Vulnerabilities CVE-2010-20103

CVE-2010-20103

Critical

Open

TLP:CLEAR

ProFTPD 1.3.3c Backdoor Command Execution

NVD CVE.org

Critical Infrastructure Backdoor / C2

AI Analysis

No AI analysis yet.

Description

A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.

Details

CVSS Score: 9.3
EPSS Score ⓘ: 5.09%

91.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 20, 2025
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.