CVE-2011-2523
HIGH 10.0EPSS 96.2%
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 96.18% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- critical · CWE-78
- Published
- 2019-11-27
- Updated
- 2024-08-06
Proof-of-concept exploits (75)
- https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html
- 0xB0y426/CVE-2011-2523-PoC0★ · 2024-05-27
- 0xFTW/CVE-2011-25232★ · 2023-02-05
- 0xSojalSec/-CVE-2011-25230★ · 2022-06-09
- 0xSojalSec/CVE-2011-25230★ · 2022-06-04
- 4m3rr0r/CVE-2011-2523-poc4★ · 2023-11-28
- 5k1pp/Red-Team-Engagement-Simulation2★ · 2023-08-17
- Abu-Siddiq518/VAPT-Cybersecurity-Projects-0★ · 2025-08-29
- Atiwitch15101/vsftpd-2.3.4-Exploit0★ · 2024-05-16
- BolivarJ/CVE-2011-25234★ · 2025-08-11
- Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit2★ · 2024-08-03
- GodZer/exploit_vsftpd_backdoor0★ · 2023-11-06
- Gr4ykt/CVE-2011-25230★ · 2021-08-31
- Hellsender01/vsftpd_2.3.4_Exploit25★ · 2024-07-24
- HerculesRD/vsftpd2.3.4PyExploit0★ · 2021-04-12
- It-iandeepak/CEH-Project0★ · 2025-05-20
- JFPineda79/Red-Team-Engagement-Simulation2★ · 2023-08-17
- JohanMV/explotacion-vsftpd-nmap_Laboratorio_10★ · 2025-04-14
- LOCK-0N/CVE-2011-25234★ · 2023-05-09
- Lychi3/vsftpd-backdoor0★ · 2025-02-20
- Lynk4/CVE-2011-25234★ · 2023-05-09
- MFernstrom/OffensivePascal-CVE-2011-25232★ · 2022-05-28
- NnickSecurity/vsftpd_backdoor_exploit0★ · 2023-07-08
- Prachi-Sharma-git/Exploit_FTP0★ · 2023-05-18
- R3verseIN/simple_vsftpd_2.3.4_exploit0★ · 2025-07-26
- R4idB0Y/CVE-2011-2523-PoC0★ · 2024-05-27
- Sayantan2005/vsftpd-2.3.40★ · 2025-07-29
- Shubham-2k1/Exploit-CVE-2011-25230★ · 2024-03-05
- Tamarasza999/main0★ · 2026-03-20
- Tamarasza999/web-net-exploit0★ · 2025-06-27
- Tenor-Z/SmileySploit0★ · 2024-04-23
- TheMangoMamba/metasploitable-vsftpd0★ · 2025-08-19
- TheMatrix97/Insecure-WebStack1★ · 2025-11-05
- Uno13x/CVE-2011-2523-PoC0★ · 2024-05-27
- VS-cyber-sec/metasploitable2-exploit0★ · 2025-09-01
- YellowFederica/MTD-with-SDN1★ · 2024-08-29
- aeg-hit/PwnGPT38★ · 2026-06-08
- bobberto99/MTD-with-SDN0★ · 2025-01-18
- bongguy09/Simulating-Real-World-Network-Exploitation-and-Defenses0★ · 2025-05-18
- cowsecurity/CVE-2011-25232★ · 2023-02-05
- csk/unisecbarber5★ · 2018-01-08
- cybermads/CVE-2011-25231★ · 2025-04-06
- deepdarkworld/EXPLOIT_CVE0★ · 2024-01-13
- delsawright/Hotel-Dorsey-Penetration-Test---vsftpd-2.3.4-Exploit0★ · 2025-07-25
- dreighton90/megacorpone-penetration-test0★ · 2026-03-16
- hklabCR/CVE-2011-25230★ · 2025-07-06
- jaytiwari05/vsftpd_2.3.4_Exploit0★ · 2024-04-22
- knightc0de/vsFTPD_exploit_2.3.40★ · 2025-06-15
- krill-x7/CVE-2011-25231★ · 2025-07-15
- lghost256/vsftpd234-exploit0★ · 2025-06-19
- madanokr001/CVE-2011-25231★ · 2025-04-06
- maherjas/AI-VSFTPD-Exploit0★ · 2025-02-14
- mjay2992/Vulnerability-Exploitation-Project0★ · 2025-08-27
- muzamilhussain02/metasploitable2-exploitation0★ · 2025-07-23
- naufalazhar65/ETHICAL-HACKING-DOCS1★ · 2026-08-28
- nobodyatall648/CVE-2011-25233★ · 2021-06-25
- padsalatushal/CVE-2011-252315★ · 2023-01-08
- paralax/ObsidianSailboat44★ · 2022-06-27
- salmananur/metasploitable-vsftpd0★ · 2025-08-19
- samurai411/toolbox1★ · 2024-05-10
- sanskar30/vsftpd_2.3.4_Exploit0★ · 2022-12-03
- sug4r-wr41th/CVE-2011-25230★ · 2025-04-12
- sunzu94/vsftpd_2.3.4_Exploit0★ · 2023-12-13
- tarikemal/exploit-ftp-samba0★ · 2023-12-09
- thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit1★ · 2024-05-30
- vaishnavucv/CVE-2011-25230★ · 2024-10-22
- ByteForgeFr/CVE-2011-2523
- Chathura123git/ethical-hacking-CVE-2011-2523
- Dahalsamir/CVE-2011-2523-exploit
- Gvln-S/CVE-2011-2523
- H4R335HR/vsftpd-234-backdoor
- IvoAlbacete/Kali-Metasploitable
- RinAliyeva/metasploitable2-vsftpd-exploitation
- brettsm/vsftpd2.3.4-backdoor-exploit
- tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution