Critical severity9.8NVD Advisory· Published Aug 20, 2025· Updated Jul 15, 2026
CVE-2010-20103
CVE-2010-20103
Description
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ProFTPD Project/ProFTPD (Professional FTP Daemon)v5Range: 1.3.3c
Patches
Vulnerability mechanics
References
7- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rbnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/15662nvdExploitVDB Entry
- www.exploit-db.com/exploits/16921nvdExploitVDB Entry
- advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html/nvdThird Party Advisory
- www.vulncheck.com/advisories/proftpd-backdoor-command-executionnvdThird Party Advisory
- www.proftpd.orgnvdProduct
- web.archive.org/web/20111107212129/http://rsync.proftpd.org/nvdRelease Notes
News mentions
0No linked articles in our index yet.