PT-2025-34100 · Proftpd · Proftpd

Published 2025-08-20 · Updated 2025-09-24 · CVE-2010-20103

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.3c

Description A malicious backdoor was integrated into the official ProFTPD 1.3.3c source tarball, distributed between November 28 and December 2, 2010. This backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any operating system command on the FTP server host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2010-20103

PROFTPCVE_2010_20103

Affected Products

Proftpd

References · 17

• 🔥 https://github.com/iSee857/CVE-2025-0108-PoC/tree/main · Exploit
• 🔥 https://github.com/iSee857/CVE-2025-0108-PoC · Exploit
• 🔥 https://github.com/fr4nc1stein/CVE-2025-0108-SCAN · Exploit
• 🔥 https://exploit-db.com/exploits/15662 · Exploit
• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16921 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-20103 · Security Note
• https://bdu.fstec.ru/vul/2025-01567 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/718374 · Security Note
• https://github.com/proftpd/proftpd · Note
• https://suse.com/security/cve/CVE-2010-20103.html · Note
• https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html · Note
• https://t.me/cveNotify/136319 · Telegram Post
• https://vulncheck.com/advisories/proftpd-backdoor-command-execution · Note
• http://proftpd.org · Note