PT-2019-6647 · Vsftpd · Vsftpd

Josh Bressers · Publicado 2019-11-27 · Atualizado 2025-09-22 · CVE-2011-2523

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vsftpd version 2.3.4

Description The issue concerns a backdoor in vsftpd that opens a shell on port 6200/tcp. This backdoor was present in versions of vsftpd 2.3.4 that were downloaded between 20110630 and 20110703.

Recommendations For vsftpd version 2.3.4, consider disabling the service or restricting access to port 6200/tcp as a temporary workaround until a patch is available.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2011-2523

Produtos afetados

Vsftpd

Referências · 12

• 🔥 https://github.com/padsalatushal/CVE-2011-2523 · Exploit
• 🔥 https://github.com/4m3rr0r/CVE-2011-2523-poc · Exploit
• 🔥 https://exploit-db.com/exploits/17491 · Exploit
• 🔥 https://exploit-db.com/exploits/49757 · Exploit
• 🔥 https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html · Exploit
• https://access.redhat.com/security/cve/cve-2011-2523 · Nota
• http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html · Nota
• https://openwall.com/lists/oss-security/2011/07/11/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2523 · Nota de Segurança
• https://t.me/cibsecurity/8383 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2011-2523 · Aviso do Fabricante
• https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 · Nota