CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Source

https://github.com/madanokr001/CVE-2011-2523

Associated Vulnerability

Title:vsftpd 操作系统命令注入漏洞 (CVE-2011-2523)
Description:vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Readme

# Vsftpd 2.3.4 백도어 취약점

![image](https://github.com/user-attachments/assets/71c66c82-bd94-4c59-8c08-003fbe3d7f7e)

# Vulnerability
**해커가 USER 매개변수에 :)를 추가하는 문자열을 입력했을 때 포트 6200 에서 백도어가 열림**

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →