client Updated controls for Users page of the User Manager Added ability to restrict IPs by user account or group Added maximum upload file size quota for user accounts Added event rule for disable-after-date events Fixed a bug where some symbols in URLs were not properly escaped Fixed events bug where server operations actions were not saved properly to file Fixed a bug where SSH clients attempting to open unsupported channels are not told of the failure Version 5.0.2.0 Official release notes -- 3/16/2012 Web client directory browser re-write for major performance improvements by performing paging, sorting, and filtering on the server Removed file and directory display limits from the web client directory browser New, dynamic user and group updates through the web client Enable or disable allowing user updating through the web client Enhanced certificate conversion now separates and includes CA certificates when converting a binary certificate bundle to PEM format Rolled back a change to FTP PORT socket binding introduced in 5.0.1.1 Version 5.0.1.2 Official release notes -- 2/24/2012 Fixed a bug that prevented changing the default SOAP port Fixed a bug that prevented creating new users through the web admin if a password policy was set Added the ability to customize the web client login image, page title, default directory list count, and file date local time and timezone display from the UI Added a file preview feature to the web client Added an event time variable and the ability to filter by time Added server event targets delete and disable user or group Version 5.0.1.1 Official release notes -- 2/14/2012 Fixed an SFTP bug that resulted in an SFTP client timeout while establishing a session Added additional fault tolerance if the SOAP port is in use by another process Usability improvements to the Event Manager Smarter detection of SOAP port and protocol changes by the Cerberus UI Enhancements to port binding to require exclusive access to the port Improved error messaging for in-use ports in the log Version 5.0.1.0 Official release notes -- 2/7/2012 Added ability to enter a license key via web administration Cleanup and enhancement of the HTTP/S web client HTTP/S web client can now delete directories that are not empty HTTP/S web client file zip and unzip support added Added confirmation dialog before deleting files of directories in the web client Web administration enhancements and bug fixes The server no longer waits for a client SSH NEWKEYS before sending its own new keys message Fixed a bug in the Event Manager that would not allow deletion of an event sink Fixed a bug that could result in the group variable not getting set for some HTTP/S file transfer events Fixed a User Manager rename bug that resulted in user settings not getting when a user was changed right after getting renamed Fixed a group save bug that resulted list permission changes not getting saved Fixed an exception bug if TLS/SSL was disabled and an FTPS or HTTPS connection was attempted Version 5.0.0.7 Official release notes -- 1/10/2012 Fixed a virtual directory bug when adding virtual directories in the User Manager Added icons for common file types to HTTP web client Version 5.0.0.6 Official release notes -- 1/5/2012 Added option to redirect HTTP to HTTPS for HTTP interfaces Added support for larger ephemeral keys during SSH key exchange ECDH SSH key exchange is now supported regardless of server host key type Updated cryptographic library Added event variable selection option to the event manager Version 5.0.0.5 Official release notes -- 12/09/2011 Improved HTTP/1.0 support Content-Disposition with filename now set for downloaded files Automatic conversion of certificates to PEM format for FIPS mode FTPS protocol checking bug fix Added option to turn on/off welcome message for HTTP/S connections Added option to turn on/off welcome message for SSH SFTP connections Added option to disable web account requests for HTTP/S connections Added option to stop checking authentication sources if user exists in a source but password was incorrect Performance improvements Version 5.0.0.4 Official release notes -- 11/21/2011 Fixed HTTP protocol bug on x64 Version 5.0.0.3 Official release notes -- 11/15/2011 Improved HTTP caching headers for better web client performance Improved HTTP error handling Added STARTTLS and TLS/SSL SMTP server support for email notification Added ability to permanently whitelist an IP address Added event manager support to web administration Added DoS protection for HTTP connections Fixed a problem with IE sending multiple cookies with the same name Fixed an SFTP append bug Fixed an HTTP bug that prevented some uploads with AD accounts Version 5.0.0.2 Official release notes -- 11/03/2011 Fixed bug with AD authentication and HTTP Fixed HTTP cookie not always getting set Fixed an AD directory mapping bug Fixed an HTTP upload bug in some version of IE Improved HTTP redirection Improved web client error reporting Version 5.0.0.1 Official release notes -- 10/25/2011 Added web administrator account request approval Added web administrator security page Added web administrator add/delete listener capability Several web administration bug fixes and usability improvements IP manager UI bug fix Minor bug fixes Version 5.0.0.0 Official release notes -- 10/17/2011 HTTP and HTTPS client access Event support (SMTP notification, launch an external process) New Summary page provides health, security and compliance status at a glance New password change policy requirement options New password expiration policies New password storage options: Cryptographically salted MD5, SHA1, SHA256, SHA512 SSH SFTP password change support Added file and directory listing permissions to virtual directories Added FTP MODE Z compression support SFTP now sends the welcome message as an SSH banner message New account request via web HTTP/HTTPS Added option to add additional account information like name, email, telephone Added support for new FTP HASH command Added ability to restrict login by protocol login on a per user and group basis Added SSH MAC algorithms hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512, and hmac-sha2-512-96 Improved web administration performance and web administration options New CSR generation tool

Version 4.0 Release Notes		Show
Version 4.0.13.0 Official release notes -- 7/26/2012 Minor bug fixes Version 4.0.12.0 Official release notes -- Updated OpenSSL Updated Installer Version 4.0.11.0 Official release notes -- 10/30/2011 Added POST support to several web administration forms Version 4.0.10.0 Official release notes -- 10/04/2011 Fixed a minor SSL accept bug Fixed stats CSS file not getting copied over for reports AD and LDAP SFTP users can now authenticate with public keys in addition to passwords Version 4.0.9.8 Official release notes -- 7/25/2011 Server no longer creates the Global Home/%username% directory for AD users if it does not exist and the user fails login Added a file open fix for a buggy SFTP client Improved GUI/service communication Version 4.0.9.7 Official release notes -- 6/22/2011 Added support for SFTP text and append mode Version 4.0.9.6 Official release notes -- 5/19/2011 Fixed an FTPS bug that could prevent the server from accepting connections Version 4.0.9.5 Official release notes -- 5/17/2011 Enhanced logging - more descriptive system messages and better syslog level mapping Virtual directory roots are no longer deletable through FTP or SFTP commands Notification of support agreement ending for licensed users UI internal cleanup and optimizations Entering a license key now prompts to restart the server Allow DSA with SSH in FIPS mode Version 4.0.9.3 Official release notes -- 4/15/2011 Recompiled with Visual Studio 2010 SP1 and latest SDK Improved error checking Version 4.0.9.2 Official release notes -- 4/07/2011 Removed an SSL shutdown check that could prevent certain buggy clients from disconnecting Improved system performance Version 4.0.9.1 Official release notes -- 3/27/2011 Allow zero length file transfers for FTPS connections Ignore permission change requests with SITE CHMOD (meaningless on Windows) SFTP permission rules now identical to FTP for deleting existing files Better consistency with file operation logging and auditing between different protocols Turn on and off specific screen log messages Version 4.0.9.0 Official release notes -- 3/10/2011 Added elliptic curve key exchange for SSH SFTP as specified in RFC 5656 Added support for elliptic curve SSH client keys FTPS performance improvements No longer sets file size on file creation when SFTP clients request it Fixed a bug in the STOU command introduced in version 4.0.8.3 Version 4.0.8.3 Official release notes -- 2/23/2011 Enhanced FTP and FTPS file and directory operation auditing and error reporting Added basic FTP STAT command support Improved FTP HELP command support Fixed self-signed certificate wizard would fail if no email address was specified Additional error checking during initial setup wizard Version 4.0.8.1 Official release notes -- 2/17/2011 Fixed interface status pane was sometimes hidden Fixed a remote settings save bug New certificate verify dialog New Cerberus logo and icon Version 4.0.8.0 Official release notes -- 1/20/2011 Require verifying security settings before saving and applying new settings Fixed a bug that could result in failure to decode file-based OpenSSH public keys RFC conformance for active mode data connections established from non-standard FTP ports (L-1 instead of always from port 20) RFC comformance for default data port when no PORT or PASV command is issued Fixed a bug that could result in service shutdown when terminal services connections are terminated Version 4.0.7.6 Official release notes -- 11/30/2010 Fixed rare bug that could cause failure to accept connections Minor logging improvements Added right-click log window copy to clipboard Enabling or disabling remote web access not longer requires a service restart Updated auto-updater for Windows 2000 machines Version 4.0.7.5 Official release notes -- 11/22/2010 Improved SFTP channel window size handling Version 4.0.7.3 Official release notes -- 11/15/2010 Added feature to allow manually specifying interfaces when an interface isn't detected Fixed UI to allow user mapping through the GUI when multiple LDAP servers have the same IP Fixed a possible memory leak with LDAP authentication Fixed a virtual directory bug for overlapping paths Numerout UI improvements Performance improvements Version 4.0.7.2 Official release notes -- 11/01/2010 Added a statistics file error detection and automatic repair feature Added logging output, statistics generation, and several IP manager options to web administration Added ability to add/modify/delete groups to web administration Significant improvements to web administration performance and layout Significantly increased the SSH maximum packet size to accommodate clients that use large packets Fixed a bug in WAN IP auto detection that could result in excessive processor utilization Version 4.0.7 Official release notes -- 10/19/2010 Added a DoS option to IP auto blocking to allow blocking connection attempts that do not attempt to login LDAP and AD user to group mappings are no longer case sensitive LDAP users now honor the disabled flag if it is set on a mapped Cerberus group when authenticating with PK LDAP users no longer require the "Use Cerberus Groups and Directories" flag set when mapping LDAP users to groups All binaries are now compiled with VS2010 and linked with the v10 CRT Version 4.0.6 Official release notes -- 10/08/2010 New smaller, smarter and more reliable installer New complete server configuration backup and restore feature Larger list boxes on the Users and Groups page of the User Manager Statistics page generation can now be done while running as a service Version 4.0.5.5 Official release notes -- 10/01/2010 Added web service block address method Fixed an SFTP bug that could result in corrupt file transfers for some Unix SFTP clients Updated logging library Version 4.0.5.4 Official release notes -- 9/26/2010 Added quotes around the path string when installing as a service Version 4.0.5.3 Official release notes -- 9/23/2010 Additional LDAP error logging Disable offering MAC MD5 algorithm for selection in FIPS 140-2 mode for SFTP FTP connection denied messages were not being encoded correctly Version 4.0.5.2 Official release notes -- 9/10/2010 Faster startup time Improved public key authentication compatibility for SFTP clients based on OpenSSH Support for SFTP real path compose and compatibility improvements with some SFTP clients Version 4.0.5 Official release notes -- 9/02/2010 Condensed authentication logging AD authentication will use the nearest domain controller for AD authentication instead of always using the PDC Fixed unable to select "Password" authentication without selecting a public key bug Fixed log file color of warning messages and added several suggest fix log file messages for common problems SFTP real path command improvements Version 4.0.4.3 Official release notes -- 8/17/2010 Fixed a bug with Active Directory and LDAP authentication of SFTP users Version 4.0.4.2 Official release notes -- 8/16/2010 Lowered the SSH initial window size for a channel to work-around buggy SFTP clients Better SSH windows size negotiation support for large file transfers Version 4.0.4.1 Official release notes -- 8/12/2010 Added support for OpenSSH public key format Version 4.0.4.0 Official release notes -- 8/9/2010 Added Public Key authentication for SFTP Cleaned up the Interfaces tab to prevent duplicate ip/port changes and to warn about inconsistent interface/port combinations Version 4.0.3.3 Official release notes -- 7/20/2010 Fixed a bug with SFTP listings not allowing UNC virtual directories Improved compatibility with SFTP clients and very large directory listings Improved compatibility with SFTP clients that STAT the root directory Version 4.0.3.2 Official release notes -- 7/19/2010 Fixed a that could result in the passive port range being reset to the default when upgrading to version 4.0.3 Fixed a minor bug that would result in directory listings failing when given the path "./" Version 4.0.3.1 Official release notes -- 7/08/2010 Fixed a bug with some default FTPS interface settings not getting saved correctly Added a config setting to require common name and username matches when verifying client certificates Version 4.0.3.0 Official release notes -- 6/30/2010 Default interface settings can now be set for all types of interfaces Newly detected IP addresses can now be configured to auto-bind to multiple types of listeners All lists can now be sorted on the LDAP and AD mapping tabs Fixed a bug in the web administration GUI that prevented changing download permission on a virtual directory Fixed a bug in the SITE PSWD command that would reject passwords with capital letters Fixed a bug in the MLSD and MLST commands that caused directory listings to always show hidden files Fixed a bug in client certificate authentication CA certs are now loaded when present in PKCS12 files Added support for Certificate Revocation Lists (CRLS) Added support for DSA and Elliptical curve certificates Added support for ephemeral RSA and Diffie-Hellman key exchange Added DSS key exchange support for SSH SFTP The self-signed certificate creation dialog now offers the choice of RSA, DSA, or Elliptical Curve certificates Added support for SSH2 public key authentication SSL settings can now be changed and applied without restarting the server Version 4.0.2.2 Official release notes -- 6/14/2010 Display bug fix for SSH connection ID always being zero for the first log message for that connection Fixed a bug with temporary IP blocks being released too early Whitelist IP mode now honors temporary auto-blocking (if set) instead of permanently removing an IP address User interface improvements for the IP Manager (context menu options and header sorting for the IP list) Added context menu options for filtering the onscreen log view Fixed a bug where max simultaneous connections wasn't tracked correctly for a user Fixed an AD user impersonation bug Version 4.0.2 Official release notes -- 6/7/2010 Disabled status is now taken into consideration for LDAP and AD groups Disabled groups now show up faded on LDAP and AD mapping tabs Auto blocking now works properly for SFTP connections Fixed a handle leak with SFTP connections Increased the size of the IP Manager Added ability to search for an IP address in the IP Manager Added Classless Inter-Domain Routing (CIDR) support for adding IP ranges to the IP Manager Added option to change virtual directory paths in the User Manager Version 4.0.1.1 Official release notes -- 5/27/2010 Fixed an LDAP authentication bug that allowed anonymous binds Enhanced the "Check for Updates" dialog Version 4.0.1 Official release notes -- 5/24/2010 Improved support for SFTP key re-exchange Several improvements to the web administration interface Added an option to ignore SFTP channel window size violations Added an option to disallow setting SFTP encryption to 'none' More forgiving directory parsing code for paths with multiple consecutive slashes in non-virtual directory mode Version 4.0.0.11 Official release notes -- 5/18/2010 Improved SFTP support, especially for Linux and Unix clients Version 4.0.0.9 Official release notes -- 5/14/2010 Improved the web administration interface and added new features Fixed a bug with using SFTP in FIPS 140-2 mode Fixed a bug with failing to recognize IP ranges during IP blocking Updated SOAP support Version 4.0.0.8 Official release notes -- 5/8/2010 Fixed a simple directories bug for SFTP Fixed a passive connection bug Fixed a bug that could result in problems changing interface ports Updated the OpenSSL libraries to the latest version Version 4.0.0.6 Official release notes -- 5/7/2010 Fixed a bug that could result in problems changing interface ports Updated the OpenSSL libraries to the latest version Version 4.0.0 Official release notes -- 5/3/2010 Added File transfer over SSH (SFTP) Added Implicit TLS/SSL FTP (FTPS) Added ability Listen for connections on multiple ports for a single IP Allow simultaneous FTP, SFTP, and FTPS for a single interface Allow Active Directory domain authentication against multiple domains Allow LDAP authentication against multiple LDAP servers Associate Active Directory users and LDAP users with Cerberus Groups to allow customization for individual Active Directory or LDAP users New policy page to allow configuring password length and complexity requirements Auto-disable native accounts after too many failed password attempts New Authentication chaining control to allow configuring the order that users are checked against authentication services Temporary user and group accounts

Version 3.0 Release Notes		Show
Version 3.1.4 Official release notes -- 2/26/2010 Updated configuration files to encrypt some settings Added a Verify button to the Security dialog to test certificates and keys Service and GUI now sync up immediately when the GUI changes the username or password of the service Version 3.1.3.1 Official release notes -- 2/12/2010 Fixed a bug that caused anonymous users to see blank directories Version 3.1.3 Official release notes -- 2/10/2010 Passed Windows 7 compatibility tests from Microsoft Fixed Cerberus group settings ignored for require secure control and require secure data Version 3.1.2 Official release notes -- 2/05/2010 Adjustments to screen drawing code to better deal with screen DPI scaling Added additional SSL connection auditing information (cipher used) to the log Added capability to select the ciphers used and not used for secure connections Fixed a bug where interfaces configured for passive mode DNS or manual IP could switch modes when running as a service Version 3.1.1 Official release notes -- 2/03/2010 Added a limiter to the user manager when enumerating Active Directory accounts Improved error checking for some commands Added support for SITE UTIME command (both formats) Made sure to properly shutdown TLS/SSL connections for idle connection time outs Added support for client command OPTS UTF8 OFF to turn off default UTF8 mode Version 3.1.0.5 Official release notes -- 1/26/2010 Added an alternate IP address detection method for rare cases where an IP interface can't be detected Fixed a problem with the service always using the default passive port range Version 3.1.0.4 Official release notes -- 12/17/2009 Fixed a bug that could cause connections to disconnect immediately after making a connection Enhanced the listing commands with more UNIX-style options Fixed listing commands with wildcards for network shares Version 3.1.0.3 Official release notes -- 12/16/2009 Reorganized the Active Directory and LDAP authentication configuration pages Added the option to pick a group to associate with an Active Directory user Active Directory user home directories can now be located on non-anonymous shares Added the option to select a "Global Home Directory" for LDAP users or a "Global Home Directory/%username%" just like for Active Directory users Better error checking and reporting for when there are problems accessing virtual directories Miscellaneous performance improvements Version 3.1 Official release notes -- 11/22/2009 Renaming a group now updates users that include that group The GUI can now be accessed when running as a service Large performance improvements when running in service mode Version 3.0.8 Official release notes -- 10/15/2009 Fixed a bug that could cause the server to crash Made all SOAP calls require login credentials System-wide performance improvements Version 3.0.7.1 Official release notes -- 10/06/2009 Fixed a bug that could allow an attacker to crash the server Version 3.0.7 release notes -- 10/05/2009 Fixed a bug that could allow multiple instances of Cerberus to run when running as a service Vista and higher will no longer get interactive service messages when running as a service Performance improvements Version 3.0.6 release notes -- 09/28/2009 Added loopback address detection for IPv6 addresses Added support for clients that quote the filename passed for XCRC, XSHA1, XSHA256, XSHA512, and XMD5 commands Version 3.0.5 release notes -- 09/20/2009 Fixed a bug that could prevent HTTPS SOAP connections Added the ability to use PKCS12 formatted certificates for the secure SOAP and built-in web server Major improvements to the web-based user manager XML reading and writing performance improvements Minor system-wide performance improvements Version 3.0.4 release notes -- 09/12/2009 Miscellaneous system-wide performance improvements Additional system logging and error checking Added a log filter to the logging tab Added a the capability to require secure control and data connections on a per user and per group basis Minor UI improvements Fixed a bug that resulted in not being able to select network shares or mapped drives from the dialog box for user directories Made the SOAP API version 1.2 compliant Version 3.0.3 release notes -- 08/25/2009 Fixed a bug that resulted in interface activate settings not getting saved Added right-click menus to connections and transfers tabs Version 3.0.2 release notes -- 08/16/2009 Fixed a bug that refused anonymous logins with empty passwords Fixed a bug that sometimes prevented interface settings from being applied at startup Fixed a crash bug APPE can now append to files greater than 4GB in size Added over a dozen new web service calls Updated the help file Version 3.0.1 release notes -- 07/31/2009 Fixed General tab of IP Manager not displaying on Windows 2000 Server Fixed IP block time not getting updated for connections Fixed authentication so that the group setting for "Is Anonymous" and "Is Disabled" was considered for a user that was part of the group Updated the help file Version 3.0 release notes -- 07/21/2009 Added LDAP authentication support Added support for client commands XSHA256, XSHA512, ALLOC Speed improvements to the login process Completely rewritten web administration capability (Work in progress) Linked against the FIPS 140-2 validated OpenSSL cryptographic module Added FIPS 140-2 mode Added support for the CCC, MFMT, and MFCT commands Continued improved UTF-8 support and bug fixes EPSV command support International character set support (Unicode) Added support for the CSID and RMDA extension commands Added support for the MLST and MLSD extension commands Added groups support Converted the users and settings files to XML - No more dependency on the Windows Registry Added a new auto-update system for upgrading Cerberus Added support for the CLNT command (client name) Added support for the XCRC command Added support for the XSHA1 command Added support for the SITE ZONE command Added an option to bind to the localhost address Complete rewrite of the underlying GUI framework Updated to the latest versions of log4cxx, gsoap, and the OpenSSL libraries Updated the look and feel of the GUI controls, new toolbar buttons, converted many icons to Vista quality Added a moving chart to the statistics pane to show upload and download bandwidth used over time Moved all configuration and user files from the Program Files group to the appropriate Application Data directory Improved Vista compatibility No more startup delay while detecting the WAN IP address Improved the key strength and options for generating self-signed certificates Native, 64-bit version

Version 2.50 Release Notes		Show
Version 2.50 release notes -- 05/04/2009 Fixed a bug in the response to the SIZE command when responding to directory SIZE requests Version 2.49 release notes -- 10/02/2008 Fixed an incompatibility with some FTP clients when using secure connections Fixed a bug that sometimes resulted in the server service shutting down when a user logged out Updated the log4cxx and OpenSSL packages to the latest versions Cerberus now binds to the C-Runtime libraries dynamically Version 2.48 release notes -- 6/26/2008 The RETR command now correctly returns an error code when a path is a directory instead of a file - This should resolve Firefox incompatibilities Updated the log4cxx and OpenSSL packages to the latest versions Version 2.47 release notes -- 2/10/2008 Fixed a bug that resulted in no response being sent back for an unsupported MODE Added an option to disable/enable detection of IPv6 addresses Fixed a toolbar display issue The columns in the main tab window now auto-resize when the applications size changes Version 2.46 release notes -- 11/7/2007 Fixed a bug that prevented blocking a connected user from the GUI Fixed a bug that caused the MDTM command to fail when setting a date/time and the file path contains spaces Fixed a bug that resulted in a failure code being returned when a directory LIST or NLST filter returned no matching files Fixed an XSS vulnerability in the web interface Version 2.45 release notes -- 4/27/2007 Fixed a bug that prevented blocking a connected user from the GUI Fixed a dynamic DNS bug that resulted in the wrong external IP being used when multiple interfaces are resolving from different DNS addresses Fixed a bug in the IP blocker dialog that sometimes failed to properly delete an IP address Version 2.44 release notes -- 3/27/2007 Fixed a display bug in the generate statistics function Fixed a dynamic DNS bug Fixed a bug in the IP block list that prevented IP addresses from being deleted Fixed a bug in the IP block manager that resulted in corrupt block list upgrades from version 2.42 and below Fixed a bug in that sometimes resulted in failed active data connections Upgraded the IP block list file format to XML Version 2.43 Official notes -- 3/19/2007 Preliminary IPv6 Support Resolved installation issues on Windows 2000 Added an option to always use the local address for passive commands when the connection is on the same LAN Version 2.42 Official notes -- 2/27/2007 Resolved a bug that could result in a crash when generating a statistics file Resolved a bug resulting in a connection never terminating when a remote client’s connection is broken during an upload to the server Compiled against the most recent version of OpenSSL Version 2.41 Official notes -- 2/21/2007 Updated the logging system to use the latest version of log4cxx Fixed a bug that resulted in the log file failing to be updated when running as a service Updated gSOAP support and fixed a realm authentication bug Added support for the EPRT and EPSV commands Compiled against the most recent version of OpenSSL Version 2.4 Official notes -- 9/09/2006 Fixed a GDI resource leak Fixed an bug that caused an error message to be displayed when a user initiated a file backup Compiled against the most recent version of OpenSSL

Version 2.4 BETA Notes		Show
Version 2.4 BETA 3 notes -- 5/18/2006 Added a confirmation dialog for deleting user and virtual directories Added a users file backup and backup restore capability Compiled against the latest OpenSSL release (0.98b) Version 2.4 BETA 2 notes -- 5/7/2006 Changed the FEAT command response to more closely match the FTP RFC Added SSLv3/TLSv1 support Added option to require SSL/TLS control and data protection Added option to require NT users to be part of a security group before uthorizing access Miscellaneous minor bug fixes and UI improvements Version 2.4 BETA 1 notes -- 11/20/2005 Fixed a DDoS bug Added explicit TLS/SSL support Fixed an incompatibility with Firefox that resulted in directory contents sometimes not being shown in Firefox Improved web services support New file logging system based on log4cxx (work in progress)

Version 2.3 Release Notes		Show
Version 2.32 notes -- 7/7/2005 Fixed an IP manager GUI bug Added data validation to several IP manager fields Fixed a bug that sometimes caused the server to crash when closing Version 2.31 notes -- 6/15/2005 Fixed Getting Started Wizard bug Improved the login notification messages Fixed several dialog inconsistencies Added descriptions to several menu items Version 2.3 notes -- 6/12/2005 Fixed a bug that resulted in virtual directories mapped directly to drives sometimes not displaying without checking the "Show Hidden Folders" property Added the SITE CHMOD command to allow for limited file property changes Fixed a minor GUI resource leak Improved the progress bar look Progress bars no longer require 1% of the transfer to complete before appearing Added tooltip help to many of the dialog controls Added several new root directory options for NT authenticated users Added color coding for different types of log messages Added a desktop popup notification window for new connections Corrected a minor bug that resulted in "log" being appended to whatever directory was selected as the log file directory for XML logging Dialogs now tab correctly New look to the Server, IP, and User manager New Hi-color icons for the toolbar and dialog boxes Improved WAN auto-detection with shorter timeout Users can now launch the initial setup screen from the main menu Numerous minor bug fixes and UI improvements

Version 2.2 Release Notes		Show
Version 2.23 BETA notes -- 2/05/2005 Replacing an existing file using rename now requires delete permission Added number of connections and current transfer rates as tooltip bubbles on the notification icon Corrected a bug that allowed users to continue to attempt to login after they had been auto blocked if the connection remained open Replaced a few icons with enhanced Hi-color icons Added current transfer rate indicators to the status bar Corrected a bug that sometimes showed the date in the wrong format during a "LIST" operation Corrected a few bugs that could result in incorrect transfer rates being displayed during a file transfer. Updated the transfer rates to reflect current transfer rate as opposed to average transfer rate. User and group information should now be displayed for directory items listed during a wildcard "LIST" Added configurable denied welcome message for when the server is set to not accept logins The taskbar notification icon now changes when the server has at least one user connected Cerberus can now detect and add itself to the Windows Firewall exclusion list MDTM time can now be configured to set the modification time and access time on a file Version 2.22 Official notes -- 9/23/2004 Fixed a timeout bug in the "Optimized file transfer" mode Cancelling a connection now properly terminates users who are transferring files The correct tooltips are now displayed for the Connections and Transfers tabs The Transfers tab now displays the bytes transferred out of total The Speed value on the Transfers tab now has 2 decimal places of precision Added right-click menu option to terminate a connection from the Transfers tab Fixed a bug that resulted in connection IDs being displayed in the wrong base format Fixed a bug in the IP Manager that could result in corrupt IP blocking file when only a single address was entered to block Version 2.21 Official notes -- 9/02/2004 Fixed a bug in the "Use Optimized Transfer mode" setting that resulted in corrupted files being transferred Installer now changes default send and receive buffer size to 64KB Version 2.2 Official notes -- 8/30/2004 Added the SITE PSWD command to allow users to change their own passwords Fixed a bug that could result in a file transfer error causing a 100% CPU utilization spike Send and receive buffer settings now more directly affect file transfer speeds - Note: Has no impact when using "optimized file sending" mode Anonymous passwords are now logged Icon colors are now full color under all versions of Windows New higher color Cerberus icon Fixed "group name too long" directory listing bug Long directory listings now correctly display the year when the file is a year or older. New WAN IP Auto-detection feature Version 2.2 BETA 3 notes -- 6/06/2004 Added NT user and active directory authentication User and group information is now displayed for files and directories during a long file listing (NT4, 2000, XP, 2003 only). The "X" (Close) button now works in sub windows Miscellaneous user interface fixes Updated Help file Version 2.2 BETA 2 notes -- 5/10/2004 Corrected a Virtual Directory rename problem in the User Manager Added a safeguard check to prevent renaming of Virtual Directories with forward or backslashes Version 2.2 BETA 1 notes -- 5/10/2004 Changed the directory listing commands to accept and interpret common UNIX "ls" flags within LIST and NLIST commands Added a simple directory mode in addition to the standard virtual directory mode Greatly improved support for wildcards within LIST and NLIST commands Greatly improved support for the common MGET; ftp implementation thanks to better wildcards support Pressing enter or esc after renaming an item in the User manager no longer closes the dialog box Added support for Windows XP themes Changed the look of many of the program icons Added Web Services interface to many common FTP server tasks Added a new simple virtual directory mode (see the help file for more details) Added support for UNC paths as virtual directories Users in the User manager are now sorted in alphabetical order

Version 2.1 Release Notes		Show
Version 2.16 Official release notes -- 3/25/2004 Fixed a bug that could result in an interface failing initialization in NT4 Added an option to disable the startup tip that appears when starting the server Version 2.15 Official release notes -- 2/06/2004 Fixed a major bug in the 'Use different IP for PASV' option. Version 2.15 BETA release notes -- 1/25/2004 Added a default interface to the interface configuration screen. The user-defined settings from the default interface are now applied to new interfaces automatically. Added an automatic IP-blocker. Administrators can now configure filters to automatically block IP addresses (temporarily or permanently) that fail authentication after a certain number of attempts. Added a new network checklist screen to the Getting Started Wizard. The new wizard will point out possible problems in the network configuration that may cause problems with an FTP Server. Added an auto-detect IP address feature. The server can now automatically detect and activate new interfaces, as well as clean up and deactivate interfaces that have been released. Added a line limit option to the onscreen logger. Corrected a bug with the "Deny FXP Transfers" option. Changed the look of the taskbar icon Version 2.11 release notes -- 12/21/2003 Changed the permissions structure so that uploaded files cannot overwrite existing files unless the user has delete permission The MDTM command can now be used to set the date/time on an uploaded file Enhanced file send operations by allowing the OS to cache files Added an option under the "Advanced" tab of the server manager that instructs the server to use the "TransmitFile" API call to send files. Not available on Windows 98. Version 2.11 BETA 2 release notes -- 11/11/2003 Added automatic import of previous Cerberus settings(except interfaces) Fixed a buffer overflow vulnerability Added experimental support for the OPTS and LANG commands Fixed a bug the caused a "550 Invalid Path" error message whenever a CWD to the root ("/") was issued Resolved a bug that caused settings changes to be lost on restart when Cerberus was installed as a service Corrected some cosmetic flaws in the GUI's server manager Fixed a bug that turned off command logging when connection logging was turned off Version 2.11 BETA release notes -- 10/29/2003 Adjusted the dialog button positioning so that the buttons wouldn't get clipped on XP The login process has been changed so that incorrect usernames will now be prompted for passwords. This is a security enhancement. Fixed a UI bug that could cause the Getting Started Wizard to keep showing up after a reboot Added an option under the "Advanced" tab of the server manager to deny FXP transfers. Added an option under the "Advanced" tab of the server manager to deny PORT commands on the reserved ports (Ports below 1025). Passwords are not longer stored in the user file. Passwords are now SHA-1 encrypted, and then only the password message digest is stored. Default programs are now invoked, instead of always Internet Explorer, for external links. Ex: mailto, Cerberus homepage web link, statistics file display. The interface limit of 5 has been removed. Cerberus can now listen on an unlimited number of interfaces. The list command has been changed to display the contents of directories passed as parameters Updated help file Numerous minor bug fixes and performance enhancements Version 2.1 Release notes -- 3/18/2003 Added support for P@SW command to allow certain SMC Barricade routers to work with passive mode Added support for MDTM command Added additional support for FEAT command Improved support for running as a service Added option to display file times in local or UTC format Greatly reduced flicker on screen resizing Added "Getting Started" wizard to the GUI Improved support for IE, Netscape, and Opera FTP clients Improved communication performance between the GUI and the server Fixed bug which caused the PORT command to sometimes fail on NT4 Better error checking to provide additional fault-tolerance Several minor bug fixes

Version 2.0 Release Notes		Show
Version 2.02 Release notes -- 1/07/2003 Official release Added PASV port range option to the 'Advanced' Server Configuration Version 2.02 BETA Release notes -- 12/22/2002 Resolved a bug that allowed multiple versions of Cerberus to be started if Cerberus was running as a service, and a Terminal Services client started another version. Fixed a bug that could, on rare occasions, cause the server to continuously attempt to terminate a connection that had already been terminated Added an option to log server replys Rewrote underlying socket communications to improve performance Several minor bug fixes and performance improvements Version 2.01 Release notes -- 10/17/2002 Enhanced error detection and recovery Corrected a bug which prevented networked drives from being displayed to clients Changed the appearance of the Status Pane Changed some of the toolbar icons to Hi-color icons Added several commands to the 'right-click' menu of the User Manager Added the option to 'Clone' (use as a base template) a user Checked, and corrected where necessary, all string and buffer manipulations routines to make sure they were "buffer-overflow proof" The uninstall program now removes Cerberus from the NT Service list Version 2.0 Official Release notes -- 10/07/2002 Corrected a bug that could result in an uploaded file being corrupt when overwriting and existing file of the same name Added the ability to control how many times an account can be logged into simultaneously Version 2.0 BETA 4 Release notes -- 9/21/2002 Corrected a bug which could prevent Cerberus from starting up on Windows 95 and 98 Fixed a bug in the registry access routines which could cause Cerberus to crash Version 2.0 BETA 3 Release notes -- 9/20/2002 Corrected the "The descriptor is not a socket" bug Version 2.0 BETA 2 Release notes -- 9/16/2002 New User Manager Several GUI changes and improvements Version 2.0 BETA 1 Release notes -- 8/11/2002 Completely new core. No more MFC! Can now be installed as a Native NT Service Data Connections established through the PORT command now correctly binds to local port 20 (RfC959). Should help with firewalls Corrected a bug that occasionally caused uploaded files to be closed before the last few kilobytes were written The User Manager has been revamped again. Automatically saves changes, instead of constantly asking for permission Ability to control whether or not to display hidden files and directories New toolbar icons Added a context menu to the connections page Ability to manually add interfaces Support for files greater than 4GB Too many security and bug fixes to list

Version 1.0 Release Notes		Show
Version 1.71 Release notes -- 2/07/2002 Only one copy of Cerberus can start at a time The User Manager has been made more user friendly Settings and user lists now save automatically when Windows is shutting down Rewrote the directory parsing routines for greater reliability Version 1.7 Release notes -- 12/16/2001 Fixed the "Invalid Path" error that showed up when a file or directory with more than one period was used in a command Directories added to a user's virtual root can now have different permissions The user manager has been redesigned to be more user friendly Fixed a bug that caused processor utilization to sometimes spike when a file was downloaded. Command progress indication. The user page will tell whether a command is in progress or complete. For file downloads, the percentage left to download will be displayed Fixed a bug that could cause the server to crash if a message greater than 4KB was specified in either the welcome, goodbye, or max connection edit boxes. Fixed a bug that could cause the server to crash if the server wasn't restarted after a message was changed. Several other bug fixes Version 1.6 Beta Release notes -- 8/29/2001 Fixed a major security bug that allowed unrestricted access to the server machine by using periods in the change directory path Modified the directory retrieval commands to more closely model Unix behavior. Should fix the problems encountered using the mget * command and several other security problems Complete rewrite of the underlying directory parsing functions. Lots of other minor fixes and improvements Version 1.5 Release notes -- 5/21/2001 Added a new virtual root directory file structure Added support for the APPEnd command The server now remembers whether an interface is disabled or enabled Enhanced the fault tolerance for clients that send incorrect or unsupported commands by ensuring a reply code is always sent Added this help file. Corrected a bug in the IP Manager that caused all IP addresses placed inside to be blocked regardless of whether the deny or allow button was selected. CWD command now fails if anything other than a valid directory is passed Activated the "Allow Login" feature for particular interfaces Server now handles X-versions(experimental) of commands Maximum connection settings are now enforced Streamlined a lot of the underlying code Version 1.22 Release notes -- 5/08/2001 Fixed a security problem that always uses c:\ as the root directory for anonymous logins. Replaced the imbedded directory control in User Manager with a more stable one. Rewrote the command parsing routines to provide greater fault tolerance for incorrectly formatted, or garbage strings on the control connection. Version 1.2 Release notes -- 5/03/2001 Changed OS returned from SITE command. Should improve FTP auto-detect. Fixed a security hole that allowed people to execute certain commands without being logged in Removed the hard-coded paths. International versions of Windows should work now. Some stability improvements Version 1.1 Release notes -- 4/25/2001 Fixed the CWD command to fail when the remote directory requested doesn't exist Added support for the CDUP command Added additional log messages for file transfers Major code rewrites to improve overall performance New statistic generator Added additional error checking during remote path resolution Some GUI changes/improvements Fixed a major bug that caused PASV file uploads to fail Several other minor bug fixes Modified the directory structure sent with the LIST command to mirror UNIX exactly Increased compatibility with popular FTP clients Partial support for the ABORt command Version 1.05 Release notes -- 4/16/2001 Added support for the SIZE and REST commands. The server can now restart failed file transfers from the point of failure Fixed a MAJOR security issue that caused upload/download permissions to not be checked for users. Added the creation of the 'log' directory so that the AutoLog option wouldn't error when attempting to open the log file. Corrected the "incorrect user file version" bug that appears when you restart the server (note: delete the old user and block files). Corrected a bug in the STOU command that caused the wrong procedure to be called. Optimized the file transfer code and added improved error detection. Thanks to everyone who has submitted bug reports. Version 1.03 Release notes -- 4/14/2001 Corrected a bug introduced in the last version that resulted in the wrong OS being detected (currently harmless, but annoying). Version 1.02 Release notes -- 4/13/2001 Added an IP Manager to control connection attempts. Added an option to automatically record a log file while the server is running. More event tracking added to the log. Enhanced error detection and recovery. Version 1.01 Release notes -- 4/5/2001 Added menu options to the taskbar icon. You can now hide or show the Cerberus manager window from the taskbar. Added an option to hide the server manager window at startup. Added my email address to the about dialog for tech support. Activated the ability to save a copy of the log screen to file. Version 1.0 Release notes -- 3/14/2001 Initial Release