Overview

Introduction

Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed free of charge under the terms of the GNU General Public License

Support is available through our forums, the wiki and the bug and feature request trackers.

In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.

Quick download links

Pick the client if you want to transfer files. Get the server if you want to make files available for others.

News Atom feed icon

2009-01-07 - FileZilla Client 3.2.0 released

Bugfixes and minor changes:

  • Fix account logon type in combination with FTP proxies

2009-01-03 - FileZilla Client 3.2.0-rc2 released

Bugfixes and minor changes:

  • Change wording of some strings
  • Support yet another directory listing variant on obscure MVS style systems
  • Fix odd behavior if deleting items from site manager
  • Do not show proxy password in message log on SFTP connections
  • Properly display "bytes" suffix in filelist status bar if not using thousands separator

2008-12-30 - FileZilla Client 3.2.0-rc1 released

New features:

  • Bookmarks
  • Logging to file
  • *nix: Use GNOME's Session Manager D-Bus API to cleanly shut down FileZilla on end of session
  • MSW: Improve installer's Vista compatibility.

Bugfixes and minor changes:

  • *nix: Fix encoding issues with thousands separator in some locales
  • Thousands separator on file exists dialog
  • Rearrange filter dialog a bit
  • Compile fixes for HP-UX

2008-07-24 - Security Advisory

FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.

If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.

Impact

An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.

Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.

Affected versions

All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1