CVE search · CVE-2010-20103
CVE-2010-20103
critical 9.3
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- disclosure@vulncheck.com
- Weakness
- CWE-912
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | critical 9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
disclosure@vulncheck.comSecondary |
| CVSS 3.1 | critical 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- proftpd · proftpd
References
- http://www.proftpd.org/Product
- https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html/Third Party Advisory
- https://github.com/proftpd/proftpdProduct
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rbExploitThird Party Advisory
- https://web.archive.org/web/20111107212129/http://rsync.proftpd.org/Release Notes
- https://www.exploit-db.com/exploits/15662ExploitVDB Entry
- https://www.exploit-db.com/exploits/16921ExploitVDB Entry
- https://www.vulncheck.com/advisories/proftpd-backdoor-command-executionThird Party Advisory
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rbExploitThird Party Advisory
- https://www.exploit-db.com/exploits/15662ExploitVDB Entry
- https://www.exploit-db.com/exploits/16921ExploitVDB Entry