Heartbleed

Please post here if you have problems in using Wing FTP Server.
Post Reply
gillianesquivel
Posts: 2
Joined: Fri Apr 11, 2014 9:09 am

Heartbleed

Post by gillianesquivel »

Following the announcement of the widespread internet vulnerability heartbleed, please can you confirm that the technical team has assessed the impact and confirm what steps have been taken to ensure the security of any information transmissions over this application.
FTP
Site Admin
Posts: 2094
Joined: Tue Sep 29, 2009 6:09 am

Re: Heartbleed

Post by FTP »

Wing FTP Server is not affected by the Heartbleed bug, because Wing FTP Server uses OpenSSL 0.9.8y.
gillianesquivel
Posts: 2
Joined: Fri Apr 11, 2014 9:09 am

Re: Heartbleed

Post by gillianesquivel »

thank you!
eordona
Posts: 55
Joined: Fri Aug 24, 2012 5:42 pm

Re: Heartbleed

Post by eordona »

Along the same lines, I came across this tool which checks your server for the Heartbleed vulnerability:

https://www.ssllabs.com/ssltest/index.html" rel="nofollow

Go ahead and enter your WingFTP server name and run the analysis!

While the server is not susceptible to the Heartbleed vulnerability, it did identify:

"The server supports only older protocols, but not the current best TLS 1.2. Grade capped to B."

So, will WingFTP look to implement TLS 1.2?
FTP
Site Admin
Posts: 2094
Joined: Tue Sep 29, 2009 6:09 am

Re: Heartbleed

Post by FTP »

OK, WingFTP supports TLS v1.2, and you can check out this KB article for the strong ciphers:
viewtopic.php?f=5&t=2936" rel="nofollow
Post Reply