CVE-2011-2523

high-risk

Published 2019-11-27

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Do I need to act?

94.3% chance of exploitation in next 30 days

EPSS score — higher than 6% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

2 public exploits available

49757, 17491

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Vsftpd

Debian Linux

Debian Vsftpd Project

Third Party Advisory https://access.redhat.com/security/cve/cve-2011-2523

Exploit https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execu...

Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2011-2523

Third Party Advisory https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805

Mailing List https://www.openwall.com/lists/oss-security/2011/07/11/5

Third Party Advisory https://access.redhat.com/security/cve/cve-2011-2523

Exploit https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execu...

Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2011-2523

Third Party Advisory https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805

Mailing List https://www.openwall.com/lists/oss-security/2011/07/11/5

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 27/34 · High

Exposure 10/34 · Low