CVE-2011-2523

Description

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Affected products

Vendor	Product	Affected	Fixed
vsftpd	vsftpd	2.3.4 downloaded between 20110630 and 20110703	—

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

VSFTPD 2.3.4 Backdoor Command Execution
exploit/unix/ftp/vsftpd_234_backdoor

Exploit-DB 2

vsftpd 2.3.4 - Backdoor Command Execution EDB-49757 · remote · Apr 12, 2021 · verified
vsftpd 2.3.4 - Backdoor Command Execution (Metasploit) EDB-17491 · remote · Jul 5, 2011 · verified

GitHub 72 repositories · most starred shown

padsalatushal/CVE-2011-2523 ★ 15 · Nov 7, 2021

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution
Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit ★ 5 · Nov 19, 2025

Exploit para explotar la vulnerabilidad CVE-2011-2523 presente en la versión 2.3.4 de vsftpd.
Lynk4/CVE-2011-2523 ★ 5 · May 9, 2023

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution
BolivarJ/CVE-2011-2523 ★ 4 · Aug 11, 2025

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution
4m3rr0r/CVE-2011-2523-poc ★ 4 · Nov 28, 2023

Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)
nobodyatall648/CVE-2011-2523 ★ 3 · May 1, 2021

vsftpd 2.3.4 Backdoor Exploit
vedpakhare/vsftpd-234-vuln-report ★ 2 · Apr 5, 2025

Vulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit. Full report and proof of root access included.
Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit ★ 2 · Aug 3, 2024

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4
cowsecurity/CVE-2011-2523 ★ 2 · Feb 5, 2023

CVE-2011-2523 exploit
MFernstrom/OffensivePascal-CVE-2011-2523 ★ 2 · May 27, 2022

FreePascal implementation of the vsFTPD 2.3.4 CVE-2011-2523

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

VSFTPD 2.3.4 - Backdoor Command Execution network/cves/2011/CVE-2011-2523.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.