CVE-2011-2523
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- Record
CVE-2011-2523- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- Record
CVE-2011-2523- Updated
- 2026-11-02
EUVDEUVD-2011-2508 No score
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- Record
EUVD-2011-2508- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qf3g-hgw2-8r8h No score
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- Record
GHSA-qf3g-hgw2-8r8h- Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | VSFTPD 2.3.4 Backdoor Command Execution | 2011-07-03 |
| Exploit-DB | vsftpd 2.3.4 - Backdoor Command Execution (Metasploit) | 2011-07-05 |
| PoC in GitHub | HerculesRD/vsftpd2.3.4PyExploit | 2021-04-09 |
| Exploit-DB | vsftpd 2.3.4 - Backdoor Command Execution | 2021-04-12 |
| PoC in GitHub | nobodyatall648/CVE-2011-2523 | 2021-05-01 |
| PoC in GitHub | Gr4ykt/CVE-2011-2523 | 2021-08-31 |
| PoC in GitHub | padsalatushal/CVE-2011-2523 | 2021-11-07 |
| PoC in GitHub | MFernstrom/OffensivePascal-CVE-2011-2523 | 2022-05-27 |
| PoC in GitHub | 0xSojalSec/-CVE-2011-2523 | 2022-06-09 |
| PoC in GitHub | 0xSojalSec/CVE-2011-2523 | 2022-06-09 |
Show 19 moreShow less
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | XiangSi-Howard/CTF---CVE-2011-2523 | 2022-12-03 |
| PoC in GitHub | cowsecurity/CVE-2011-2523 | 2023-02-05 |
| PoC in GitHub | Lynk4/CVE-2011-2523 | 2023-05-09 |
| PoC in GitHub | vaishnavucv/CVE-2011-2523 | 2023-10-16 |
| PoC in GitHub | 4m3rr0r/CVE-2011-2523-poc | 2023-11-28 |
| PoC in GitHub | Shubham-2k1/Exploit-CVE-2011-2523 | 2024-03-05 |
| PoC in GitHub | Tenor-Z/SmileySploit | 2024-04-23 |
| PoC in GitHub | 0xB0y426/CVE-2011-2523-PoC | 2024-05-27 |
| PoC in GitHub | AnugiArrawwala/CVE-Research | 2024-07-03 |
| PoC in GitHub | Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit | 2024-08-03 |
| PoC in GitHub | Lychi3/vsftpd-backdoor | 2025-02-19 |
| PoC in GitHub | vedpakhare/vsftpd-234-vuln-report | 2025-04-05 |
| PoC in GitHub | cybermads/CVE-2011-2523 | 2025-04-06 |
| PoC in GitHub | sug4r-wr41th/CVE-2011-2523 | 2025-04-12 |
| PoC in GitHub | JohanMV/explotacion-vsftpd-nmap_Laboratorio_1 | 2025-04-14 |
| PoC in GitHub | lghost256/vsftpd234-exploit | 2025-06-19 |
| PoC in GitHub | hklabCR/CVE-2011-2523 | 2025-07-06 |
| PoC in GitHub | krill-x7/CVE-2011-2523 | 2025-07-12 |
| Nuclei | VSFTPD 2.3.4 - Backdoor Command Execution |
Plus 45 more. The full list has every link.
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, exploits_more | ||
| exploits | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2523 is a critical vulnerability (CVSS 9.8) in Vsftpd, published November 27, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 96.2%, the 99th percentile. No source names a fixed version.
References
security-tracker.debian.org/tracker/CVE-2011-2523
access.redhat.com/security/cve/cve-2011-2523
openwall.com/lists/oss-security/2011/07/11/5
vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805
packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html
nvd.nist.gov/vuln/detail/CVE-2011-2523
github.com/advisories/GHSA-qf3g-hgw2-8r8h