Suggestions search

Untriaged

Filter by:

With package: vsftpd

Found 2 matching suggestions

View:

Compact

Detailed

Permalink CVE-2011-2523

created 2 months ago

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor …

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

References

https://security-tracker.debian.org/tracker/CVE-2011-2523 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2011-2523 x_transferredx_refsource_MISC
[oss-security] 20110711 Re: vsftpd download backdoored mailing-listx_transferredx_refsource_MLIST
https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 x_transferredx_refsource_MISC
https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Exec… x_transferredx_refsource_MISC
http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execu… x_transferredx_refsource_MISC

Affected products

vsftpd

==2.3.4 downloaded between 20110630 and 20110703

Matching in nixpkgs

pkgs.vsftpd

Very secure FTP daemon

nixos-unstable 3.0.5
- nixpkgs-unstable 3.0.5
- nixos-unstable-small 3.0.5
nixos-25.11 3.0.5
- nixos-25.11-small 3.0.5
- nixpkgs-25.11-darwin 3.0.5

Package maintainers

@peterhoeg Peter Hoeg <peter@hoeg.com>

Permalink CVE-2025-14242

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 3 months ago

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence.