{"id":"CVE-2011-2523","aliases":["EUVD-2011-2508","GHSA-qf3g-hgw2-8r8h"],"status":"published","title":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...","description":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.96184,"percentile":0.99878,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2019-11-27T20:36:53Z","modified":"2026-06-16T23:31:30Z","exploits":[{"source":"metasploit","id":"exploit/unix/ftp/vsftpd_234_backdoor","title":"VSFTPD 2.3.4 Backdoor Command Execution","type":"exploit","platform":"Linux,Unix","date":"2011-07-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/ftp/vsftpd_234_backdoor"},{"source":"exploitdb","id":"EDB-17491","title":"vsftpd 2.3.4 - Backdoor Command Execution (Metasploit)","type":"remote","platform":"unix","date":"2011-07-05","verified":true,"url":"https://www.exploit-db.com/exploits/17491"},{"source":"pocgithub","id":"HerculesRD/vsftpd2.3.4PyExploit","title":"HerculesRD/vsftpd2.3.4PyExploit","date":"2021-04-09","url":"https://github.com/HerculesRD/vsftpd2.3.4PyExploit"},{"source":"exploitdb","id":"EDB-49757","title":"vsftpd 2.3.4 - Backdoor Command Execution","type":"remote","platform":"unix","date":"2021-04-12","verified":true,"url":"https://www.exploit-db.com/exploits/49757"},{"source":"pocgithub","id":"nobodyatall648/CVE-2011-2523","title":"nobodyatall648/CVE-2011-2523","date":"2021-05-01","url":"https://github.com/nobodyatall648/CVE-2011-2523"},{"source":"pocgithub","id":"Gr4ykt/CVE-2011-2523","title":"Gr4ykt/CVE-2011-2523","date":"2021-08-31","url":"https://github.com/Gr4ykt/CVE-2011-2523"},{"source":"pocgithub","id":"padsalatushal/CVE-2011-2523","title":"padsalatushal/CVE-2011-2523","date":"2021-11-07","url":"https://github.com/padsalatushal/CVE-2011-2523"},{"source":"pocgithub","id":"MFernstrom/OffensivePascal-CVE-2011-2523","title":"MFernstrom/OffensivePascal-CVE-2011-2523","date":"2022-05-27","url":"https://github.com/MFernstrom/OffensivePascal-CVE-2011-2523"},{"source":"pocgithub","id":"0xSojalSec/-CVE-2011-2523","title":"0xSojalSec/-CVE-2011-2523","date":"2022-06-09","url":"https://github.com/0xSojalSec/-CVE-2011-2523"},{"source":"pocgithub","id":"0xSojalSec/CVE-2011-2523","title":"0xSojalSec/CVE-2011-2523","date":"2022-06-09","url":"https://github.com/0xSojalSec/CVE-2011-2523"},{"source":"pocgithub","id":"XiangSi-Howard/CTF---CVE-2011-2523","title":"XiangSi-Howard/CTF---CVE-2011-2523","date":"2022-12-03","url":"https://github.com/XiangSi-Howard/CTF---CVE-2011-2523"},{"source":"pocgithub","id":"cowsecurity/CVE-2011-2523","title":"cowsecurity/CVE-2011-2523","date":"2023-02-05","url":"https://github.com/cowsecurity/CVE-2011-2523"},{"source":"pocgithub","id":"Lynk4/CVE-2011-2523","title":"Lynk4/CVE-2011-2523","date":"2023-05-09","url":"https://github.com/Lynk4/CVE-2011-2523"},{"source":"pocgithub","id":"vaishnavucv/CVE-2011-2523","title":"vaishnavucv/CVE-2011-2523","date":"2023-10-16","url":"https://github.com/vaishnavucv/CVE-2011-2523"},{"source":"pocgithub","id":"4m3rr0r/CVE-2011-2523-poc","title":"4m3rr0r/CVE-2011-2523-poc","date":"2023-11-28","url":"https://github.com/4m3rr0r/CVE-2011-2523-poc"},{"source":"pocgithub","id":"Shubham-2k1/Exploit-CVE-2011-2523","title":"Shubham-2k1/Exploit-CVE-2011-2523","date":"2024-03-05","url":"https://github.com/Shubham-2k1/Exploit-CVE-2011-2523"},{"source":"pocgithub","id":"Tenor-Z/SmileySploit","title":"Tenor-Z/SmileySploit","date":"2024-04-23","url":"https://github.com/Tenor-Z/SmileySploit"},{"source":"pocgithub","id":"0xB0y426/CVE-2011-2523-PoC","title":"0xB0y426/CVE-2011-2523-PoC","date":"2024-05-27","url":"https://github.com/0xB0y426/CVE-2011-2523-PoC"},{"source":"pocgithub","id":"AnugiArrawwala/CVE-Research","title":"AnugiArrawwala/CVE-Research","date":"2024-07-03","url":"https://github.com/AnugiArrawwala/CVE-Research"},{"source":"pocgithub","id":"Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit","title":"Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit","date":"2024-08-03","url":"https://github.com/Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit"},{"source":"pocgithub","id":"Lychi3/vsftpd-backdoor","title":"Lychi3/vsftpd-backdoor","date":"2025-02-19","url":"https://github.com/Lychi3/vsftpd-backdoor"},{"source":"pocgithub","id":"vedpakhare/vsftpd-234-vuln-report","title":"vedpakhare/vsftpd-234-vuln-report","date":"2025-04-05","url":"https://github.com/vedpakhare/vsftpd-234-vuln-report"},{"source":"pocgithub","id":"cybermads/CVE-2011-2523","title":"cybermads/CVE-2011-2523","date":"2025-04-06","url":"https://github.com/cybermads/CVE-2011-2523"},{"source":"pocgithub","id":"sug4r-wr41th/CVE-2011-2523","title":"sug4r-wr41th/CVE-2011-2523","date":"2025-04-12","url":"https://github.com/sug4r-wr41th/CVE-2011-2523"},{"source":"pocgithub","id":"JohanMV/explotacion-vsftpd-nmap_Laboratorio_1","title":"JohanMV/explotacion-vsftpd-nmap_Laboratorio_1","date":"2025-04-14","url":"https://github.com/JohanMV/explotacion-vsftpd-nmap_Laboratorio_1"},{"source":"pocgithub","id":"lghost256/vsftpd234-exploit","title":"lghost256/vsftpd234-exploit","date":"2025-06-19","url":"https://github.com/lghost256/vsftpd234-exploit"},{"source":"pocgithub","id":"hklabCR/CVE-2011-2523","title":"hklabCR/CVE-2011-2523","date":"2025-07-06","url":"https://github.com/hklabCR/CVE-2011-2523"},{"source":"pocgithub","id":"krill-x7/CVE-2011-2523","title":"krill-x7/CVE-2011-2523","date":"2025-07-12","url":"https://github.com/krill-x7/CVE-2011-2523"},{"source":"nuclei","id":"CVE-2011-2523","title":"VSFTPD 2.3.4 - Backdoor Command Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml"}],"exploits_more":45,"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"vsftpd","product":"vsftpd"},{"vendor":"vsftpd_project","product":"vsftpd"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2011-2523","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2011-2523","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2011/07/11/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2523"},{"url":"https://github.com/advisories/GHSA-qf3g-hgw2-8r8h"}],"sources":{"cve":[{"id":"CVE-2011-2523","description":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.","status":"published","published":"2019-11-27T20:36:53Z","modified":"2024-08-06T23:00:34.246Z","updated_at":"2026-11-02T14:35:36.968002Z"}],"euvd":[{"id":"EUVD-2011-2508","description":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.","status":"published","published":"2019-11-27T20:36:53Z","modified":"2024-08-06T23:00:34Z","updated_at":"2026-11-03T01:39:55.11051Z"}],"ghsa":[{"id":"GHSA-qf3g-hgw2-8r8h","title":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...","description":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.","status":"published","published":"2022-04-22T00:24:20Z","modified":"2023-01-27T05:02:08Z","cwes":["CWE-78"],"updated_at":"2026-11-02T14:42:01.451226Z"}],"nvd":[{"id":"CVE-2011-2523","description":"vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.","status":"published","published":"2019-11-27T21:15:12.387Z","modified":"2026-06-16T23:31:30.717Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:02:12.945371Z"}]}}