CVE-2011-2523 vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
CriticalCVSS 9.8
EPSS 96.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vsftpd project vsftpd | = 2.3.4 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| vsftpd | = 2.3.4 downloaded between 20110630 and 20110703 | No fix listed |
References
- Debian Security Tracker CVE-2011-2523 third-party-advisory vendor-advisory
- packetstormsecurity.com
- access.redhat.com third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- vigilance.fr third-party-advisory
- [oss-security] 20110711 Re: vsftpd download backdoored mailing-list third-party-advisory