Absolute FTP

The vendors supporting the versions of SSH Secure Shell, CRT, and AbsoluteFTP available on Software Central have discontinued making bug or security fixes for those software products. At this time those products do not meet campus Minimum Security Standards and may increasingly become potential targets for attacks.

IST will therefore end active distribution of SSH Secure Shell, CRT, and AbsoluteFTP to the campus on October 1, 2007.

Students, faculty, and staff looking for an SSH2-based secure terminal emulation or file transfer application for their own Windows computers can use, in addition to several free and for-fee SSH2 security products, the campus-licensed software HostExplorer (HE) 2008 with the Connectivity Secure Shell (CSS) 2008 security add-on. Both of these products are available via the Software Central distribution web site.

See also the following IST Knowledge Base articles for more information about HE 2008 and CSS 2008:

• https://kb.berkeley.edu/kb1705 (HE)
• https://kb.berkeley.edu/kb1725 (CSS)
• https://kb.berkeley.edu/kb1185 (Securing X Window System)
• https://kb.berkeley.edu/kb1795 (Public Key Authentication)
• https://kb.berkeley.edu/kb1266 (Securing network traffic...)

For more information about the campus Minimum Security Standards for Networked Devices, see:

http://security.berkeley.edu/MinStds/ (MSS)

Alternative programs do exist for doing file transfers securely, such as those which are based on the secure SSH2 protocols, for example, SCP or SFTP. See SSH Secure Shell for software that does support the SCP and SFTP secure file transfer mechanisms with several secure authentication options.