CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Source

https://github.com/MFernstrom/OffensivePascal-CVE-2011-2523

Associated Vulnerability

Title:vsftpd 操作系统命令注入漏洞 (CVE-2011-2523)
Description:vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Description

FreePascal implementation of the vsFTPD 2.3.4 CVE-2011-2523

Readme

# CVE-2011-2523
FreePascal implementation of CVE-2011-2523

## Vulnerability
### vsFTPD 2.3.4
Using :) in the username opens a backdoor as root on port 6200 on the target

## Requirements
Synapse. If you don't have it, install through the OPM

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!