PT-2019-6647 · Vsftpd · Vsftpd

Josh Bressers · Published 2019-11-27 · Updated 2025-09-22 · CVE-2011-2523

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vsftpd version 2.3.4

Description The issue concerns a backdoor in vsftpd that opens a shell on port 6200/tcp. This backdoor was present in versions of vsftpd 2.3.4 that were downloaded between 20110630 and 20110703.

Recommendations For vsftpd version 2.3.4, consider disabling the service or restricting access to port 6200/tcp as a temporary workaround until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2011-2523

Affected Products

Vsftpd

References · 12

• 🔥 https://github.com/padsalatushal/CVE-2011-2523 · Exploit
• 🔥 https://github.com/4m3rr0r/CVE-2011-2523-poc · Exploit
• 🔥 https://exploit-db.com/exploits/17491 · Exploit
• 🔥 https://exploit-db.com/exploits/49757 · Exploit
• 🔥 https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2523 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2523 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2011-2523 · Note
• http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html · Note
• https://openwall.com/lists/oss-security/2011/07/11/5 · Note
• https://t.me/cibsecurity/8383 · Telegram Post
• https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 · Note