Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2011-2523

created 2 months ago

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor …

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

References

https://security-tracker.debian.org/tracker/CVE-2011-2523 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2011-2523 x_transferredx_refsource_MISC
[oss-security] 20110711 Re: vsftpd download backdoored mailing-listx_transferredx_refsource_MLIST
https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 x_transferredx_refsource_MISC
https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Exec… x_transferredx_refsource_MISC
http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execu… x_transferredx_refsource_MISC

Affected products

vsftpd

==2.3.4 downloaded between 20110630 and 20110703

Matching in nixpkgs

pkgs.vsftpd

Very secure FTP daemon

nixos-unstable 3.0.5
- nixpkgs-unstable 3.0.5
- nixos-unstable-small 3.0.5
nixos-25.11 3.0.5
- nixos-25.11-small 3.0.5
- nixpkgs-25.11-darwin 3.0.5

Package maintainers

@peterhoeg Peter Hoeg <peter@hoeg.com>