by Vincent Drake | Jan 27, 2020 | FTP Server Security
Security Advisory Description Cerberus FTP Server contains a flaw that may allow malformed HTTP requests to crash the service. Malicious actors could leverage this flaw to repeatedly crash the server, thereby denying access to legitimate users. Fix Cerberus FTP...
by Vincent Drake | Jun 6, 2023 | FTP Server Security
Security Advisory Description Cerberus FTP Server administrators have the option to block end-users from uploading certain file types, identified by file name extension. When end-users attempt to upload or rename files, they encounter a permission error if the target...
by Vincent Drake | Jun 7, 2023 | FTP Server Security
Security Advisory Description When customers preview SVG files in the Cerberus FTP Server Web Client, it executes any scripts embedded within the SVG file in the context of the end-user’s session. This exposes the user to malicious scripts that may hijack the...
by Patrick Mills | Dec 11, 2019 | FTP Server Security
Security Advisory Description Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 are vulnerable to a permissions bypass when a user has zip/unzip permission. When zipping, users could zip files and folders that weren’t visible to them;...
by Jeff | Jan 8, 2020 | FTP Server Administration, Informational, News
You’ve been waiting and now it’s here: Cerberus FTP Server Version 11 is now available for new customers and active service agreement holders, with new features to keep your data and file transfers safe and secure. Cerberus FTP Server Version 11 offers the...
by Vincent Drake | Dec 11, 2019 | FTP Server Security
Security Advisory Description Cerberus FTP Server Enterprise Edition prior to versions 11.0.1 and 10.0.17 are vulnerable to a cross-site scripting (XSS) attack on Cerberus’ public share page. This XSS vulnerability allows a malicious public share to insert...
by Grant Averett | Dec 9, 2019 | FTP Server Administration, FTP Server Security
Security Advisory Description Cerberus FTP Server releases prior to 11.0.1 were vulnerable to brute force attacks for the 2FA code for a web client user or server administrator when using the Cerberus HOTP 2FA implementation. This vulnerability results from us...
by Grant Averett | Jun 13, 2023 | FTP Server Administration, FTP Server Security
Security Advisory Description Password reset links and public share links are vulnerable to HTTP host header attacks in older versions of Cerberus FTP Server. When a user requests to reset their password or to create a public share, Cerberus relies on the HTTP host...
by Tim Young | Nov 21, 2019 | FTP Logs
Server logs are one of the best tools a system administrator has to ensure your organization’s data and file security, but setting up and monitoring them can be a complicated task that often leaves you drowning in data. Businesses and organizations need a detailed...
by Grant Averett | Nov 18, 2019 | FTP Server Security
Security Advisory Description We recently released Cerberus FTP Server 10.0.16, and we wanted to elaborate on two security issues we fixed in that release and the previous 10.0.15 release. Email Header Bypass Vulnerability (fixed in 10.0.15) The first issue was an...
by Dana Anderson | Oct 10, 2019 | FTP Server Administration
Occasionally you may find that you need to move your instance of Cerberus FTP Server from one server to another. While the process is straightforward, there are steps you should take to minimize the risk of issues. First, before doing anything else, you should update...
by Dana Anderson | Jan 8, 2020 | FTP Server Security, Informational, Regulatory Compliance
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) addresses the minimum standards that health care organizations must implement to protect the security, privacy, and confidentiality of patient data that is transferred over the Internet. Section...
by Jeff | Apr 26, 2019 | FTP Server Security
No one can escape passwords. Whether it is the password for your Cerberus FTP Server, email, online banking, desktop login, or your favorite online media streaming service, passwords are something that everyone has to deal with regardless of profession. And because...
by Dana Anderson | Nov 27, 2019 | FTP Basics, FTP Server Security, Regulatory Compliance
One of our most-visited help articles is “How can I make Cerberus FTP Server secure?” In that article, we mention FIPS 140-2, but we still get quite a few emails from customers asking whether they should be using FIPS 140-2 mode in Cerberus. So let’s dig into...
by Tim Young | Jun 26, 2023 | FTP Basics, FTP Server Security
The File Transfer Protocol (FTP) is a standard network protocol that is used to transfer files and data between a client and a server on the same network. Once a standard protocol but now considered outdated due to improved and updated versions, FTP has inherent...
