CVE-2011-2523 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

CVE-2011-2523

CRITICAL 9.8CVE-2011-2523 · Published 27/11/2019 · updated 16/06/2026

Package	Affected versions	Patched versions
vsftpd vsftpd_project	`= 2.3.4`	No fix yet

Description

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

References

packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html
access.redhat.com/security/cve/cve-2011-2523 · Third Party Advisory
packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html · Exploit
security-tracker.debian.org/tracker/CVE-2011-2523 · Third Party Advisory
vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 · Third Party Advisory
openwall.com/lists/oss-security/2011/07/11/5 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free