CVE-2011-2523
CRITICAL 9.8EPSS 96.2%
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
- Affected
- vsftpd
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 96.18% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- critical · CWE-78
- Published
- 2019-11-27
- Updated
- 2024-08-06
Proof-of-concept exploits (83)
- https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html
- 0xB0y426/CVE-2011-2523-PoC0★ · 2024-05-27
- 0xFTW/CVE-2011-25232★ · 2023-02-05
- 0xSojalSec/-CVE-2011-25230★ · 2022-06-09
- 0xSojalSec/CVE-2011-25230★ · 2022-06-04
- 4m3rr0r/CVE-2011-2523-poc4★ · 2023-11-28
- 5k1pp/Red-Team-Engagement-Simulation2★ · 2023-08-17
- Abu-Siddiq518/VAPT-Cybersecurity-Projects-0★ · 2025-08-29
- Atiwitch15101/vsftpd-2.3.4-Exploit0★ · 2024-05-16
- BolivarJ/CVE-2011-25234★ · 2025-08-11
- Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit2★ · 2024-08-03
- GodZer/exploit_vsftpd_backdoor0★ · 2023-11-06
- Gr4ykt/CVE-2011-25230★ · 2021-08-31
- Hellsender01/vsftpd_2.3.4_Exploit25★ · 2024-07-24
- HerculesRD/vsftpd2.3.4PyExploit0★ · 2021-04-12
- It-iandeepak/CEH-Project0★ · 2025-05-20
- JFPineda79/Red-Team-Engagement-Simulation2★ · 2023-08-17
- LOCK-0N/CVE-2011-25235★ · 2023-05-09
- Lychi3/vsftpd-backdoor0★ · 2025-02-20
- Lynk4/CVE-2011-25235★ · 2023-05-09
- MFernstrom/OffensivePascal-CVE-2011-25232★ · 2022-05-28
- NnickSecurity/vsftpd_backdoor_exploit0★ · 2023-07-08
- Prachi-Sharma-git/Exploit_FTP0★ · 2023-05-18
- R3verseIN/simple_vsftpd_2.3.4_exploit0★ · 2025-07-26
- R4idB0Y/CVE-2011-2523-PoC0★ · 2024-05-27
- Sayantan2005/vsftpd-2.3.40★ · 2025-07-29
- Shubham-2k1/Exploit-CVE-2011-25230★ · 2024-03-05
- Tamarasza999/main0★ · 2026-03-20
- Tamarasza999/web-net-exploit0★ · 2025-06-27
- Tenor-Z/SmileySploit0★ · 2024-04-23
- TheMangoMamba/metasploitable-vsftpd0★ · 2025-08-19
- TheMatrix97/Insecure-WebStack1★ · 2025-11-05
- Uno13x/CVE-2011-2523-PoC0★ · 2024-05-27
- VS-cyber-sec/metasploitable2-exploit0★ · 2025-09-01
- YellowFederica/MTD-with-SDN1★ · 2024-08-29
- aeg-hit/PwnGPT40★ · 2026-06-08
- bobberto99/MTD-with-SDN0★ · 2025-01-18
- bongguy09/Simulating-Real-World-Network-Exploitation-and-Defenses0★ · 2025-05-18
- cowsecurity/CVE-2011-25232★ · 2023-02-05
- csk/unisecbarber5★ · 2018-01-08
- cybermads/CVE-2011-25231★ · 2025-04-06
- deepdarkworld/EXPLOIT_CVE0★ · 2024-01-13
- delsawright/Hotel-Dorsey-Penetration-Test---vsftpd-2.3.4-Exploit0★ · 2025-07-25
- dreighton90/megacorpone-penetration-test0★ · 2026-03-16
- hklabCR/CVE-2011-25230★ · 2025-07-06
- jaytiwari05/vsftpd_2.3.4_Exploit0★ · 2024-04-22
- knightc0de/vsFTPD_exploit_2.3.40★ · 2025-06-15
- krill-x7/CVE-2011-25231★ · 2025-07-15
- lghost256/vsftpd234-exploit0★ · 2025-06-19
- madanokr001/CVE-2011-25231★ · 2025-04-06
- maherjas/AI-VSFTPD-Exploit0★ · 2025-02-14
- mjay2992/Vulnerability-Exploitation-Project0★ · 2025-08-27
- muzamilhussain02/metasploitable2-exploitation0★ · 2025-07-23
- naufalazhar65/ETHICAL-HACKING-DOCS1★ · 2026-08-28
- nobodyatall648/CVE-2011-25233★ · 2021-06-25
- padsalatushal/CVE-2011-252315★ · 2023-01-08
- paralax/ObsidianSailboat44★ · 2022-06-27
- salmananur/metasploitable-vsftpd0★ · 2025-08-19
- samurai411/toolbox1★ · 2024-05-10
- sanskar30/vsftpd_2.3.4_Exploit0★ · 2022-12-03
- sug4r-wr41th/CVE-2011-25230★ · 2025-04-12
- sunzu94/vsftpd_2.3.4_Exploit0★ · 2023-12-13
- tarikemal/exploit-ftp-samba0★ · 2023-12-09
- thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit1★ · 2024-05-30
- vaishnavucv/CVE-2011-25230★ · 2024-10-22
- ByteForgeFr/CVE-2011-25231★ · 2026-05-15
- Chathura123git/ethical-hacking-CVE-2011-25230★ · 2026-05-23
- Dahalsamir/CVE-2011-2523-exploit0★ · 2026-04-04
- Gvln-S/CVE-2011-25230★ · 2026-08-27
- H4R335HR/vsftpd-234-backdoor0★ · 2026-06-05
- IvoAlbacete/Kali-Metasploitable0★ · 2026-04-29
- RinAliyeva/metasploitable2-vsftpd-exploitation0★ · 2026-04-18
- brettsm/vsftpd2.3.4-backdoor-exploit0★ · 2026-03-19
- tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution0★ · 2026-01-26
- JUN41DS2709/vsFTPd-2.3.4-Exploit1★ · 2026-09-02
- aboubacar70/LAB1-metasploitable0★ · 2026-09-02
- mohammadibrahimop/cyber-kill-chain0★ · 2026-09-10
- rushikesh-a-bhujbal/CVE-2011-25230★ · 2026-09-22
- zainezw/metasploitable2-vsftpd-exploit0★ · 2026-09-25
- sagarjain0456/Metasploit-Project-using-KaliLinux-plus-Metasploitable2-VMs0★ · 2026-10-04
- Maalfer/vsftpd-2.3.4-exploit5★ · 2026-10-09
- HibaShaik13/Task4-Exploitation-SystemSecurity0★ · 2026-10-09
- Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit5★ · 2026-10-09
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (2)
Exploit collections (1)
- CVE-2011-2523.yamlzan8in/afrog
Security advisories
- https://access.redhat.com/security/cve/cve-2011-2523
- https://security-tracker.debian.org/tracker/CVE-2011-2523
- https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805
- https://www.openwall.com/lists/oss-security/2011/07/11/5